Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://aolserv.pages.dev/robots.txtIP:

Overview

General Information

Sample URL:	https://aolserv.pages.dev/robots.txtIP:
Analysis ID:	1402259
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded SVGs detected

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Invalid T&C link found

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 4136 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2260 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8684 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aolserv.pages.dev/robots.txtIP: MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://aolserv.pages.dev/robots.txtIP:	Avira URL Cloud: detection malicious, Label: phishing
Source: https://aolserv.pages.dev/robots.txtIP:	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Phishing site detected (based on logo match)

Source: https://aolserv.pages.dev/robots.txtIP:

Matcher: Template: aol matched

Source: https://aolserv.pages.dev/robots.txtIP:

HTTP Parser: Number of links: 0

Source: https://aolserv.pages.dev/robots.txtIP:

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.aol.com/

HTTP Parser: Total embedded SVG size: 135084

Source: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

HTTP Parser: Base64 decoded: ai=Bf-b2LwflZd7rPM-GvPIPgdiH2ASv787JRgAAABABIKGboZoBOAFY4ZnJ44MEYMkGsgELd3d3LmFvbC5jb226AQlnZnBfaW1hZ2XIAQLaARRodHRwczovL3d3dy5hb2wuY29tL8ACAuACAOoCNS8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X2FzX3RvcF9yaWdodF9h-AKC0h6QA4wGmAOkA6gDAcgDmQTQBJBO4AQ...

Source: https://aolserv.pages.dev/robots.txtIP:

HTTP Parser: Title: AOL does not match URL

Source: https://aolserv.pages.dev/robots.txtIP:	HTTP Parser: Invalid link: Terms
Source: https://aolserv.pages.dev/robots.txtIP:	HTTP Parser: Invalid link: Privacy

Source: https://aolserv.pages.dev/robots.txtIP:

HTTP Parser: <input type="password" .../> found

Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?cid=8YHB8F956&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html	HTTP Parser: No favicon
Source: https://js-sec.indexww.com/um/ixmatch.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://hb.yahoo.net/cksync.php?cs=1&type=58267&ovsid=1783777331801413449	HTTP Parser: No favicon
Source: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dpba%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dpba%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dpba%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dpub%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dpub%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dpub%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dpub%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D%0A	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=5286816B-07A3-4831-82CF-92827DD7440E&redir=true&gdpr=0&gdpr_consent=&dcc=t	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25036%2C25278%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25033%2C25274%2C25276%2C25071%2C25202%2C25003%2C25245%2C25127%2C25006%2C25204%2C25126%2C25007%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3525099948919525000V10%26type%3Didx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=medianet	HTTP Parser: No favicon
Source: https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.aol.com%2F&tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&axids=gam%3Dy-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A%26dv360%3DeS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B%26ydsp%3Dy-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A%26tbla%3Dy-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=2056953496763385149&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=-Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUPH46U8&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141%2C460%2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUPH46U8&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141%2C460%2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:IKSGvoFb1RGVed5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1813050730410820489	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&redir=true&gdpr=0&gdpr_consent=&dcc=t	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=82450978-d9b5-11ee-a770-215513ae5a46	HTTP Parser: No favicon
Source: https://imasdk.googleapis.com/js/core/bridge3.624.0_en.html#goog_964178266	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html	HTTP Parser: No favicon
Source: https://contextual.media.net/cksync.php?cs=8&vsid=3525100008919577000V10&type=pba&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU0d427bac8188466daae7f5b623a0353a	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:e33b65e5-0744-4800-9e03-a305d43d5738&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:052965e5-0745-4000-9327-cb3c56f7de4d&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=q3P69gSJDFemduV8RQflZQ	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7627948201254899201	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=3lMj0GdRDKGXY9RtRgflZQ	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AALo807Lyg4AABQ6mW8RGQ&gdpr=0	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://hb.yahoo.net/checksync.php?cid=8YHB8F956&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://help.aol.com/	HTTP Parser: No favicon
Source: https://help.aol.com/	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://membernotifications.aol.com/offers/aolHelp/mobileazpage?cobrand=usaol	HTTP Parser: No favicon
Source: https://membernotifications.aol.com/offers/aolHelp/searchresults?cobrand=usaol	HTTP Parser: No favicon
Source: https://membernotifications.aol.com/offers/aolHelp/searchresults?cobrand=usaol	HTTP Parser: No favicon
Source: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-NB4W2NQ&cat=ad-free-mail&u29=aol&u9=ad-free-mail&u59=mbr_rusacqdsp00000691	HTTP Parser: No favicon
Source: https://checkoutnow.aol.com/swidget/v1/smart	HTTP Parser: No favicon
Source: https://8867627.fls.doubleclick.net/activityi;dc_pre=CKWH356f2YQDFQ0SdgYdYtwNUw;src=8867627;type=yahoo;cat=afaolmal;ord=6208305308593;gdpr=0;gdpr_consent=tcempty;npa=0;u1=hashedguid;u9=ad-free-mail;u29=aol;ps=1;pcor=737013112;pscdl=noapi;gtm=45fe42t1z8860054492za201;gcs=G1--;gcd=13l3l3l3l5;dma=0;tcfd=10e44;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-NB4W2NQ%26cat%3Dad-free-mail%26u29%3Daol%26u9%3Dad-free-mail%26u59%3Dmbr_rusacqdsp00000691?	HTTP Parser: No favicon
Source: https://13144298.fls.doubleclick.net/activityi;dc_pre=CIjD8p6f2YQDFQHDwgQdWMAMmg;src=13144298;type=aol;cat=afaolmal;ord=7618860228691;gdpr=0;gdpr_consent=tcempty;npa=0;u1=hashedguid;u2=usertype;u3=TestControl;u4=undefined;u9=ad-free-mail;u25=undefined;u26=undefined;u29=aol;u30=undefined;u55=undefined;u59=mbr_rusacqdsp00000691;ps=1;pcor=1935452063;pscdl=noapi;gtm=45fe42t1z8860054492za201;gcs=G1--;gcd=13l3l3l3l5;dma=0;tcfd=10e44;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-NB4W2NQ%26cat%3Dad-free-mail%26u29%3Daol%26u9%3Dad-free-mail%26u59%3Dmbr_rusacqdsp00000691?	HTTP Parser: No favicon

Source: https://aolserv.pages.dev/robots.txtIP:

HTTP Parser: No <meta name="author".. found

Source: https://aolserv.pages.dev/robots.txtIP:

HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:50149 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.95
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.17
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.17
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.17
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.17
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 104.102.251.17
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /robots.txtIP: HTTP/1.1Host: aolserv.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/3689655c0d5d523f0d4ae53b598de350d766716a/aol-main.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://aolserv.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/assets/images/ns/aol-logo-black-v.0.0.2.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aolserv.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/assets/images/ybar/aol-logo-white-v0.0.4.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aolserv.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/assets/images/ybar/aol-logo-white-v0.0.4.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/assets/images/ns/aol-logo-black-v.0.0.2.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-unchecked.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/wm/mbr/3689655c0d5d523f0d4ae53b598de350d766716a/aol-main.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/login/aol-favicon.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aolserv.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-unchecked.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/login/aol-favicon.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aolserv.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "b12b87cffdae1bc42b921fcf2bd9cf4c"If-Modified-Since: Fri, 04 May 2018 04:41:39 GMT
Source: global traffic	HTTP traffic detected: GET /wm/login/aol-favicon.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/login/aol-favicon.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "b12b87cffdae1bc42b921fcf2bd9cf4c"If-Modified-Since: Fri, 04 May 2018 04:41:39 GMT
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-1.0.170.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td-app-aol-production/assets/v1/css/layout/main.63032e2e.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td-app-aol-production/assets/v1/css/custom.5568c88c.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td-app-aol-production/assets/v1/css/layout/homepage_v2.551920c4.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/common.5a5e92d32c044529.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/dispatcher.35f949ab045720f0.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/notification_banner.ae48c4e59d83a951.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/dl.08352a25ed94dbaa.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/gam.865272a6dce058cc.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/stream.22fb406d30ff5624.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/weather.2b3ccc9b472fb30d.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/aol_header.bf9fd24ac2b8ca73.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/icons/elections-2024.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-06%2F77d38700-d9ed-11eb-be27-f7edbce29062&client=76f99bdb8f78cd44cc0b&signature=f681a4e420fd5eb2c85085401f6fad97b8f5c7d1 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-dl-1.6.3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/wafer-core.c214e816acc73cfb.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-toggle-1.15.4.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/polyfills.570a7e8b6540e7fd.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-tabs-1.12.6.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/vendor-glide.41c2233c6591d1e1.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-rapid-1.10.8.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/opensans/Open_Sans-Bold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/utils.9111c432fb133fce.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/large/26-cloudy.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-video-3.1.2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-image-1.4.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/video_player_wafer.26c9b9ee98384ac4.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/dispatcher.707ae9824ebcbc09.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/notification_banner.915ccd933b879101.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-module-2.0.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/gam.09f1193fa836b536.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/dl.e4ad001a9e7c47e8.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/recipe_search.dc61a583417d3d7b.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.aol.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-text-1.2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-beacon-1.3.4.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-fetch-1.19.1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-bind-1.1.3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/analytics3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /os/yaft/yaft-0.3.29.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/yahoo_sports_scores.235d7d2342a55c51.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/stream.0842230e9f6170e2.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/readmo.8fd7554b79635ecb.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/finance_banner.a077410e98ae7689.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/y_finance_markets.daaf37e1adc7caf0.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/large/26-cloudy.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/icons/elections-2024.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-06%2F77d38700-d9ed-11eb-be27-f7edbce29062&client=76f99bdb8f78cd44cc0b&signature=f681a4e420fd5eb2c85085401f6fad97b8f5c7d1 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.aol.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/trivia_games.f80a4703a2826569.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oa/consent.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/26-cloudy.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/adbuilder/gemini.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-03%2Fc6f4ca70-8d7a-11eb-ba4d-ac4cbcde9ebe&client=76f99bdb8f78cd44cc0b&signature=cf2e2debdb6c1969bcf75b99825fbbfedfac7f4b HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cx/vzm/cs.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-6d742e966c.chunk.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/prod/evplayer.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kj/js/dispatcherWidget.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/26-cloudy.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/f10d509c/d3decajspqn3ue.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/adbuilder/gemini.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/taboola.87313c9f56a825ef.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/weather.0471daa01eb11e7b.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-03%2Fc6f4ca70-8d7a-11eb-ba4d-ac4cbcde9ebe&client=76f99bdb8f78cd44cc0b&signature=cf2e2debdb6c1969bcf75b99825fbbfedfac7f4b HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/news.655c91ed98665809.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/ad_blocker.6f82c6524c431d6f.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bidexchange.js?cid=8YHB8F956&version=12.1&dn=www.aol.com&ysection=main&yregion=US&ylang=en-US&ysite=aol&ydevice=desktop HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/aol_header.80818154f7e7aac9.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-12%2Fc9eafd50-7bd3-11ed-aebb-a0692bf76bce&client=76f99bdb8f78cd44cc0b&signature=be733232ca102f238005d227e03dafbaceccffe5 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=177ac960ba64a8abb0f463dbe9e209b3d20d649d HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=1000009&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508393487 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fdce58b70-6994-11ec-bbce-f76baafa31ca&client=76f99bdb8f78cd44cc0b&signature=8b20bbd0531958d16c29ca2e9e8e661d182b0bdb HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/aolHomepage/stickyFooter HTTP/1.1Host: membernotifications.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-04%2F761cfe70-deb2-11ed-8fff-6672c0d730ce&client=76f99bdb8f78cd44cc0b&signature=3e88644a0b664a16743aee5bc603aabc2307f5c2 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=ae507cb078909cbed31627771fd05c3f42bd428b HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/builds/1.3.9/evplayer.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/yahoo-aol-network/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-12%2Fc9eafd50-7bd3-11ed-aebb-a0692bf76bce&client=76f99bdb8f78cd44cc0b&signature=be733232ca102f238005d227e03dafbaceccffe5 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/metro/g/myy/rapidworker_1_2_0.0.2.js HTTP/1.1Host: www.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=a55197107cb3e922d2624bc588f9c497bb452282 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=f96c8983d15c2cd551b47caf27cd710ec77e61ad HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=1000009&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508393487 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=17F9765074314b78a30f4d41709508394
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F93412d20-245e-11eb-bfbb-1ba7d4a515e3&client=76f99bdb8f78cd44cc0b&signature=36aa3331b61a3ab35c58aca2ff4e86ae1c72c40c HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aa/templates/widget/bgImageStickyFooter/main.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooterAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=0ce860f1e66ab33504feea849bdc56f9987a9c41 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fbe863210-34b6-11eb-9fb7-2187cff1c470&client=76f99bdb8f78cd44cc0b&signature=cd7d9f6e5bc98fb19e3761f13bce648092a434ce HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/rapid3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooterAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooterAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-12%2Ff32d3a20-a01c-11ee-a4fb-2a31dca05260&client=76f99bdb8f78cd44cc0b&signature=d701f74e6d8efcc3b78ab05548e3fc9c7dc32afa HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/nes/dfs?itype=YHB&type=1&cid=8YHB8F956&dn=www.aol.com&cc=US&ugd=desktop&callback=window.advBidxc.pf_rtd&algo=exploitation HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /rx/ev/lib/comscore-6.3.5-min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksync.php?cid=8YHB8F956&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /aaq/pv/perf-vitals_2.1.1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F05264ae0-2b91-11eb-b77b-425c560e375a&client=76f99bdb8f78cd44cc0b&signature=105afc7a48dc8079c60c5060c13a01867cea77cc HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202402220101/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/tr5?abgroup=doc-client-width-4_var HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F41d3b880-3404-11eb-937b-3aacf54802f7&client=76f99bdb8f78cd44cc0b&signature=ab41e87f69cf3babf4095d9b8ba35b1a6bbdb360 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/builds/1.3.9/pframe.html HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=ac1c86f1c864869accf8544da530e03be9b801e8 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fd50a9120-3411-11eb-97bb-1084c5a79300&client=76f99bdb8f78cd44cc0b&signature=2e380cbe938a1f4b6b57c6cdf936e0516050112f HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9ff3de001884e92d939ae40d08e9b7109e31ec24 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-01%2Fc8e15350-aa80-11ee-bdbf-641468506b6f&client=76f99bdb8f78cd44cc0b&signature=1532bdc3ce1b36c5f1e1e6803f90c92ce686c25e HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/metadata/manifest.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/impl.20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=9
Source: global traffic	HTTP traffic detected: GET /aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=2a26e46583bfd12678b081b69fb7cca425c39052 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=177ac960ba64a8abb0f463dbe9e209b3d20d649d HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fdce58b70-6994-11ec-bbce-f76baafa31ca&client=76f99bdb8f78cd44cc0b&signature=8b20bbd0531958d16c29ca2e9e8e661d182b0bdb HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-04%2F761cfe70-deb2-11ed-8fff-6672c0d730ce&client=76f99bdb8f78cd44cc0b&signature=3e88644a0b664a16743aee5bc603aabc2307f5c2 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=ae507cb078909cbed31627771fd05c3f42bd428b HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nex/modules/weather/v1?isXHR=true&m_mode=json HTTP/1.1Host: www.aol.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
Source: global traffic	HTTP traffic detected: GET /nex/modules/news/v1/?m_mode=json&isXHR=true HTTP/1.1Host: www.aol.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=a55197107cb3e922d2624bc588f9c497bb452282 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=1000009&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508393487 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=17F9765074314b78a30f4d41709508394
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=f96c8983d15c2cd551b47caf27cd710ec77e61ad HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/builds/1.3.9/pframe.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-04%2F024bb600-bc29-11ec-be3f-c8aa85a55bda&client=76f99bdb8f78cd44cc0b&signature=b9513e72c8af6f42b1e2f462026b9e7c280d5a3a HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=5aa61d192ca3818eb6ba7e0db0dc91240b4ed0b6 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ucreative.php?cv=1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-09%2Fc1ee04e0-4dcd-11ee-97bf-83c5420da580&client=76f99bdb8f78cd44cc0b&signature=914d0608eb4f953292a2fc317324e981b551aa42 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FubvamaAftyHAO5MJFd90Vw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20190508%2F500x500%2Fraptors_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=5adab5dab53001d1bf80a106504ad949370eff11 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCFF0_QHZWgDjeadZBQlLag--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhornets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=69eddfe94a1ed0b365b7c3ed51b1ba0235428ce4 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/nes/player.js HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6sD.zWqcBkR1AuMMt3SD7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpistons_wbg.png&client=76f99bdb8f78cd44cc0b&signature=892e3f77c39c570076c33bd3d17c3a3d077eaff1 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=0ce860f1e66ab33504feea849bdc56f9987a9c41 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F93412d20-245e-11eb-bfbb-1ba7d4a515e3&client=76f99bdb8f78cd44cc0b&signature=36aa3331b61a3ab35c58aca2ff4e86ae1c72c40c HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fbe863210-34b6-11eb-9fb7-2187cff1c470&client=76f99bdb8f78cd44cc0b&signature=cd7d9f6e5bc98fb19e3761f13bce648092a434ce HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-12%2Ff32d3a20-a01c-11ee-a4fb-2a31dca05260&client=76f99bdb8f78cd44cc0b&signature=d701f74e6d8efcc3b78ab05548e3fc9c7dc32afa HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F05264ae0-2b91-11eb-b77b-425c560e375a&client=76f99bdb8f78cd44cc0b&signature=105afc7a48dc8079c60c5060c13a01867cea77cc HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDSYNC=19cw~2h3b; A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLX9izbkR2E3ylw0Xjvm9MA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2Fmagic_wbg.png&client=76f99bdb8f78cd44cc0b&signature=017c613f2f9352dfc32599f7308fc6338e568ab6 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLHd_1h13Yx5f.pZrF.YlPw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Ftrailblazers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bf7b50ac67ea7239e80e50d623f7202f3f25466d HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh6tcrfyHgrC03ICBoahgsA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fgrizzlies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=8366ef9893f0d8b51d992acf051eec22695c38fe HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FiiEErhUHtBJPZhhygpVeqg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181213%2F500x500%2Fnuggets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fcc40ea3f7b1d9c1f531bd8610e1a332967f1696 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fu.pqfa2q7DS.luzuhXi7JQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230905%2F500px%2Flakers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=b5102b8c22200b7c733d98e776f08546f58e5154 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FP2Lcp4ZIzhVhuQjVqH9yJA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191021%2F500x500%2Frockets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=8339d7b537e79acc2460e70ee7938168423d4456 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FgEMEg05RG7EAyPYgeoCKEg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190318%2F500x500%2Fsuns_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1ac189c890b767dc5ba2fede62df019e6086e563 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FI6DaBWv57W5cAMSJrdUW0w--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2F76ers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=cae8d7c451f50d2dd6da30979cae9ae2c7f3e628 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FhVlB1Dqn1zQNINKtkSF6Sg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191016%2F500x500%2Fwarriors_wbg.png&client=76f99bdb8f78cd44cc0b&signature=45837ce2b02ee90dac3330f0112247c56c9df4f9 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FmYPNdnSol61pq90EZA9nxA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fclippers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=c32b7cbdae600a46f74e47f8b8b2ce729197d76c HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-aa-2&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage HTTP/1.1Host: ncp-gw-video.media.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b"
Source: global traffic	HTTP traffic detected: GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=9
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FaWeb9EeSRk2NKVma2xejiw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fspurs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ecb227b63dd07f6db6e9782edaa510816609967 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuDR9Mwaq2Ewj20HNDbJCsg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fknicks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=425c28aa64f58f98097ebabb118cfcfeb80d8ffa HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh7O7IoQNTNmxvnzos4Dk_Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20220917%2F500x500%2Fcavaliers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=62839313912a33febdf193b8cf596ba44463a379 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FGZGEhZrM.ElkBBel7PyrkQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fthunder_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bbee72fc45aaf87f8593bcbf78061f6419c1c6f6 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2602&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25014&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2605&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25014&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2606&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25014&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2610&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25082&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /v1/video/sapi/streams/3caca4ca-191c-3933-bab5-595ca1d1495a?ad.pubfamily=aol&srid=2557576709&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=b9b3c6c5-2cd7-4937-8390-628222cda75f&region=US&site=aolhomepage&expb=aol-aa-2&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=bdud5hbm&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.3.9&try=1&failover_count=0&ads=ima&nad=0&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aolfrontpage&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1Host: video-api.yql.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25036%2C25278%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25033%2C25274%2C25276%2C25071%2C25202%2C25003%2C25245%2C25127%2C25006%2C25204%2C25126%2C25007%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=3589207970860027&correlator=145139669414128&eid=31081519%2C31081350%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202402220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_as_top_right_c%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a%2Cus_aol_hp_dt_top_center%2Cus_aol_hp_dt_mid_center&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x600%2C300x250%2C300x250%2C728x90%7C970x250%7C3x1%2C970x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1709508398540&adxs=-9%2C855%2C855%2C268%2C197&adys=-9%2C721%2C733%2C0%2C1841&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1%7C0%7C0%7C0%7C1&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.aol.com%2F&vis=1&psz=0x-1%7C300x600%7C300x600%7C1263x0%7C1121x290&msz=0x-1%7C300x600%7C300x0%7C1263x0%7C1121x290&fws=2%2C4%2C4%2C4%2C4&ohw=0%2C300%2C300%2C1263%2C1263&ga_vid=167189262.1709508399&ga_sid=1709508399&ga_hid=2079726794&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X2FzX3RvcF9yaWdodF9jIixbXV0sWyIvMjI4ODgxNTIyNzkvdXMvYW9sL2hwL2R0L3VzX2FvbF9ocF9kdF9hc190b3BfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL2FvbC9ocC9kdC91c19hb2xfaHBfZHRfYXNfdG9wX3JpZ2h0X2EiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X21pZF9jZW50ZXIiLFtdXV1dLG51bGwsM10.&dlt=1709508388026&idt=8752&prev_scp=loc%3Dtop_right%26noads%3D1%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_center%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0&cust_params=bucket%3Daol-aa-2%26colo%3Dus-east-1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Daol%26ver%3Dtd-app-aol%26pct%3Daolfrontpage%26pt%3Dhome%26spaceid%3D1197803361%26yrid%3D02r7skdiua1p4%26bka%3D0%26y_bx%3D
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2611&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25113&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2612&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25113&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2612&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25113&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2614&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25307&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FpT1ZXTGXyk96vcr3fKHXtA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181129%2F500x500%2Fnets3_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fd7a4e9572597087adb989684c757629a308c76a HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F51_f4QnCU8r4D1F_7XPNdQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fbucks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b6b15c2623764f5bc9deea68bb4e35729754770 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6zBU_wJNcAFiGnGb.42RrQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fwizards_wbg.png&client=76f99bdb8f78cd44cc0b&signature=834585294cb63f27e5a56fca336a13289db2965b HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fs1b.xLIhAHSp5WYuo1r1mQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20231120%2F500x500%2Fjazz_wbg.png&client=76f99bdb8f78cd44cc0b&signature=36a5d8fe3c3121052fc12b91fcf57994a0b7f32c HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FvxAd_migNyWyej2GLiLvRQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181212%2F500x500%2Fbulls_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=cff5d8d9a6572e4816d2fd3a3fb1bfa1900de6c2 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FKe39LUOwUzQN.gkOzB70lw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181220%2F500x500%2Fkings_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e6505ecf04d45160caf54563bd8e44f5b1ace420 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUPH46U8&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141%2C460%2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2615&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25307&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2616&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25307&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F41d3b880-3404-11eb-937b-3aacf54802f7&client=76f99bdb8f78cd44cc0b&signature=ab41e87f69cf3babf4095d9b8ba35b1a6bbdb360 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=ac1c86f1c864869accf8544da530e03be9b801e8 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fd50a9120-3411-11eb-97bb-1084c5a79300&client=76f99bdb8f78cd44cc0b&signature=2e380cbe938a1f4b6b57c6cdf936e0516050112f HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2619&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25308&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FbCgWmLw50ojl92ZP0Q7KlQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181219%2F500x500%2Fheat_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=56444c2e5ec70e256d0295d87b9d4b83ec6307a8 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9ff3de001884e92d939ae40d08e9b7109e31ec24 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FMHkI0ocTdEcipo8RUUVItA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhawks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2c0289aeb083f0491025b87ca62a5aa4ef58a39e HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2617&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25308&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FADqUXlqn18KYlIyqLYgVQw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fpelicans_wbg.png&client=76f99bdb8f78cd44cc0b&signature=798c93b043435cd03be9ec1cd6c179c807780488 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-01%2Fc8e15350-aa80-11ee-bdbf-641468506b6f&client=76f99bdb8f78cd44cc0b&signature=1532bdc3ce1b36c5f1e1e6803f90c92ce686c25e HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b"
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=2a26e46583bfd12678b081b69fb7cca425c39052 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/tr5?abgroup=doc-client-width-4_var HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b"
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b"
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2620&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25308&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /rx/ev/builds/1.3.9/bcplayer.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2621&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25310&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2621&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25310&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2622&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25310&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCFF0_QHZWgDjeadZBQlLag--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhornets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=69eddfe94a1ed0b365b7c3ed51b1ba0235428ce4 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-04%2F024bb600-bc29-11ec-be3f-c8aa85a55bda&client=76f99bdb8f78cd44cc0b&signature=b9513e72c8af6f42b1e2f462026b9e7c280d5a3a HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=5aa61d192ca3818eb6ba7e0db0dc91240b4ed0b6 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatch?s=183875&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Didx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D_UID_ HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FubvamaAftyHAO5MJFd90Vw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20190508%2F500x500%2Fraptors_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=5adab5dab53001d1bf80a106504ad949370eff11 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dopx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=[object%20Object] HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cdn.taboola.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cdn.taboola.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-09%2Fc1ee04e0-4dcd-11ee-97bf-83c5420da580&client=76f99bdb8f78cd44cc0b&signature=914d0608eb4f953292a2fc317324e981b551aa42 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6sD.zWqcBkR1AuMMt3SD7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpistons_wbg.png&client=76f99bdb8f78cd44cc0b&signature=892e3f77c39c570076c33bd3d17c3a3d077eaff1 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2F462e6bf0-d9a6-11ee-8fdb-97e4a78cac99&client=76f99bdb8f78cd44cc0b&signature=80f3b8ccdec8c8efc49aee8b4ef4a62513d778c4 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/bsync?uid=4534c002537f77c2f55cc45a7f5f4c52&name=YAHOO&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dayl%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%5BUSERID%5D%26axid_e%3D HTTP/1.1Host: visitor.omnitagjs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_yahoo_sports_800%2F8dfffacdcd577e74bf580a75d703245c&client=76f99bdb8f78cd44cc0b&signature=3ba9c4ced0691ddc3ea96362f7352a2d0c1a2f4d HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=75394303&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_fox_news_text_745%2Fb024f429a6a4b2428f13a5458eb7adbc&client=76f99bdb8f78cd44cc0b&signature=5b0d6c665af85421414393b20dd9525d1315fce1 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us?gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&loc=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dson%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%5BUID%5D%26axid_e%3D HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dapx%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&cmp_cs=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dtlt%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3525100008919577000V10&type=son&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=[UID] HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dopx%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=1057752 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2605&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25014&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?cs=8&google_nid=media&google_cm=1&google_hm=MzUyNTEwMDAwODkxOTU3NzAwMFYxMA%3D%3D&google_sc=1&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2606&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25014&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=1057757 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2624&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=-3&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&pbAcid=234509328780378161709508396847&pbBidId=51788214373968621709508396881&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUPH46U8 HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3525100008919577000V10
Source: global traffic	HTTP traffic detected: GET /rtb/yhb?cid=8YHB8F956 HTTP/1.1Host: m.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2602&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25014&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-aa-2&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage HTTP/1.1Host: ncp-gw-video.media.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_people_articles_471%2Ff2816944f427428b6dbbce36b851f474&client=76f99bdb8f78cd44cc0b&signature=d09cabf23bc17090e996922db5bbf3be311a0dd6 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=16549579&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2610&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25082&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Ddxu%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=ef85e8cf2223994c333ea8e9159b98ffe0bc6080 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2628&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=-3&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&pbAcid=234509328780378161709508396847&pbBidId=85054260041171871709508396886&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLHd_1h13Yx5f.pZrF.YlPw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Ftrailblazers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bf7b50ac67ea7239e80e50d623f7202f3f25466d HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLX9izbkR2E3ylw0Xjvm9MA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2Fmagic_wbg.png&client=76f99bdb8f78cd44cc0b&signature=017c613f2f9352dfc32599f7308fc6338e568ab6 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2629&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=-3&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&pbAcid=234509328780378161709508396847&pbBidId=29440994237180501709508396887&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fu.pqfa2q7DS.luzuhXi7JQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230905%2F500px%2Flakers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=b5102b8c22200b7c733d98e776f08546f58e5154 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FP2Lcp4ZIzhVhuQjVqH9yJA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191021%2F500x500%2Frockets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=8339d7b537e79acc2460e70ee7938168423d4456 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58267&ovsid=1783777331801413449 HTTP/1.1Host: hb.yahoo.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh6tcrfyHgrC03ICBoahgsA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fgrizzlies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=8366ef9893f0d8b51d992acf051eec22695c38fe HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FiiEErhUHtBJPZhhygpVeqg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181213%2F500x500%2Fnuggets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fcc40ea3f7b1d9c1f531bd8610e1a332967f1696 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUPH46U8 HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3525100008919577000V10
Source: global traffic	HTTP traffic detected: GET /rtb/yhb?cid=8YHB8F956 HTTP/1.1Host: m.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3525099948919525000V10%26type%3Didx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
Source: global traffic	HTTP traffic detected: GET /8528a8ca9f4220ae15851111192c47cd.webp HTTP/1.1Host: de9a11s35xj3d.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3525100008919577000V10&type=rkt&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=1813050730410820489 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3525100008919577000V10
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsusXKVP2l_Sn2kNI6S1iCHQ-xacDw5n967RbE46SE-fncaCR0gR7pXZI0qd4emYvGHIY0y7k5y8BQM25gYfwToZwzNDWBnc23A2Z2yCaJLMj8Cg0y0-sqgeVzEHQ15ikN7651_99qnMgI_kLCWsRihwS7l-tacPPHZmBr0bcCX1i7w9qgOWR9ohqO0CNEm4I9o-32he_lNbsVdga_86fiKXj4ESk7McTM9bnv1gGRObSMoCG3HMaehs22a8xJOxRDOiKw0q4gnUb3n0b6NTtLU38MOR3scI_rJqOSlg_90ql-MMdDUA5budrroOF5-3-B_6Xgg2lElT7m_VHDxDhZkNYuNoz11T5wV2K3t4hO1TtPmBaW7zENpfhyWzCspQBQKty9TAX4Y4N_gF6dF_spbgsHl-3Z4&sai=AMfl-YTBQPBA10TAK-8oDnXhWJUONtBs3FkK-UDXnWG6Y57cBezJtgMNJ7pcDInUeS8sKTgDDedEQ9XJM8YKf1-CI8euABsVdNGtC3z6CqQ8lleX1WjCk_uXxIrYsuDkTjhKYaiJUx-WraJ14u7sftFU0Hg&sig=Cg0ArKJSzGHVxVi5TrMqEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F9bd8fadceb9b5eb9917c1c48de181771&client=76f99bdb8f78cd44cc0b&signature=59ab14b5e625248cf28afb5053ca5d32e497ded0 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fdd3f1af0-6985-11ec-bffd-65bff269a401&client=76f99bdb8f78cd44cc0b&signature=0b14194fa91554247f3b182be18f5c009196e427 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=d8586900015e214006818744f76d7ffdbd495d00 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1709508405916 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Ddxu%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=IKSGvoFb1RGVed5
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2668&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=771334461&pvid=-3&req_size=728x90%7C970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center&pbAcid=291303319049048931709508396925&pbBidId=19881000005188811709508396926&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FI6DaBWv57W5cAMSJrdUW0w--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2F76ers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=cae8d7c451f50d2dd6da30979cae9ae2c7f3e628 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FgEMEg05RG7EAyPYgeoCKEg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190318%2F500x500%2Fsuns_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1ac189c890b767dc5ba2fede62df019e6086e563 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=intentiq&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2673&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25014&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=google&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=43ce1147-64ef-42d3-81d6-21cfcb9531d7; c=1709508406; tuuid_lu=1709508406
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F2022136b017401181a8dbbdb1388592a&client=76f99bdb8f78cd44cc0b&signature=6c01f52bdd151aa1eefa1c3038c29a48e748304f HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2674&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25082&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2611&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25113&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FhVlB1Dqn1zQNINKtkSF6Sg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191016%2F500x500%2Fwarriors_wbg.png&client=76f99bdb8f78cd44cc0b&signature=45837ce2b02ee90dac3330f0112247c56c9df4f9 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FmYPNdnSol61pq90EZA9nxA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fclippers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=c32b7cbdae600a46f74e47f8b8b2ce729197d76c HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2675&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25307&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=media_force_communications_2007_ltd&google_hm=Q84RR2TvQtOB1iHPy5Ux1w==&no_redirect=1&google_cm=1&google_sc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F0e7c99eede3c65dbdfa94e708cbe3f3a&client=76f99bdb8f78cd44cc0b&signature=6501e3a1ec216a84f598237330a2a286f6998c01 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=son&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=2e1e420d-8454-4533-a1ab-2d47cb95dd71 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F36824bd1fd4d41014ce41b12a880833a&client=76f99bdb8f78cd44cc0b&signature=d2d0d0c6211286d34012cd7d6f5266200dd03b5d HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dopx%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=crt&ovsid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.aol.com%2F&tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&axids=gam%3Dy-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A%26dv360%3DeS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B%26ydsp%3Dy-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A%26tbla%3Dy-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b"
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tsdtocl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F6ef5be46479c981bdac4bb73b42d643c&client=76f99bdb8f78cd44cc0b&signature=bfc7d32d8d9dbfc92ecf53c0948be318dad2632c HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&event=player_init&time=1709508405310&autoplay=false&seq=0 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&usage=thumbnails!2.0.0&usage=qualityLevels!3.0.0&usage=qualityMenu!3.0.0&usage=inpage-embed&event=player_load&time=1709508405380&qos.events.content.volumechange=1709508405370&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=11490577&qos.performance.memory.totalJSHeapSize=17653853&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1709508396507&qos.performance.timing.loadEventStart=1709508396506&qos.performance.timing.domComplete=1709508396506&qos.performance.timing.domContentLoadedEventEnd=1709508396444&qos.performance.timing.domContentLoadedEventStart=1709508396444&qos.performance.timing.domInteractive=1709508396444&qos.performance.timing.domLoading=1709508395519&qos.performance.timing.responseEnd=1709508395508&qos.performance.timing.responseStart=1709508395387&qos.performance.timing.requestStart=1709508395215&qos.performance.timing.secureConnectionStart=1709508394978&qos.performance.timing.connectEnd=1709508395214&qos.performance.timing.connectStart=1709508394957&qos.performance.timing.domainLookupEnd=1709508394957&qos.performance.timing.domainLookupStart=1709508394832&qos.performance.timing.fetchStart=1709508394721&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1709508394719&qos.player.dimensions=%5B%5B1709508405380%2C%220x0%22%2C%22368x276%22%5D%5D&qos.player.pixelratio=%5B%5B1709508405380%2C1%5D%5D&qos.player.screendimensions=%5B%5B1709508405380%2C%221280x1024%22%5D%5D&seq=1 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=intentiq&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me HTTP/1.1Host: rtb-use.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1709508406; tuuid_lu=1709508406; tuuid=5e803909-7b6d-45a4-8be8-533d655de3d1
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b"; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
Source: global traffic	HTTP traffic detected: GET /rtb/yhb?cid=8YHB8F956 HTTP/1.1Host: m.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&ssp_user_id=3525100008919577000V10 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=ayl&refUrl=&vid=95083994863525099948919525000V10&ovsid=1c28c32b083001573fcc1989b44fa248&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAEYBSgCMgsI5pKg6YP53TwQBTgB
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=son&refUrl=&vid=95083994863525099948919525000V10&ovsid=22b49095-3dec-4c47-8a7b-1d7936dda128&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=con&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=AAAF_91Z8VIwGQMdv4qvAAAAAAA&expiration=1709594806&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8
Source: global traffic	HTTP traffic detected: GET /v1/video/sapi/streams/3caca4ca-191c-3933-bab5-595ca1d1495a?ad.pubfamily=aol&srid=2557576709&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=b9b3c6c5-2cd7-4937-8390-628222cda75f&region=US&site=aolhomepage&expb=aol-aa-2&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=bdud5hbm&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.3.9&try=1&failover_count=0&ads=ima&nad=0&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aolfrontpage&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1Host: video-api.yql.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2675&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25308&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2612&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25113&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348145722112&time=1709508405585&seq=2 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/google-topics-api.20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35.es6.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=9; t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2676&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=-3&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&pbAcid=350543395124497111709508396929&pbBidId=31161139041156191709508396934&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=dxu&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=IKSGvoFb1RGVed5 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dtlt%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=205552980141694412277
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; receive-cookie-deprecation=1; uuid2=2056953496763385149
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=gptslog&itype=YHB&tElp=4346&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&sid=top_right_0&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c_0&szs=300x600&tp=loc%3Dtop_right%7Cnoads%3D1&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=&btm=&lft=&rght=&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=top_right_1&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b_0&szs=300x250&tp=loc%3Dtop_right&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=121&btm=721&lft=855.3125&rght=1155.3125&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=top_right_2&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a_0&szs=300x250&tp=loc%3Dtop_right&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=733&btm=733&lft=855.3125&rght=1155.3125&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=horizon-e2e&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center_0&szs=728x90%7C970x250%7C3x1&tp=loc%3Dtop_center&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=0&btm=0&lft=0&rght=1263&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=mid_center&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_ao
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_the_hill_articles_315%2F832bdc7eaa27b3ad1dd61fb1de4d98ae&client=76f99bdb8f78cd44cc0b&signature=3aa299cb02c431ddc9f5f1b2db950faaf51d5655 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dopx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404
Source: global traffic	HTTP traffic detected: GET /log?logid=aplog&itype=YHB&tElp=4352&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&acid=409702088720264621709508396926&astat=&auMxTm=1400&actltime=1128&acwtime=1128&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=3x1%7C728x90%7C970x250&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center&sec=&chnl=&csent=1&zn=e&crid=771334461&g=0&nms=2&ptype=43&supcrid=us_aol_hp_dt_top_center&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=3x1%7C728x90%7C970x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=0&btm=0&lft=0&rght=1263&dspltime=1129&dfpDiv=horizon-e2e&lper=4&acid=213699153252948111709508396854&astat=&auMxTm=1400&actltime=1404&acwtime=1407&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=-1&agid%3C%3E=55636776151632581709508396855&asagid=55636776151632581709508396855&asbkt=v2&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=300x250&size=-1x-1&adtypes=2%7C0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=2%23%230&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&sec=&chnl=&csent=1&zn=e&crid=102615858&g=0&nms=1&ptype=43&supcrid=us_aol_hp_dt_as_top_right_a&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=300x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3A
Source: global traffic	HTTP traffic detected: GET /log?logid=aplog&itype=YHB&tElp=4352&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&acid=168655130584537831709508396930&astat=&auMxTm=1400&actltime=1407&acwtime=1407&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=1&agid%3C%3E=&asagid=&asbkt=&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=970x250&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&sec=&chnl=&csent=1&zn=e&crid=586167089&g=0&nms=2&ptype=43&supcrid=us_aol_hp_dt_mid_center&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=970x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22mid_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=1530.8125&btm=1820.8125&lft=121.90625&rght=1243&dspltime=1407&dfpDiv=mid_center&lper=4&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; receive-cookie-deprecation=1; uuid2=2056953496763385149
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2614&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25307&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAEYBSgCMgsI5pKg6YP53TwQBTgB
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3525100008919577000V10&type=opx&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=a470c6a3-f372-0895-098c-2413748bee6d HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&no_redirect=1&google_gid=CAESEHCGma9YkBLeeRR1TOzfYEc&google_cver=1 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1709508406; tuuid_lu=1709508406; tuuid=43ce1147-64ef-42d3-81d6-21cfcb9531d7; ssh=!google,1709508406
Source: global traffic	HTTP traffic detected: GET /track/cmf/casale?gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAEYBSgCMgsI5pKg6YP53TwQBTgB
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuDR9Mwaq2Ewj20HNDbJCsg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fknicks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=425c28aa64f58f98097ebabb118cfcfeb80d8ffa HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FaWeb9EeSRk2NKVma2xejiw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fspurs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ecb227b63dd07f6db6e9782edaa510816609967 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?c=72&r=2&j=TRC.getRTUS&us_privacy=1YNN&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=5286816B-07A3-4831-82CF-92827DD7440E&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=IQveALZHlnPGc8kXQNeadO_F
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=mn&ovsid=3525100008919577000V10&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2612&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25113&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssP9ZWoydsPxqYI_HwCe0lVWcUyYlDQIemS4De-36ppn4MedZ-5GhUyKfxjB3M1AemvsD7pfpmbkCUWHZ3Bp0cPQpp83YRsWjLMh0Gk3Go2TXHM4QWAV14E6ITmT1kzt3jn6EDEDabe78b5IWG9rbFHD0TDgL3PmwQIkvnGu8_rA4Skposw2U4CicTEoxaujM_wfgDB3Ux8_5-_9zXa2g-qZyV-agvemwD0rTbkFFkN8TZf56UkTTchdLyq19aXqmMkOyMrxdnzAf0snggbYjfVX_4FFGaKJapZLDYYkVhiwKVnwHxym4jN9Ck7YIleURLn0NM3m60d-tjHMm-ymLnehKpwkgae-E7ZQc7eOm6pLoVeti6m47pmCiE1yj0xyfs6UqU8ZnldNEDNxKg0CWaZDds0uqRAEQ&sai=AMfl-YTHWUfOdY2MMgVGf3wN5R2xsOUjPAsT5e5HIhvO7E8DlP4g-BecPP_u3aK2RHX0tWjpF1roAC8kNAKAB-RqppMjJVX3X-K-NrS9lXlwvwhBqlIH1RinuqwoTP9h8267NzDxOdcFIiraYLEEXH-haa8&sig=Cg0ArKJSzO6VnUfeUIi4EAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=9db333fbfbd97c489dfb11e31107155b55541a73 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=58160&ovsid=LTC55UNV-1B-13RH&gdpr=0 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2616&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25307&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FGZGEhZrM.ElkBBel7PyrkQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fthunder_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bbee72fc45aaf87f8593bcbf78061f6419c1c6f6 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; c=1709508406; tuuid_lu=1709508406
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh7O7IoQNTNmxvnzos4Dk_Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20220917%2F500x500%2Fcavaliers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=62839313912a33febdf193b8cf596ba44463a379 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?gpp=DBAA&gpp_sid=-1&cs=1&vsid=3525099948919525000V10&type=idx&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /s/31327?bidder_id=14481&bidder_uuid=ZeUHNEt3uSYAABBfAETINAAA%26015&gpdr=&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=5e803909-7b6d-45a4-8be8-533d655de3d1 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZeUHNEt3uSYAABBfAETINAAA%26015 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F134e3c2d76e50e2077e2333085803fe5&client=76f99bdb8f78cd44cc0b&signature=1a4991d023817a51a24a317737b8d7a9a50e740c HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2615&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25307&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=5286816B-07A3-4831-82CF-92827DD7440E&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=205552980141694412277
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/5286816B-07A3-4831-82CF-92827DD7440E?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=5286816B-07A3-4831-82CF-92827DD7440E&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxNV-fG5j0rJiu04gbLQqFs\|t
Source: global traffic	HTTP traffic detected: GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=9; t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=UoaBawejSDGCz5KCfddEDg%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fhb.yahoo.net%252Fcksync.php%253Fcs%253D1%2526type%253Dapx%2526ovsid%253D%2524UID%2526axid_e%253D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; receive-cookie-deprecation=1; uuid2=2056953496763385149
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=5286816B-07A3-4831-82CF-92827DD7440E HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=1&vsid=3525099948919525000V10&type=pub&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1
Source: global traffic	HTTP traffic detected: GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ssp-sync.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCKSpudft-N08EAUYBSABKAIyCwjmkqDpg_ndPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=5286816B-07A3-4831-82CF-92827DD7440E&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b"
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=NTI4NjgxNkItMDdBMy00ODMxLTgyQ0YtOTI4MjdERDc0NDBF&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /playback/v1/accounts/6415665815001/videos/6348145722112 HTTP/1.1Host: edge-auth.api.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://s.yimg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FpT1ZXTGXyk96vcr3fKHXtA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181129%2F500x500%2Fnets3_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fd7a4e9572597087adb989684c757629a308c76a HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=IKSGvoFb1RGVed5; matchmedianet=5
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=55953&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; c=1709508406; tuuid_lu=1709508406
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F51_f4QnCU8r4D1F_7XPNdQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fbucks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b6b15c2623764f5bc9deea68bb4e35729754770 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fs1b.xLIhAHSp5WYuo1r1mQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20231120%2F500x500%2Fjazz_wbg.png&client=76f99bdb8f78cd44cc0b&signature=36a5d8fe3c3121052fc12b91fcf57994a0b7f32c HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A11aqPOZCkc8owe-76Inpq0\|t
Source: global traffic	HTTP traffic detected: GET /usersync/113?gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=205552980141694412277
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=1&vsid=3525099948919525000V10&type=tlt&refUrl=&vid=95083994863525099948919525000V10&ovsid=205552980141694412277&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1
Source: global traffic	HTTP traffic detected: GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=opx&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=42982cb5-8018-083c-39e4-9b7751c788d8 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%205286816B-07A3-4831-82CF-92827DD7440E&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=DBAA&bidder_uuid=ZeUHNEt3uSYAABBfAETINAAA%26015&_li_chk=true&gpp_sid=-1&us_privacy=&gpdr=&previous_uuid=30dbf99058ab4bd6b77cdf8285912a1c HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=30dbf990-58ab-4bd6-b77c-df8285912a1c
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%207213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FKe39LUOwUzQN.gkOzB70lw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181220%2F500x500%2Fkings_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e6505ecf04d45160caf54563bd8e44f5b1ace420 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&expiration=1712100407&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FvxAd_migNyWyej2GLiLvRQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181212%2F500x500%2Fbulls_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=cff5d8d9a6572e4816d2fd3a3fb1bfa1900de6c2 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
Source: global traffic	HTTP traffic detected: GET /ups/58746/sync?ui=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=[object%20Object] HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=yahoo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2617&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25308&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
Source: global traffic	HTTP traffic detected: GET /usersync/turn/3064127177736580335?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
Source: global traffic	HTTP traffic detected: GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1Host: api.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=3589207970860027&correlator=145139669414128&eid=31081519%2C31081350%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202402220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_as_top_right_c%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a%2Cus_aol_hp_dt_top_center%2Cus_aol_hp_dt_mid_center&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x600%2C300x250%2C300x250%2C728x90%7C970x250%7C3x1%2C970x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1709508398540&adxs=-9%2C855%2C855%2C268%2C197&adys=-9%2C721%2C733%2C0%2C1841&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1%7C0%7C0%7C0%7C1&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.aol.com%2F&vis=1&psz=0x-1%7C300x600%7C300x600%7C1263x0%7C1121x290&msz=0x-1%7C300x600%7C300x0%7C1263x0%7C1121x290&fws=2%2C4%2C4%2C4%2C4&ohw=0%2C300%2C300%2C1263%2C1263&ga_vid=167189262.1709508399&ga_sid=1709508399&ga_hid=2079726794&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X2FzX3RvcF9yaWdodF9jIixbXV0sWyIvMjI4ODgxNTIyNzkvdXMvYW9sL2hwL2R0L3VzX2FvbF9ocF9kdF9hc190b3BfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL2FvbC9ocC9kdC91c19hb2xfaHBfZHRfYXNfdG9wX3JpZ2h0X2EiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X21pZF9jZW50ZXIiLFtdXV1dLG51bGwsM10.&dlt=1709508388026&idt=8752&prev_scp=loc%3Dtop_right%26noads%3D1%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_center%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0&cust_params=bucket%3Daol-aa-2%26colo%3Dus-east-1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Daol%26ver%3Dtd-app-aol%26pct%3Daolfrontpage%26pt%3Dhome%26spaceid%3D1197803361%26yrid%3D02r7skdiua1p4%26bka%3D0%26y_bx%3D
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCKSpudft-N08EAUYBSABKAIyCwjmkqDpg_ndPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=chPbtIxORfi6yCFJ0yqLHw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=mo68x8gjbJJi9doJz8TR
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=medianet&ssp_user_id=3525100008919577000V10 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid_lu=1709508407; ssh=!intentiq,1709508407; tuuid=3b652fc1-53a0-40de-ba73-a4ae557bd47f; c=1709508407
Source: global traffic	HTTP traffic detected: GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=sov&ovsid=IQveALZHlnPGc8kXQNeadO_F&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=4&external_user_id=4228731401736629831 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&type=apx&ovsid=2056953496763385149&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=NzIxM0RCQjQtOEM0RS00NUY4LUJBQzgtMjE0OUQzMkE4QjFG&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?gpp=DBAA&gpp_sid=-1&google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZeUHNEt3uSYAABBfAETINAAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2620&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25308&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
Source: global traffic	HTTP traffic detected: GET /sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic HTTP/1.1Host: a.sportradarserving.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=adb&refUrl=&vid=95083994863525099948919525000V10&ovsid=ZeUHNAAAAlu_8wAh&axid_e=&_test=ZeUHNAAAAlu_8wAh HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1
Source: global traffic	HTTP traffic detected: GET /sync?ssp=criteo&custom_data=YzXp-V9qdWFuQ2trRyUyRkRua0EzQjFTSFhHZm1WMjB6SUVHY3o1SXVWdDNyTG1RTkpadlFma3dka0hHQW8xbEhQVVhhaW5neHN3JTJGTURKUGh4RUlaOGtBNlBuV3FURW1qNklkNTRhMkZwUFhzZG5DcXlCeTElMkJUc2VKVSUyQjMwRmNsMXE3eEhZN01sbiUyRk1yOFUzbFVVQmw2VWt6NzM3dUVaREE1Y0JQRnRSVnlUTERDV3l2OVFINjA4YXIlMkJHWjBsTDYxdzJEdkc&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-2lV_f5hyr-U_3dvKgwvX52_tI86LV38FMRUpJQ HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; c=1709508406; tuuid_lu=1709508406
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2621&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25310&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=2056953496763385149&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; pi=156078:2; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6zBU_wJNcAFiGnGb.42RrQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fwizards_wbg.png&client=76f99bdb8f78cd44cc0b&signature=834585294cb63f27e5a56fca336a13289db2965b HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZeUHNEt3uSYAABBfAETINAAA%26015&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssum-sec.casalemedia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=QddgssbLiqrddLde9dvK_1709508408046; ts=1709508408
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FMHkI0ocTdEcipo8RUUVItA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhawks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2c0289aeb083f0491025b87ca62a5aa4ef58a39e HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2622&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25310&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2619&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25308&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
Source: global traffic	HTTP traffic detected: GET /pagead/js/car.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveAccept: application/javascriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
Source: global traffic	HTTP traffic detected: GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2621&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25310&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-nLNhotxE2uVq21nL64vd2.9J7PPx9gY-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1813050730410820489 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:IKSGvoFb1RGVed5&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.aol.com%2F HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://s.yimg.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348145722112&time=1709508408212&seq=3&response_time_ms=2627 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uu/api/res/1.2/PVU5gM.eKAfa6cKZLZNPDg--~B/Zmk9c3RyaW07aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_videos_177/755b42ce7295132b4d278d6cd57b891f HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=-Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&time=1709508408279&event=play_request&video_data=&video_ads_supported=false&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&seq=4_-1 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b:18z8~2h3b"
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1709508408278&event=video_impression&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=5_0&web_ad_info=%7B%22plugin%22%3A%22ima3%22%2C%22pluginVersion%22%3A%225.2.6%22%2C%22requestMode%22%3A%22onload%22%2C%22timeout%22%3A10000%7D&preload=metadata HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEAIvvYGKi3MwJbcEVt_pRgM&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /instream/video/client.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FbCgWmLw50ojl92ZP0Q7KlQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181219%2F500x500%2Fheat_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=56444c2e5ec70e256d0295d87b9d4b83ec6307a8 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=2056953496763385149&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; pi=156078:2; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/6s/master.m3u8?fastly_token=NjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://s.yimg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbnail/v1/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/thumbnail.webvtt?fastly_token=NjVlNTE1NDlfOTZjODI2YjczN2E3ZjNiYjU3ZGRmNzQwYjA2ZjdmM2VkZDNmOTJlNDdjZDU5ZjkyYjg5MjQzZjQwNDBmOTYzYw%3D%3D HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://s.yimg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=5e803909-7b6d-45a4-8be8-533d655de3d1&ckls=true&ci=IAEnIwC1hI&nc=false&trid=397624072 HTTP/1.1Host: sync1.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=IAEnIwC1hI
Source: global traffic	HTTP traffic detected: GET /verizonsync?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:9E6108CD113245DE8ED3EE8C2AE8D8CE HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /v1/evp/asset?bcid=5afc769f7239855a15fcee15&pid=5afc75ea3a04293dad9f1a1f&secure=true&rssId=3caca4ca-191c-3933-bab5-595ca1d1495a&firstVideo=true&height=276&width=368&sid=b9b3c6c5-2cd7-4937-8390-628222cda75f&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-aa-2&b_id=btnlfjdiua1pb&licensor_id=a0a6T00000R2KYJQA3&us_privacy=1YNN&isDockable=false&m.type=VOD&device=desktop&v=1&f=json&s2s=true&gdpr=false&content_len=68&content_title=Winter+storm+wreaks+havoc+across+Sierra+Nevadas&content_id=https%3A%2F%2Fwww.cnn.com%2Fvideos%2Fweather%2F2024%2F03%2F03%2Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn&gpp=DBAA&gpp_sid=-1&pver=1.3.9&aver=3.624.0&country=US&state=North+Carolina&ad.plseq=1&ad.pct=aolfrontpage&ad.pl=up&ad.pt=home&ad.pubfamily=aol&pos=preroll&evp=bcp&fmt=vmap&ps=bdud5hbm&r=https%3A%2F%2Fwww.aol.com%2F&givn=[GOOGLE_INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid= HTTP/1.1Host: tb.video.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic HTTP/1.1Host: a.sportradarserving.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuuid=9f772c54-4a6c-45eb-91e5-92ed9408d752; c=1709508409; zuuid_lu=1709508409
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FADqUXlqn18KYlIyqLYgVQw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fpelicans_wbg.png&client=76f99bdb8f78cd44cc0b&signature=798c93b043435cd03be9ec1cd6c179c807780488 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFNcl9rN0x5ZzRBQUJUcldCQ05kUQ&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Csyn%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2624&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=-3&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&pbAcid=234509328780378161709508396847&pbBidId=51788214373968621709508396881&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&type=spa&axid_e= HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25036%2C25278%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25033%2C25274%2C25276%2C25071%2C25202%2C25003%2C25245%2C25127%2C25006%2C25204%2C25126%2C25007%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
Source: global traffic	HTTP traffic detected: GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2629&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=-3&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&pbAcid=234509328780378161709508396847&pbBidId=29440994237180501709508396887&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1Host: lg1.hb.yahoo.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; PugT=1709508408
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=19400441&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; PugT=1709458559
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=3861fc3c-867b-43e0-b46a-259e2b0cd468&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; PugT=1709508408
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:CA2F41ACCA684739A1CE374B350A0FEF HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; PugT=1709508408
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2F462e6bf0-d9a6-11ee-8fdb-97e4a78cac99&client=76f99bdb8f78cd44cc0b&signature=80f3b8ccdec8c8efc49aee8b4ef4a62513d778c4 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=32039267&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_148=19421-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23486-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23489-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23539-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE; PugT=1709458560

Source: chromecache_382.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&outcm=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=v.hb.yahoo.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+AT+-+Desktop+-+EV+Player&pos=preroll&rule=5a3ffb94-1ba4-4f63-a07d-3e767a043cf9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=IIoFVwfSCIxRAGMh&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=1n8f66diua1q5;5a3ffb94-1ba4-4f63&tmout=3000&adl=151&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&tp=y_expbkt%3D-300_-1223%26y_dnb%3D1%26y_cid%3D8YHB64PSI%26y_adtype%3Ds_video]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_574.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&outcm=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=v.hb.yahoo.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+AT+-+Desktop+-+EV+Player&pos=preroll&rule=5a3ffb94-1ba4-4f63-a07d-3e767a043cf9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=bDEMWoQwLSIiRyNj&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=06q43ldiua1pq;5a3ffb94-1ba4-4f63&tmout=3000&adl=159&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&tp=y_expbkt%3D-300_-1223%26y_dnb%3D1%26y_cid%3D8YHB64PSI%26y_adtype%3Ds_video]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_382.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&outcm=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=IIoFVwfSCIxRAGMh&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=1n8f66diua1q5;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&medT=[ERRORCODE]]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_574.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&outcm=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=bDEMWoQwLSIiRyNj&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=06q43ldiua1pq;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&medT=[ERRORCODE]]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_382.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&outcm=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=IIoFVwfSCIxRAGMh&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=1n8f66diua1q5;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_574.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&outcm=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=bDEMWoQwLSIiRyNj&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=06q43ldiua1pq;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_382.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=tb_err&_E=tb_err&outcm=tb_err&_V=test&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=IIoFVwfSCIxRAGMh&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=1n8f66diua1q5;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&a_dlv_err=[ERRORCODE]]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_574.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=tb_err&_E=tb_err&outcm=tb_err&_V=test&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=bDEMWoQwLSIiRyNj&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=06q43ldiua1pq;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&a_dlv_err=[ERRORCODE]]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_382.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_beg&_E=ad_beg&outcm=ad_beg&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=IIoFVwfSCIxRAGMh&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=1n8f66diua1q5;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_574.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_beg&_E=ad_beg&outcm=ad_beg&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=bDEMWoQwLSIiRyNj&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=06q43ldiua1pq;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_382.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&outcm=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=v.hb.yahoo.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+AT+-+Desktop+-+EV+Player&pos=preroll&rule=5a3ffb94-1ba4-4f63-a07d-3e767a043cf9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=IIoFVwfSCIxRAGMh&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=1n8f66diua1q5;5a3ffb94-1ba4-4f63&tmout=3000&adl=151&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&tp=y_expbkt%3D-300_-1223%26y_dnb%3D1%26y_cid%3D8YHB64PSI%26y_adtype%3Ds_video]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_574.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&outcm=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=v.hb.yahoo.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+AT+-+Desktop+-+EV+Player&pos=preroll&rule=5a3ffb94-1ba4-4f63-a07d-3e767a043cf9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=bDEMWoQwLSIiRyNj&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=06q43ldiua1pq;5a3ffb94-1ba4-4f63&tmout=3000&adl=159&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&tp=y_expbkt%3D-300_-1223%26y_dnb%3D1%26y_cid%3D8YHB64PSI%26y_adtype%3Ds_video]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_382.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&outcm=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=IIoFVwfSCIxRAGMh&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=1n8f66diua1q5;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&medT=[ERRORCODE]]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_574.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&outcm=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=bDEMWoQwLSIiRyNj&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=06q43ldiua1pq;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&medT=[ERRORCODE]]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_382.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&outcm=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=IIoFVwfSCIxRAGMh&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=1n8f66diua1q5;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_574.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&outcm=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a0a6T00000R2KYJQA3&plid=5afc75ea3a04293dad9f1a1f&bcid=5afc769f7239855a15fcee15&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=bDEMWoQwLSIiRyNj&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=06q43ldiua1pq;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1709450652&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_938.2.dr	String found in binary or memory: <meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src 'sha256-R5cOQQv0ir0+YzwPRmelzz0a8I378cXU6dJv+THqQ4E=' www.googletagmanager.com https://www.googleadservices.com;img-src www.googletagmanager.com https://events.xg4ken.com https://beacon.krxd.net https://pubads.g.doubleclick.net https://sp.analytics.yahoo.com https://5237.xg4ken.com https://s.amazon-adsystem.com www.google-analytics.com https://.rfihub.com https://live.rezync.com https://secure.adnxs.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://trc.taboola.com https://www.facebook.com https://analytics.twitter.com https://t.co/i/adsct https://ad.doubleclick.net https://ext-inv-cdn.presage.io https://adservice.google.com/ https://alb.reddit.com https://beacon.lynx.cognitivlabs.com https://geo.yahoo.com/p https://www.emjcd.com https://pix.pub https://ade.googlesyndication.com https://apps.rokt.com https://analytics.tiktok.com https://tr.snapchat.com https://apps.rokt.com/api/conv https://picture-api.com; frame-src .fls.doubleclick.net https://s.yimg.com https://apps.rokt.com; connect-src https://www.google.com https://googleads.g.doubleclick.net;"> equals www.facebook.com (Facebook)
Source: chromecache_938.2.dr	String found in binary or memory: <meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src 'sha256-R5cOQQv0ir0+YzwPRmelzz0a8I378cXU6dJv+THqQ4E=' www.googletagmanager.com https://www.googleadservices.com;img-src www.googletagmanager.com https://events.xg4ken.com https://beacon.krxd.net https://pubads.g.doubleclick.net https://sp.analytics.yahoo.com https://5237.xg4ken.com https://s.amazon-adsystem.com www.google-analytics.com https://.rfihub.com https://live.rezync.com https://secure.adnxs.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://trc.taboola.com https://www.facebook.com https://analytics.twitter.com https://t.co/i/adsct https://ad.doubleclick.net https://ext-inv-cdn.presage.io https://adservice.google.com/ https://alb.reddit.com https://beacon.lynx.cognitivlabs.com https://geo.yahoo.com/p https://www.emjcd.com https://pix.pub https://ade.googlesyndication.com https://apps.rokt.com https://analytics.tiktok.com https://tr.snapchat.com https://apps.rokt.com/api/conv https://picture-api.com; frame-src .fls.doubleclick.net https://s.yimg.com https://apps.rokt.com; connect-src https://www.google.com https://googleads.g.doubleclick.net;"> equals www.twitter.com (Twitter)
Source: chromecache_938.2.dr	String found in binary or memory: <meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src 'sha256-R5cOQQv0ir0+YzwPRmelzz0a8I378cXU6dJv+THqQ4E=' www.googletagmanager.com https://www.googleadservices.com;img-src www.googletagmanager.com https://events.xg4ken.com https://beacon.krxd.net https://pubads.g.doubleclick.net https://sp.analytics.yahoo.com https://5237.xg4ken.com https://s.amazon-adsystem.com www.google-analytics.com https://.rfihub.com https://live.rezync.com https://secure.adnxs.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://trc.taboola.com https://www.facebook.com https://analytics.twitter.com https://t.co/i/adsct https://ad.doubleclick.net https://ext-inv-cdn.presage.io https://adservice.google.com/ https://alb.reddit.com https://beacon.lynx.cognitivlabs.com https://geo.yahoo.com/p https://www.emjcd.com https://pix.pub https://ade.googlesyndication.com https://apps.rokt.com https://analytics.tiktok.com https://tr.snapchat.com https://apps.rokt.com/api/conv https://picture-api.com; frame-src .fls.doubleclick.net https://s.yimg.com https://apps.rokt.com; connect-src https://www.google.com https://googleads.g.doubleclick.net;"> equals www.yahoo.com (Yahoo)
Source: chromecache_938.2.dr	String found in binary or memory: "https://www.yahoo.com", equals www.yahoo.com (Yahoo)
Source: chromecache_777.2.dr	String found in binary or memory: <!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css"><link rel="stylesheet" href="/assets/css/"><link rel="stylesheet" href="https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/css/aolv2.css"><script>var AolHelpGlobals = {"brandId":"usaol","langLocale":"en-US","host":"help.aol.com","id":"home","title":"","uiVersion":2,"meta":{"url":"help.aol.com/","titleTranslated":"","description":"","icon":""},"brand_specific":{"site_title":"AOL Help","site_url":"https://help.aol.com/","copyright":"Yahoo Inc. All rights reserved.","social":{"description":"Get answers to your AOL Mail, login, Desktop Gold, AOL app, password and subscription questions. Find the support options to contact customer care by email, chat, or phone number.","image_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_chat":true,"google_site_verification_code":"YmTGbZYP2WjOCilkOzUHXW-oxzyjD7kWH0V78RE3hMg"},"idp":{"loginUrl":"https://oidc.help.aol.com/login?dest={dest}&language=en-US","logoutUrl":"https://oidc.help.aol.com/logout?dest={dest}&language=en-US","denylist":["fraol","usnisp"]},"comscore":{"enabled":true,"c1":"2","c2":"1000009"},"rapid":{"spaceId":{"desktop":"1197805423","tablet":"1197805425","mobile":"1197805424"},"st_sec":"us.aolhelp","ver":"salesforce","pt":"home","pg_name":"Home"},"tandt":{"enabled":false,"id":"ps_aolhelp_home","suffix":""},"chat":{"chat_billing":"","chat_tech":"","chat_vz":""},"chatbot":{"enabled":true,"clientScriptSrc":"https://s.aolcdn.com/membership/WAS/ais-chatbot/prod/1.0.27/client/chatbot-client.js","sessionTTL":300000,"terminateSessionTTL":900000},"adblockerDetector":{"enabled":true,"scriptSrc":"https://s.aolcdn.com/membership/abd-resources"},"dispatcher":{"enabled":true,"appId":"aolHelp","namespace":"aol","scriptSrc":"https://s.yimg.com/kj/js/dispatcherWidget.js"},"product":{"sku":""},"content":{"host":"https://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/cms/help-central-usaol-navigation-rail-{support_level}"},"contentStyles":{"kb_video":{"icon":"https://s.aolcdn.com/os/help-main/content-types/video","c
Source: chromecache_777.2.dr	String found in binary or memory: <!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css"><link rel="stylesheet" href="/assets/css/"><link rel="stylesheet" href="https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/css/aolv2.css"><script>var AolHelpGlobals = {"brandId":"usaol","langLocale":"en-US","host":"help.aol.com","id":"home","title":"","uiVersion":2,"meta":{"url":"help.aol.com/","titleTranslated":"","description":"","icon":""},"brand_specific":{"site_title":"AOL Help","site_url":"https://help.aol.com/","copyright":"Yahoo Inc. All rights reserved.","social":{"description":"Get answers to your AOL Mail, login, Desktop Gold, AOL app, password and subscription questions. Find the support options to contact customer care by email, chat, or phone number.","image_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_chat":true,"google_site_verification_code":"YmTGbZYP2WjOCilkOzUHXW-oxzyjD7kWH0V78RE3hMg"},"idp":{"loginUrl":"https://oidc.help.aol.com/login?dest={dest}&language=en-US","logoutUrl":"https://oidc.help.aol.com/logout?dest={dest}&language=en-US","denylist":["fraol","usnisp"]},"comscore":{"enabled":true,"c1":"2","c2":"1000009"},"rapid":{"spaceId":{"desktop":"1197805423","tablet":"1197805425","mobile":"1197805424"},"st_sec":"us.aolhelp","ver":"salesforce","pt":"home","pg_name":"Home"},"tandt":{"enabled":false,"id":"ps_aolhelp_home","suffix":""},"chat":{"chat_billing":"","chat_tech":"","chat_vz":""},"chatbot":{"enabled":true,"clientScriptSrc":"https://s.aolcdn.com/membership/WAS/ais-chatbot/prod/1.0.27/client/chatbot-client.js","sessionTTL":300000,"terminateSessionTTL":900000},"adblockerDetector":{"enabled":true,"scriptSrc":"https://s.aolcdn.com/membership/abd-resources"},"dispatcher":{"enabled":true,"appId":"aolHelp","namespace":"aol","scriptSrc":"https://s.yimg.com/kj/js/dispatcherWidget.js"},"product":{"sku":""},"content":{"host":"https://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/cms/help-central-usaol-navigation-rail-{support_level}"},"contentStyles":{"kb_video":{"icon":"https://s.aolcdn.com/os/help-main/content-types/video","c
Source: chromecache_499.2.dr	String found in binary or memory: Sx.prototype.l=function(a){switch(a.type){case "playing":Ux(this);break;case "pause":case "ended":this.g.enabled&&this.g.stop();break;case "timeupdate":!this.B&&0<Tx(this)&&(this.B=!0,Ux(this))}};var Ux=function(a){!a.g.enabled&&a.B&&(a.F=1E3Tx(a),a.C=Date.now(),a.o=!1,a.g.start())};Sx.prototype.G=function(){var a=Date.now(),b=a-this.C,c=1E3Tx(this);c-this.F<.5b?this.o\|\|(this.o=!0,this.dispatchEvent("playbackStalled")):this.o=!1;this.F=c;this.C=a};var Vx="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Wx=/\bocr\b/;function Xx(a){if(kb(yh(a))\|\|gc&&2048<a.length)return!1;try{if((new S(a)).F().match(Wx))return!0}catch(b){}return null!=Vx.find(function(b){return null!=a.match(b)})};var Yx=new Map,Zx=function(){this.j=this.g=null};function $x(a,b,c,d){var e=fo(a);b.width<=e.width&&b.height<=e.height?(ay(d),c(e)):(e=setTimeout(function(){return $x(a,b,c,d)},200),d.j=e)} equals www.youtube.com (Youtube)
Source: chromecache_790.2.dr	String found in binary or memory: break;case "MediaFiles":for(var Bd=[],yb=[],ye=[],Bh=q(yf(G)),Cd=Bh.next();!Cd.done;Cd=Bh.next()){var Bb=Cd.value;switch(Bb.nodeName){case "MediaFile":var ze=void 0,Ae=S(Bb);if(null==Ae)var cj=null;else{-1!=Ae.indexOf("www.youtube.com/get_video")?O(P(),"hgvu","1"):-1!=Ae.indexOf("redirector.gvt1.com/get_video")&&O(P(),"hgvuc","1");var kc={};kc.height=fG(Bb,"height");kc.width=fG(Bb,"width");kc.sb=Bb.getAttribute("delivery");kc.bitrate=fG(Bb,"bitrate");kc.ma=fG(Bb,"minBitrate");kc.maxBitrate=fG(Bb, equals www.youtube.com (Youtube)
Source: chromecache_790.2.dr	String found in binary or memory: l.wm=function(){this.o&&NG(this.j,PH,null)};l.Em=function(){Z(this,"adBuffering")};var z2=function(a){var b,c=a.la;if(c.g&&c.g.g)if(c.h){var d=void 0===d?null:d;(b=void 0===b?null:b)\|\|(b="//www.youtube.com/");d?b+=d:(c=D(c.h.id),b=B(c)?null:b+"channel/"+(0==c.lastIndexOf("UC",0)&&24==c.length?c:"UC"+c))}else b=null;else b=null;b&&(a.pause(),a.Ka(b,null))};i2.prototype.Pb=function(){k1.prototype.Pb.call(this);null!=this.o&&this.o.ke()}; equals www.youtube.com (Youtube)
Source: chromecache_571.2.dr, chromecache_503.2.dr, chromecache_774.2.dr	String found in binary or memory: return b}vD.D="internal.enableAutoEventOnTimer";var vc=da(["data-gtm-yt-inspected-"]),wD=["www.youtube.com","www.youtube-nocookie.com"],xD,yD=!1; equals www.youtube.com (Youtube)
Source: chromecache_790.2.dr	String found in binary or memory: this.Oh=h;this.Da=k;this.bf=n;this.yb=m;this.be=p;this.Ke=r;this.resources=t};var ED=function(a,b){var c=void 0===b?{}:b;b=void 0===c.mimeType?null:c.mimeType;var d=void 0===c.da?null:c.da;c=void 0===c.ue?null:c.ue;this.La=a;this.da=d;this.mimeType=b;this.ue=c},FD=function(a){return"Url"===a.La.resourceType?a.La.Xc:null},GD=function(a){return"Html"===a.La.resourceType?a.La.Xc:null};var HD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.sb?null:c.sb;var d=void 0===c.mimeType?null:c.mimeType,e=void 0===c.codec?null:c.codec,f=void 0===c.width?null:c.width;c=void 0===c.height?null:c.height;this.url=a;this.sb=b;this.mimeType=d;this.codec=e;this.width=f;this.height=c};var ID=function(a,b){b=void 0===b?{}:b;var c=void 0===b.da?null:b.da,d=void 0===b.bitrate?null:b.bitrate,e=void 0===b.ma?null:b.ma,f=void 0===b.maxBitrate?null:b.maxBitrate,g=void 0===b.Ca?null:b.Ca;HD.call(this,a,{sb:void 0===b.sb?null:b.sb,mimeType:void 0===b.mimeType?null:b.mimeType,codec:void 0===b.codec?null:b.codec,width:void 0===b.width?null:b.width,height:void 0===b.height?null:b.height});this.da=c;this.ma=e\|\|f\|\|d\|\|0;this.maxBitrate=f\|\|e\|\|d\|\|0;this.Ca=g};w(ID,HD);var JD=function(a){a=void 0===a?{}:a;var b=void 0===a.kc?[]:a.kc,c=void 0===a.De?[]:a.De;this.Nb=void 0===a.Nb?null:a.Nb;this.kc=b;this.De=c};var KD=function(a){a=void 0===a?{}:a;var b=void 0===a.Kb?null:a.Kb,c=void 0===a.V?[]:a.V,d=void 0===a.wc?[]:a.wc,e=void 0===a.Wa?[]:a.Wa,f=void 0===a.nh?[]:a.nh,g=void 0===a.cd?null:a.cd,h=void 0===a.oa?null:a.oa,k=void 0===a.Va?[]:a.Va;this.duration=void 0===a.duration?null:a.duration;this.oa=h;this.Kb=b;this.V=c;this.wc=d;this.Wa=e;this.nh=f;this.cd=g;this.Va=k};var LD=function(a){a=void 0===a?{}:a;var b=void 0===a.da?null:a.da,c=void 0===a.height?null:a.height,d=void 0===a.width?null:a.width,e=void 0===a.Sc?null:a.Sc,f=void 0===a.resources?[]:a.resources,g=void 0===a.mg?null:a.mg,h=void 0===a.ng?[]:a.ng,k=void 0===a.oa?null:a.oa;this.id=void 0===a.id?null:a.id;this.da=b;this.height=c;this.width=d;this.Sc=e;this.resources=f;this.mg=g;this.ng=h;this.oa=k};var MD=function(a,b){b=void 0===b?[]:b;this.g=a;this.V=b};var ND=function(a){a=void 0===a?{}:a;var b=void 0===a.Le?"unknown":a.Le;this.Me=(void 0===a.Me?"unknown":a.Me)\|\|"unknown";this.Le=b\|\|"unknown"};var OD=function(a){a=void 0===a?{}:a;var b=void 0===a.id?null:a.id,c=void 0===a.adId?null:a.adId,d=void 0===a.bc?null:a.bc,e=void 0===a.je?null:a.je,f=void 0===a.Ud?null:a.Ud,g=void 0===a.Xa?[]:a.Xa;this.Na=void 0===a.Na?null:a.Na;this.id=b;this.adId=c;this.bc=d;this.je=e;this.Ud=f;this.Xa=g};var PD=function(a,b){this.url=a;this.g=void 0===b?null:b};var QD=function(a){a=void 0===a?{}:a;var b=void 0===a.qe?null:a.qe,c=void 0===a.Cc?null:a.Cc,d=void 0===a.parameters?null:a.parameters,e=void 0===a.V?[]:a.V;this.vendor=void 0===a.vendor?null:a.vendor;this.qe=b;this.Cc=c;this.parameters=d;this.V=e};var RD=function(a){a=void 0===a?{}:a;var b=void 0===a.errors?[]:a.errors,c=void 0===a.sc?[]:a.sc,d=void 0===a.pa?[]:a.pa,e=void 0===a.pb?[]:
Source: chromecache_790.2.dr	String found in binary or memory: this.la;if(b.g&&b.g.g)if(a=b.g.id,b=b.l,b=void 0===b?!1:b,null==a)a=null;else{c=new ww("//www.youtube.com/watch");var d=c.g;d.set("v",a);d.set("feature",b?"trueview-instream":"instream");Aw(c,d);a=c.toString()}else a=null;null!==a&&(this.pause(),this.Ka(a,null));break;case "muteClicked":this.ra=this.G;this.setVolume(0);break;case "unmuteClicked":this.setVolume(this.ra);case "skipShown":Z(this,"skippableStateChanged");break;case "skip":Z(this,"skip");this.destroy();break;case "fullscreen":Z(this,"fullscreen"); equals www.youtube.com (Youtube)
Source: chromecache_790.2.dr	String found in binary or memory: var uF=function(a,b){var c=a.Ra.h;a.Ra.g.forEach(function(d){Wy(b,new Sy("error",d))});c.forEach(function(d){Wy(b,Uy("impression",d.url,d.g))})},vF=function(a,b){a=q(a.pa);for(var c=a.next();!c.done;c=a.next())if((c=c.value.bc)&&c.Wa&&0<c.Wa.length){a=q(c.Wa);for(c=a.next();!c.done;c=a.next())c=c.value,b.Wa.push(new Py(FD(c),GD(c),c.mimeType,c.da,c.ue));break}};var wF=function(a){a=Error.call(this,a);this.message=a.message;"stack"in a&&(this.stack=a.stack)};w(wF,Error);var xF=function(a){this.h=a;this.g=Date.now()};xF.prototype.reset=function(){this.g=Date.now()};var yF=function(a){a=a.g+a.h-Date.now();return 0<a?a:0};var zF="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),AF=/\bocr\b/;function BF(a){if(B(D(a))\|\|te&&2048<a.length)return!1;try{if((new ww(a)).N().match(AF))return!0}catch(b){}return null!=zF.find(function(b){return null!=a.match(b)})};var CF=function(a){var b=Error.call(this,a);this.message=b.message;"stack"in b&&(this.stack=b.stack);this.errorCode=a};w(CF,Error);var DF=function(){if(!te)return!1;try{return new ActiveXObject("MSXML2.DOMDocument"),!0}catch(a){return!1}},EF=te&&DF(),FF=function(a){if("undefined"!=typeof DOMParser){var b=new DOMParser;a=sz(a);return b.parseFromString(Kd(a),"application/xml")}if(EF){b=new ActiveXObject("MSXML2.DOMDocument");b.resolveExternals=!1;b.validateOnParse=!1;try{b.setProperty("ProhibitDTD",!0),b.setProperty("MaxXMLSize",2048),b.setProperty("MaxElementDepth",256)}catch(c){}b.loadXML(a);return b}throw Error("Your browser does not support loading xml documents"); equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: aolserv.pages.dev

Source: unknown

HTTP traffic detected: POST /nex/modules/weather/v1?isXHR=true&m_mode=json HTTP/1.1Host: www.aol.comConnection: keep-aliveContent-Length: 20sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"tracestate: 2526950@nr=0-1-3101648-658130534-35ed9fd23b74cc4c----1709508394029traceparent: 00-e1299fdc72fcd72b49ee710eeceb1300-35ed9fd23b74cc4c-01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMxMDE2NDgiLCJhcCI6IjY1ODEzMDUzNCIsImlkIjoiMzVlZDlmZDIzYjc0Y2M0YyIsInRyIjoiZTEyOTlmZGM3MmZjZDcyYjQ5ZWU3MTBlZWNlYjEzMDAiLCJ0aSI6MTcwOTUwODM5NDAyOSwidGsiOiIyNTI2OTUwIn19content-type: application/jsonsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.aol.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Sun, 03 Mar 2024 23:26:48 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Sun, 03 Mar 2024 23:26:49 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Sun, 03 Mar 2024 23:26:49 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Sun, 03 Mar 2024 23:26:49 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Sun, 03 Mar 2024 23:26:51 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Sun, 03 Mar 2024 23:27:02 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Sun, 03 Mar 2024 23:27:06 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 134Content-Type: text/html; charset=UTF-8Date: Sun, 03 Mar 2024 23:27:22 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: http://help.aol.com/articles/account-management-managing-your-aol-password
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: http://help.incredimail.com/incredimail/help_center/help_article.aspx?is=t&article_id=193&la
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: http://mybenefits.aol.com/?ncid=mbr_advadolnk00000009
Source: chromecache_622.2.dr	String found in binary or memory: http://neat.bourbon.io
Source: chromecache_499.2.dr, chromecache_790.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_790.2.dr	String found in binary or memory: http://tpc.googlesyndication.com/pagead/js/loader21.html
Source: chromecache_435.2.dr, chromecache_517.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_654.2.dr, chromecache_499.2.dr, chromecache_790.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_790.2.dr	String found in binary or memory: http://www.google.com/adsense/support
Source: chromecache_574.2.dr, chromecache_382.2.dr	String found in binary or memory: http://www.iab.net/videosuite/vmap
Source: chromecache_514.2.dr	String found in binary or memory: http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt
Source: chromecache_841.2.dr	String found in binary or memory: http://www.paulirish.com/2009/throttled-smartresize-jquery-event-handler/
Source: chromecache_938.2.dr	String found in binary or memory: https://5237.xg4ken.com
Source: chromecache_614.2.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_774.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_614.2.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_815.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_919.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=21&gpp=DBAA&gpp_sid=-1
Source: chromecache_571.2.dr, chromecache_503.2.dr, chromecache_774.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_919.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZeUHNEt3uSYAABBfAETINAAA
Source: chromecache_571.2.dr, chromecache_503.2.dr, chromecache_774.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_571.2.dr, chromecache_503.2.dr, chromecache_774.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_556.2.dr, chromecache_457.2.dr	String found in binary or memory: https://aolapps.aol.com/
Source: chromecache_765.2.dr	String found in binary or memory: https://apps.apple.com/app/id646100661
Source: chromecache_938.2.dr	String found in binary or memory: https://apps.rokt.com/
Source: chromecache_574.2.dr, chromecache_382.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=ad_beg&_E=ad_beg&outcm=ad_beg&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.
Source: chromecache_382.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&outcm=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fw
Source: chromecache_382.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&outcm=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fw
Source: chromecache_382.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&outcm=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%
Source: chromecache_574.2.dr, chromecache_382.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=tb_err&_E=tb_err&outcm=tb_err&_V=test&_w=https%3A%2F%2Fwww.aol.co
Source: chromecache_799.2.dr	String found in binary or memory: https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f
Source: chromecache_479.2.dr	String found in binary or memory: https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a
Source: chromecache_943.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F/gdpr=0/gdpr_
Source: chromecache_938.2.dr	String found in binary or memory: https://beacon.krxd.net
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_938.2.dr	String found in binary or memory: https://canary-www.aol.com
Source: chromecache_938.2.dr	String found in binary or memory: https://canary.www.aol.com
Source: chromecache_571.2.dr, chromecache_503.2.dr, chromecache_774.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_315.2.dr	String found in binary or memory: https://cdn.js7k.com/rq/iv/
Source: chromecache_665.2.dr	String found in binary or memory: https://cdn.taboola.com
Source: chromecache_716.2.dr	String found in binary or memory: https://cdn.taboola.com/libtrc/tr5?abgroup=doc-client-width-4_var
Source: chromecache_628.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/ifs.js
Source: chromecache_789.2.dr	String found in binary or memory: https://checkout.yahoo.com/swidget/v1/smart
Source: chromecache_427.2.dr	String found in binary or memory: https://checkoutnow.aol.com/checkout/v1?sku=aol-gp-F54A7
Source: chromecache_427.2.dr	String found in binary or memory: https://checkoutnow.aol.com/checkout/v1?sku=aol-gp-F54A7&ncid=mbr_rusacqad00000196
Source: chromecache_427.2.dr	String found in binary or memory: https://checkoutnow.aol.com/checkout/v1?varId=ad-free-mail&sku=aol-gp-F54A7
Source: chromecache_427.2.dr	String found in binary or memory: https://checkoutnow.aol.com/checkout/v1?varId=ad-free-mail&sku=aol-gp-F54A7&ncid=mbr_rusacqad0000019
Source: chromecache_661.2.dr	String found in binary or memory: https://checkoutnow.aol.com/swidget/v1/smart
Source: chromecache_815.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_955.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=UoaBawejSDGCz5KCfddEDg%3D%3
Source: chromecache_815.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=chPbtIxORfi6yCFJ0yqLHw%3D%3
Source: chromecache_955.2.dr, chromecache_815.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_955.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NTI4NjgxNkItMDdBMy00ODMxLTgyQ0YtOTI
Source: chromecache_815.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NzIxM0RCQjQtOEM0RS00NUY4LUJBQzgtMjE
Source: chromecache_815.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_456.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.3.min.js
Source: chromecache_427.2.dr	String found in binary or memory: https://consent.cmp.oath.com/cmp.js
Source: chromecache_427.2.dr	String found in binary or memory: https://consent.cmp.oath.com/cmpStub.min.js
Source: chromecache_614.2.dr	String found in binary or memory: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_cons
Source: chromecache_919.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=Z
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJn
Source: chromecache_938.2.dr	String found in binary or memory: https://currently.att.yahoo.com
Source: chromecache_427.2.dr	String found in binary or memory: https://d1r51gnw3wu5rx.cloudfront.net/feedback-loader.js
Source: chromecache_938.2.dr	String found in binary or memory: https://dev.checkout.aol.com
Source: chromecache_938.2.dr	String found in binary or memory: https://dev.subscriptions.yahoo.com
Source: chromecache_614.2.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_938.2.dr	String found in binary or memory: https://discover.aol.com
Source: chromecache_701.2.dr, chromecache_599.2.dr	String found in binary or memory: https://dispatcher.yahoo.com
Source: chromecache_919.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.n
Source: chromecache_955.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=5286816B-07A3-4831-82CF-92827DD7440E&dongle=u6nf&gdpr=0&gdp
Source: chromecache_815.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&dongle=u6nf&gdpr=0&gdp
Source: chromecache_938.2.dr	String found in binary or memory: https://events.xg4ken.com
Source: chromecache_938.2.dr	String found in binary or memory: https://finance.yahoo.com
Source: chromecache_592.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_790.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_592.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_592.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_938.2.dr	String found in binary or memory: https://football.fantasysports.yahoo.com
Source: chromecache_939.2.dr	String found in binary or memory: https://github.com/conversant/pubcid.js
Source: chromecache_939.2.dr	String found in binary or memory: https://github.com/conversant/pubcid.js/blob/master/LICENSE
Source: chromecache_798.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_639.2.dr	String found in binary or memory: https://github.com/radiantmediaplayer/rmp-connection
Source: chromecache_639.2.dr	String found in binary or memory: https://github.com/radiantmediaplayer/rmp-connection/blob/master/LICENSE
Source: chromecache_639.2.dr	String found in binary or memory: https://github.com/radiantmediaplayer/rmp-vast
Source: chromecache_639.2.dr	String found in binary or memory: https://github.com/radiantmediaplayer/rmp-vast/blob/master/LICENSE
Source: chromecache_478.2.dr	String found in binary or memory: https://github.com/yui/pure/blob/master/LICENSE.md
Source: chromecache_639.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_639.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.23.3/LICENSE
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://gocm.c.appier.net/pubmatic
Source: chromecache_503.2.dr	String found in binary or memory: https://google.com
Source: chromecache_503.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_427.2.dr	String found in binary or memory: https://guce.aol.com/privacy-dashboard?locale=en-US
Source: chromecache_919.2.dr	String found in binary or memory: https://hb.yahoo.net/cksync.php?gpp=DBAA&gpp_sid=-1&cs=1&vsid=3525099948919525000V10&amp
Source: chromecache_777.2.dr, chromecache_456.2.dr	String found in binary or memory: https://help.aol.com/
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://help.aol.com/articles/account-management-managing-your-aol-username
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://help.aol.com/articles/add-delete-or-rename-a-notebook-in-aol-mail
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://help.aol.com/articles/add-edit-or-delete-calendar-events-in-aol-mail
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://help.aol.com/articles/add-or-update-aol-account-recovery-information
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://help.aol.com/articles/block-all-senders-except-for-contacts
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://help.aol.com/articles/check-spelling-in-new-aol-mail
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://help.aol.com/articles/how-do-i-set-up-other-email-applications-to-send-and-receive-my-verizo
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://help.aol.com/articles/select-and-enable-a-new-mail-notification-in-aol-mail
Source: chromecache_919.2.dr	String found in binary or memory: https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZeUHNEt3uSYAABBfAETINAAA%26015&gpdr=
Source: chromecache_955.2.dr, chromecache_815.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_943.2.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_con
Source: chromecache_499.2.dr, chromecache_790.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/car.js
Source: chromecache_790.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/simid/simid_trueview_%s.html
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR
Source: chromecache_427.2.dr	String found in binary or memory: https://legal.yahoo.com/us/en/yahoo/privacy/index.html
Source: chromecache_427.2.dr	String found in binary or memory: https://legal.yahoo.com/us/en/yahoo/terms/otos/index.html
Source: chromecache_782.2.dr, chromecache_447.2.dr	String found in binary or memory: https://lg1.hb.yahoo.net/log?logid=kfk&evtid=projectevents&project=amprtc_error&event=AMPRTC_UCREATI
Source: chromecache_938.2.dr	String found in binary or memory: https://live.rezync.com
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://login.aol.com/account/create?specId=yidReg
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://login.aol.com/account/security
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://login.aol.com/forgot
Source: chromecache_950.2.dr, chromecache_581.2.dr	String found in binary or memory: https://login.aol.com/myaccount/security
Source: chromecache_556.2.dr, chromecache_457.2.dr	String found in binary or memory: https://mail.aol.com/
Source: chromecache_480.2.dr, chromecache_553.2.dr, chromecache_342.2.dr, chromecache_479.2.dr	String found in binary or memory: https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479
Source: chromecache_409.2.dr	String found in binary or memory: https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4
Source: chromecache_735.2.dr, chromecache_409.2.dr	String found in binary or memory: https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6415665815001/61602a39-778d-4e05-9e8c-a4f
Source: chromecache_614.2.dr	String found in binary or memory: https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_919.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/casale?gpp=DBAA&gpp_sid=-1
Source: chromecache_955.2.dr, chromecache_815.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_919.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/113?gpp=DBAA&gpp_sid=-1
Source: chromecache_815.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_955.2.dr, chromecache_815.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_614.2.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_290.2.dr, chromecache_736.2.dr	String found in binary or memory: https://media.zenfs.com/en/cnn_videos_177/bc5b115bf654e97af312aecbd1aa451b
Source: chromecache_290.2.dr, chromecache_736.2.dr	String found in binary or memory: https://media.zenfs.com/en/nbcu_713/e0f37c3ed9ff481a05936a7142c07d5a
Source: chromecache_701.2.dr, chromecache_599.2.dr	String found in binary or memory: https://membernotifications.aol.com
Source: chromecache_938.2.dr	String found in binary or memory: https://membership-cdn.s3.amazonaws.com
Source: chromecache_427.2.dr	String found in binary or memory: https://membership-cdn.s3.amazonaws.com/tandt/AOL/Exit
Source: chromecache_938.2.dr	String found in binary or memory: https://membership-ycs-cdn.s3.amazonaws.com
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://myaccount.aol.com/
Source: chromecache_950.2.dr, chromecache_581.2.dr	String found in binary or memory: https://mysubscriptions.aol.com/manage/aol-plans
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000000_New_Salesforce_Org/000011433/FileExplorer.png
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000000_New_Salesforce_Org/000011433/InstallADG.png
Source: chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000000_New_Salesforce_Org/000012833/icon-phone-blk.png
Source: chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000000_New_Salesforce_Org/000014798/mail_spam_en_o1.png
Source: chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000011548/tip-icn.png
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/ClassicFinal.mp4
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/PersonalizeInbox.mp4
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/UtilitiesFinal.mp4
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/ViewsFinal.mp4
Source: chromecache_465.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/coverphoto2.png
Source: chromecache_365.2.dr	String found in binary or memory: https://oidc.help.aol.com/login?dest=
Source: chromecache_365.2.dr	String found in binary or memory: https://oidc.help.aol.com/logout?dest=
Source: chromecache_938.2.dr	String found in binary or memory: https://overview.mail.yahoo.com
Source: chromecache_815.2.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_774.2.dr, chromecache_420.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_862.2.dr, chromecache_405.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_499.2.dr, chromecache_790.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/canary/omweb-v1.js
Source: chromecache_499.2.dr, chromecache_790.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/control/omweb-v1.js
Source: chromecache_499.2.dr, chromecache_790.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/experimental/omweb-v1.js
Source: chromecache_499.2.dr, chromecache_790.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Source: chromecache_499.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=
Source: chromecache_435.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_435.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_435.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_435.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_596.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_405.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_862.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_790.2.dr, chromecache_571.2.dr, chromecache_503.2.dr, chromecache_774.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_499.2.dr, chromecache_790.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_499.2.dr, chromecache_466.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_846.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_405.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_862.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_815.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_943.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=7213DBB4-8C4E-45F8-BAC8-
Source: chromecache_955.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=5286816B-07A3-4831-82CF-
Source: chromecache_815.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=7213DBB4-8C4E-45F8-BAC8-
Source: chromecache_765.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.aol.mobile.aolapp
Source: chromecache_815.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_614.2.dr	String found in binary or memory: https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=
Source: chromecache_955.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/5286816B-07A3-4831-82CF-92827DD7440E?gdpr=0&gdpr_consent=
Source: chromecache_815.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F?gdpr=0&gdpr_consent=
Source: chromecache_592.2.dr	String found in binary or memory: https://products.gobankingrates.com
Source: chromecache_938.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net
Source: chromecache_499.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/adsid/integrator.json?aos=
Source: chromecache_790.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/ata-qr
Source: chromecache_574.2.dr, chromecache_382.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/gampad/ads?iu=/22888152279/us/aol/hp/dt/us_aol_hp_dt_video&ad_type=
Source: chromecache_815.2.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=7213DBB4-8C4E-
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN
Source: chromecache_938.2.dr	String found in binary or memory: https://qa.subscriptions.aol.com
Source: chromecache_456.2.dr	String found in binary or memory: https://rayuser23.000webhostapp.com/ao/next.php
Source: chromecache_815.2.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=
Source: chromecache_938.2.dr	String found in binary or memory: https://s.amazon-adsystem.com
Source: chromecache_955.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=5286816B-07A3-4831-82C
Source: chromecache_815.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=7213DBB4-8C4E-45F8-BAC
Source: chromecache_919.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=
Source: chromecache_777.2.dr	String found in binary or memory: https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css
Source: chromecache_777.2.dr	String found in binary or memory: https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css
Source: chromecache_777.2.dr	String found in binary or memory: https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css
Source: chromecache_678.2.dr	String found in binary or memory: https://s.aolcdn.com/images/dims?thumbnail=400%2C225%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/ProductCentral/images/aol.svg
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/ProductCentral/logos/AOLadFreeMail-logo-new.svg
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/WAS/tandt/atjs-loader/atjs-loader.2.1.0.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/WAS/tandt/atjs-loader/vendor/at.2.2.0-modified.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/WAS/tandt/visitorapi.min.js
Source: chromecache_956.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.eot?#iefix-3
Source: chromecache_956.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.eot?3
Source: chromecache_956.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.svg?3#AolHelpIcons
Source: chromecache_956.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.ttf?3
Source: chromecache_956.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.woff?3
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/fonts/opensans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/user_agent_parser.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/exint
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/exint/exint.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/omp-widgets/2.1.0/switch-widget.aol.prod.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/omp-widgets/2.1.3/smart-widget.aol.prod.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/omp-widgets/2.1.3/smart-widget.prod.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/omp-widgets/pixel-widget.latest.aol.prod.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/omp-widgets/smart-widget.latest.prod.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/omp-widgets/switch-widget.latest.prod.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/ad-free-aol-medium-hero
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/ad-free-aol-medium-hero.jpg
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/ad-free-mail-large-hero
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/ad-free-mail-large-hero.jpg
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/ad-free-mail-small-hero
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/ad-free-mail-small-hero.jpg
Source: chromecache_426.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/cross.svg
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/icon-envelope.svg
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/icon-profile-male.svg
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/money-dollar.svg
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/pricetags.svg
Source: chromecache_465.2.dr	String found in binary or memory: https://s.aolcdn.com/os/help-main/content-types/article
Source: chromecache_777.2.dr	String found in binary or memory: https://s.aolcdn.com/os/help-main/content-types/l/faq.png
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/os/paid_services/lifestore/logo_aol.svg
Source: chromecache_427.2.dr	String found in binary or memory: https://s.aolcdn.com/os/uco/prod/img/lifestore-favicon.ico
Source: chromecache_777.2.dr	String found in binary or memory: https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets
Source: chromecache_777.2.dr	String found in binary or memory: https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/css/aolv2.css
Source: chromecache_777.2.dr	String found in binary or memory: https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/
Source: chromecache_427.2.dr	String found in binary or memory: https://s.yimg.com
Source: chromecache_380.2.dr, chromecache_783.2.dr, chromecache_291.2.dr	String found in binary or memory: https://s.yimg.com/aaq/wf/
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Bold.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Bold.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-BoldItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-BoldItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Extrabold.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Extrabold.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-ExtraboldItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-ExtraboldItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-MediumItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-MediumItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Black.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Black.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Black.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BlackItalic.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BlackItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BlackItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BoldItalic.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BoldItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BoldItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLight.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLight.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLight.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLightItalic.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLightItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLightItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Extrabold.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Extrabold.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Extrabold.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraboldItalic.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraboldItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraboldItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Light.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Light.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Light.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-LightItalic.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-LightItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-LightItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-MediumItalic.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-MediumItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-MediumItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-RegularItalic.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-RegularItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-RegularItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-SemiboldItalic.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-SemiboldItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-SemiboldItalic.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Thin.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Thin.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Thin.woff2)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ThinItalic.ttf)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ThinItalic.woff)
Source: chromecache_956.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ThinItalic.woff2)
Source: chromecache_765.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-114x114.png
Source: chromecache_765.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-144x144.png
Source: chromecache_765.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-192x192.png
Source: chromecache_765.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-36x36.png
Source: chromecache_765.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-48x48.png
Source: chromecache_765.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-512x512.png
Source: chromecache_765.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-72x72.png
Source: chromecache_765.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-96x96.png
Source: chromecache_598.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/accuweather.svg
Source: chromecache_598.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/
Source: chromecache_598.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg
Source: chromecache_598.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/missing-data.svg
Source: chromecache_598.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/small/
Source: chromecache_427.2.dr	String found in binary or memory: https://s.yimg.com/cx/vzm/cs.js
Source: chromecache_804.2.dr	String found in binary or memory: https://s.yimg.com/dy/readmo-pixel.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-NB4W2NQ&cat=ad-free-mail&u29=aol&u9=ad-free-mail&u59=mb
Source: chromecache_660.2.dr	String found in binary or memory: https://s.yimg.com/kj/js/dispatcherWidget.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.yimg.com/oa/consent.js
Source: chromecache_427.2.dr	String found in binary or memory: https://s.yimg.com/ss/analytics3.js
Source: chromecache_290.2.dr, chromecache_736.2.dr	String found in binary or memory: https://s.yimg.com/uu/api/res/1.2/Mj02RNWX6BbdgAyNILG7QA--~B/Zmk9c3RyaW07aD0xNDQ7dz0yNjA7YXBwaWQ9eXR
Source: chromecache_290.2.dr, chromecache_736.2.dr	String found in binary or memory: https://s.yimg.com/uu/api/res/1.2/Wua9BqkOQwlU2I.mqPwzOg--~B/aD01NDA7dz05NjA7YXBwaWQ9eXRhY2h5b24-/ht
Source: chromecache_456.2.dr	String found in binary or memory: https://s.yimg.com/wm/assets/images/ns/aol-logo-black-v.0.0.2.png
Source: chromecache_456.2.dr	String found in binary or memory: https://s.yimg.com/wm/assets/images/ybar/aol-logo-white-v0.0.4.png
Source: chromecache_456.2.dr	String found in binary or memory: https://s.yimg.com/wm/login/aol-apple-touch-icon.png
Source: chromecache_456.2.dr	String found in binary or memory: https://s.yimg.com/wm/login/aol-favicon.png
Source: chromecache_456.2.dr	String found in binary or memory: https://s.yimg.com/wm/mbr/3689655c0d5d523f0d4ae53b598de350d766716a/aol-main.css
Source: chromecache_790.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_790.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_499.2.dr, chromecache_790.2.dr	String found in binary or memory: https://s0.2mdn.net/instream/video/client.js
Source: chromecache_432.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/p?
Source: chromecache_938.2.dr	String found in binary or memory: https://secure.adnxs.com
Source: chromecache_499.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/ima_ppub_config
Source: chromecache_499.2.dr, chromecache_798.2.dr, chromecache_466.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_634.2.dr, chromecache_942.2.dr	String found in binary or memory: https://sketch.com
Source: chromecache_957.2.dr, chromecache_673.2.dr, chromecache_839.2.dr, chromecache_928.2.dr	String found in binary or memory: https://sketchapp.com
Source: chromecache_938.2.dr	String found in binary or memory: https://sp.analytics.yahoo.com
Source: chromecache_938.2.dr	String found in binary or memory: https://sports.yahoo.com
Source: chromecache_904.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_938.2.dr	String found in binary or memory: https://subscriptions.aol.com
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://support.apple.com/en-us/HT201320
Source: chromecache_790.2.dr	String found in binary or memory: https://support.google.com/ads/answer/10923348
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/manual-account-configuration
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://support.office.com/en-us/article/Add-an-email-account-to-Outlook-6e27792a-9267-4aa4-8bb6-c84
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://support.office.com/en-us/article/Set-up-email-in-Android-email-app-71147974-7aca-491b-978a-a
Source: chromecache_465.2.dr	String found in binary or memory: https://support.office.com/en-us/article/add-an-email-account-to-outlook-6e27792a-9267-4aa4-8bb6-c84
Source: chromecache_926.2.dr, chromecache_465.2.dr	String found in binary or memory: https://support.office.com/en-us/article/set-up-email-in-the-mail-app-for-windows-10-7ff79e8b-439b-4
Source: chromecache_614.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_614.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=
Source: chromecache_955.2.dr, chromecache_815.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmati
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_943.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_614.2.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912
Source: chromecache_499.2.dr, chromecache_571.2.dr, chromecache_503.2.dr, chromecache_774.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_
Source: chromecache_862.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_862.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_938.2.dr	String found in binary or memory: https://trc.taboola.com
Source: chromecache_628.2.dr	String found in binary or memory: https://trc.taboola.com/sg/prebidJS/1/cm
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_955.2.dr, chromecache_815.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=6
Source: chromecache_955.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=5286816B-07A3-4831-82CF-92827DD7440E&re
Source: chromecache_815.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&re
Source: chromecache_686.2.dr, chromecache_614.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_co
Source: chromecache_955.2.dr, chromecache_815.2.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_678.2.dr	String found in binary or memory: https://wjla.com/news/local/loudoun-county-house-explosion-trevor-brown-funeral-virginia-sterling-va
Source: chromecache_938.2.dr	String found in binary or memory: https://www.aol.ca
Source: chromecache_938.2.dr	String found in binary or memory: https://www.aol.co.uk
Source: chromecache_938.2.dr	String found in binary or memory: https://www.aol.com
Source: chromecache_456.2.dr	String found in binary or memory: https://www.aol.com/
Source: chromecache_678.2.dr	String found in binary or memory: https://www.aol.com/m/8b0deda3-ff56-3f35-9fde-4c4dfe7b6b52/restaurant-catches-fire-in.html
Source: chromecache_678.2.dr	String found in binary or memory: https://www.aol.com/m/9554440b-868a-3ce2-8845-c23a5a43da56/celebration-of-life-for.html
Source: chromecache_678.2.dr	String found in binary or memory: https://www.aol.com/m/d54093ac-7943-387b-ae9a-00419129c1ce/community-mourns-ahead-of.html
Source: chromecache_427.2.dr	String found in binary or memory: https://www.aol.com/products
Source: chromecache_950.2.dr, chromecache_581.2.dr	String found in binary or memory: https://www.aol.com/products/bundles?ncid=mbr_advacqlnk00000013
Source: chromecache_427.2.dr	String found in binary or memory: https://www.aol.com/products/utilities/ad-free-mail
Source: chromecache_427.2.dr	String found in binary or memory: https://www.aol.com/products?ncid=mbr_rusacqad00000196
Source: chromecache_427.2.dr	String found in binary or memory: https://www.aol.com?ncid=mbr_rusacqad00000196
Source: chromecache_938.2.dr	String found in binary or memory: https://www.aol.de
Source: chromecache_290.2.dr, chromecache_736.2.dr	String found in binary or memory: https://www.cnn.com/
Source: chromecache_592.2.dr	String found in binary or memory: https://www.google-analytics.com
Source: chromecache_774.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_862.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_503.2.dr, chromecache_774.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_435.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_938.2.dr	String found in binary or memory: https://www.googleadservices.com;img-src
Source: chromecache_774.2.dr	String found in binary or memory: https://www.googlesyndication.com
Source: chromecache_774.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_571.2.dr, chromecache_503.2.dr, chromecache_774.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_938.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_678.2.dr	String found in binary or memory: https://www.nbcwashington.com/news/local/restaurant-catches-fire-in-northwest-dc/3557582/
Source: chromecache_639.2.dr	String found in binary or memory: https://www.radiantmediaplayer.com
Source: chromecache_678.2.dr	String found in binary or memory: https://www.wusa9.com/article/news/local/virginia/celebration-of-life-for-firefighter-trevor-brown-m
Source: chromecache_938.2.dr	String found in binary or memory: https://www.yahoo.com
Source: chromecache_938.2.dr	String found in binary or memory: https://www5.yahoo.com
Source: chromecache_815.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 51320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51201
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 51347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51128
Source: unknown	Network traffic detected: HTTP traffic on port 51188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 51335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51127
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51130
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51133
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 51242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51141
Source: unknown	Network traffic detected: HTTP traffic on port 51270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51187
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51195
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51196
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51194
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51198
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 51032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50868
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50862
Source: unknown	Network traffic detected: HTTP traffic on port 50864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@65/1106@567/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aolserv.pages.dev/robots.txtIP:
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8684 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8684 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://aolserv.pages.dev/robots.txtIP:	100%	Avira URL Cloud	phishing
https://aolserv.pages.dev/robots.txtIP:	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://tsdtocl.com/	0%	URL Reputation	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://rtb-use.mfadsrvr.com/sync?ssp=google&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me	0%	Avira URL Cloud	safe
https://sync.technoratimedia.com/services?srv=cs&nuid=2E84A48E09184096882C93C926E94179&att=1&pid=46&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=2056953496763385149	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%207213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&rnd=RND	0%	Avira URL Cloud	safe
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=5e803909-7b6d-45a4-8be8-533d655de3d1	0%	Avira URL Cloud	safe
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LTC55UNV-1B-13RH	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=13&ns_st_sp=1&ns_st_sc=1&ns_st_psq=7&ns_st_asq=7&ns_st_sq=7&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=11422&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11422&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=11422&ns_st_dap=0&ns_st_et=31855&ns_st_det=4&ns_st_upc=11422&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=11422&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=11422&ns_st_dlpc=0&ns_st_lpa=11422&ns_st_dlpa=0&ns_st_pa=11422&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508450194&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=6&ns_st_dpc=0&ns_st_pp=6&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=26&ns_st_sp=1&ns_st_sc=1&ns_st_psq=13&ns_st_asq=13&ns_st_sq=13&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=11502&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11502&ns_st_dpt=9&ns_st_ipt=9&ns_st_ap=11502&ns_st_dap=9&ns_st_et=39496&ns_st_det=9&ns_st_upc=11502&ns_st_dupc=9&ns_st_iupc=9&ns_st_upa=11502&ns_st_dupa=9&ns_st_iupa=9&ns_st_lpc=11502&ns_st_dlpc=9&ns_st_lpa=11502&ns_st_dlpa=9&ns_st_pa=11502&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508457835&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=13&ns_st_dpc=1&ns_st_pp=13&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=24&ns_st_sp=1&ns_st_sc=1&ns_st_psq=12&ns_st_asq=12&ns_st_sq=12&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=11493&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11493&ns_st_dpt=12&ns_st_ipt=12&ns_st_ap=11493&ns_st_dap=12&ns_st_et=39354&ns_st_det=12&ns_st_upc=11493&ns_st_dupc=12&ns_st_iupc=12&ns_st_upa=11493&ns_st_dupa=12&ns_st_iupa=12&ns_st_lpc=11493&ns_st_dlpc=12&ns_st_lpa=11493&ns_st_dlpa=12&ns_st_pa=11493&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508457693&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=12&ns_st_dpc=1&ns_st_pp=12&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://rtb.mfadsrvr.com/sync?ssp=google&no_redirect=1&google_gid=CAESEHCGma9YkBLeeRR1TOzfYEc&google_cver=1	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=8&ns_st_sp=1&ns_st_sc=1&ns_st_psq=4&ns_st_asq=4&ns_st_sq=4&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=7821&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=7821&ns_st_dpt=6&ns_st_ipt=6&ns_st_ap=7821&ns_st_dap=6&ns_st_et=20204&ns_st_det=6&ns_st_upc=7821&ns_st_dupc=6&ns_st_iupc=6&ns_st_upa=7821&ns_st_dupa=6&ns_st_iupa=6&ns_st_lpc=7821&ns_st_dlpc=6&ns_st_lpa=7821&ns_st_dlpa=6&ns_st_pa=7821&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508438543&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=4&ns_st_dpc=1&ns_st_pp=4&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fam-geo-atsv2.prod.media.g03.yahoodns.net	66.218.87.15	true	false		unknown
de9a11s35xj3d.cloudfront.net	18.238.79.3	true	false		high
um.simpli.fi	35.236.220.17	true	false		high
rtb-csync-use1.smartadserver.com	23.105.14.106	true	false		high
tls13.taboola.map.fastly.net	151.101.65.44	true	false		unknown
global.px.quantserve.com	192.184.68.254	true	false		high
us-east-eb2.3lift.com	52.223.22.214	true	false		high
prebid.media.net	34.120.63.153	true	false		high
i.clean.gg	34.95.69.49	true	false		unknown
cdn.w55c.net	54.211.182.170	true	false		high
ds-beap1.cb.g01.yahoodns.net	74.6.138.72	true	false		unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	52.202.146.197	true	false		high
crb.kargo.com	34.193.135.180	true	false		high
dualstack.tls13.taboola.map.fastly.net	151.101.65.44	true	false		unknown
lga-direct-bgp.contextweb.com	198.148.27.131	true	false		high
dsum.casalemedia.com	104.18.36.155	true	false		high
www.google.com	142.251.40.196	true	false		high
sync.intentiq.com	18.173.219.124	true	false		unknown
noa-atsv2.media.g03.yahoodns.net	66.218.87.15	true	false		unknown
idaas6.cph.liveintent.com	52.202.127.44	true	false		high
bcp.crwdcntrl.net	52.205.86.205	true	false		high
sync1.intentiq.com	18.173.219.124	true	false		unknown
match.adsrvr.org	15.197.193.217	true	false		high
match.prod.bidr.io	52.71.191.116	true	false		unknown
pagead-googlehosted.l.google.com	142.251.41.1	true	false		high
creativecdn.com	185.184.8.90	true	false		high
widget.va1.vip.prod.criteo.com	74.119.119.150	true	false		high
m.deepintent.com	169.197.150.7	true	false		unknown
pixel-sync.sitescout.com	34.36.216.150	true	false		high
d1r51gnw3wu5rx.cloudfront.net	13.35.90.16	true	false		high
products.gobankingrates.com	18.173.132.129	true	false		high
ssum-sec.casalemedia.com	104.18.36.155	true	false		high
googleads.g.doubleclick.net	142.250.176.194	true	false		high
match-us-east-1-ecs.sharethrough.com	52.21.191.144	true	false		high
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false		unknown
hb.yahoo.net	23.40.179.72	true	false		high
i.ctnsnet.com	35.186.193.173	true	false		high
iad-2-sync.go.sonobi.com	69.166.1.34	true	false		high
hbx.media.net	23.199.48.23	true	false		high
pool-bid-gce-us.dorpat.iponweb.net	35.207.24.140	true	false		unknown
d1sjyfqescdy46.cloudfront.net	108.138.125.44	true	false		high
adservice.google.com	142.250.81.226	true	false		high
cs550162656.adn.psicdn.net	152.195.55.192	true	false		unknown
contextual.media.net	23.47.168.66	true	false		high
core.iprom.net	195.5.165.20	true	false		unknown
tsdtocl.com	151.101.1.44	true	false		unknown
idsync.rlcdn.com	35.244.154.8	true	false		high
rtb.adentifi.com	100.26.88.123	true	false		unknown
ad.mrtnsvr.com	34.102.163.6	true	false		unknown
lg1.hb.yahoo.net	23.40.179.59	true	false		high
sync.srv.stackadapt.com	54.165.23.128	true	false		high
synchroscript.deliveryengine.adswizz.com	18.238.55.58	true	false		high
thrtle.com	52.201.82.109	true	false		unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.4.203.155	true	false		high
windowsupdatebg.s.llnwi.net	69.164.46.128	true	false		unknown
pixel.tapad.com	34.111.113.62	true	false		high
pippio.com	107.178.254.65	true	false		high
cdn.rates.consumertrack.com	54.230.163.99	true	false		high
sync.ipredictive.com	52.44.19.224	true	false		unknown
prod-rotation-v2.guce.aws.oath.cloud	54.198.146.149	true	false		unknown
s.amazon-adsystem.com	52.46.143.56	true	false		high
ad.doubleclick.net	142.251.40.230	true	false		high
aax-eu.amazon-adsystem.com	67.220.228.201	true	false		high
metrics.brightcove.com	35.244.232.184	true	false		high
prod.msicontent.pse.public.aol.com	52.2.7.46	true	false		high
spug33000-fpb.pubmnet.com	104.36.113.111	true	false		unknown
m.hb.yahoo.net	34.111.85.214	true	false		high
ipac.ctnsnet.com	35.186.193.173	true	false		high
aolserv.pages.dev	172.66.47.75	true	false		unknown
geo-atsv2.media.g03.yahoodns.net	66.218.87.15	true	false		unknown
spug-njrpb.pubmnet.com	162.248.18.34	true	false		unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false		high
match.adsby.bidtheatre.com	134.122.57.34	true	false		unknown
ib.anycast.adnxs.com	68.67.179.166	true	false		high
edge.gycpi.b.yahoodns.net	69.147.82.60	true	false		unknown
us01.z.antigena.com	40.76.134.238	true	false		unknown
matching.truffle.bid	162.55.120.196	true	false		unknown
uipus.semasio.net	50.57.31.206	true	false		high
d20qwf0wrdtevy.cloudfront.net	13.225.214.90	true	false		high
ds-ycpi-pn-ybp.gysm.yahoodns.net	34.225.231.221	true	false		unknown
sync.crwdcntrl.net	52.0.10.132	true	false		high
gob-njr3.pubmnet.com	104.36.115.111	true	false		unknown
cm121.appier.org	172.104.70.67	true	false		high
cm.g.doubleclick.net	142.251.41.2	true	false		high
pug-vac.pubmnet.com	8.28.7.83	true	false		unknown
sync.1rx.io	69.194.240.13	true	false		high
idaas-ext.cph.liveintent.com	52.86.42.47	true	false		high
ds-pr-bh.ybp.gysm.yahoodns.net	34.196.218.225	true	false		unknown
us-u.openx.net	35.244.159.8	true	false		high
securepubads46.g.doubleclick.net	142.251.35.162	true	false		high
rtb-cache.hb.yahoo.net	34.110.207.99	true	false		high
ssp-sync.va1.vip.prod.criteo.com	74.119.119.73	true	false		high
cs.media.net	23.199.48.23	true	false		high
s3-w.us-east-1.amazonaws.com	52.216.50.121	true	false		high
envoy-hl.envoy-csync1.core-b8mf.ov1o.com	35.214.170.179	true	false		unknown
js-sec.indexww.com	104.18.38.76	true	false		unknown
dorpat.geo.iponweb.net	35.207.24.140	true	false		unknown
a.tribalfusion.com	104.18.25.173	true	false		high
spug-vac.pubmnet.com	8.28.7.84	true	false		unknown
ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com	23.20.189.8	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ups.analytics.yahoo.com/ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external	false		high
https://lg1.hb.yahoo.net/log?logid=kfk&evtid=brqlog&itype=YHB&tElp=53900&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25310&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf=	false		high
https://contextual.media.net/cksync.php?cs=8&vsid=3525100008919577000V10&type=pba&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F	false		high
https://3p-geo.yahoo.com/p?s=1197805337&t=2RVXH6I2TUT4UOPp,0.7426877043855467&_I=&_AO=0&_NOL=0&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04ncid%03mbr_rusacqdsp00000691%04A_pr%03https%04A_tzoff%031%04A_sid%03tPDO6VATZHtuH6mF%04_w%03www.aol.com%2Fproducts%2Futilities%2Fad-free-mail%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.lifestore%04ver%03mcare%04pstcat%03product-detail%04pg_name%03AOL%20Products%20-%20Ad-Free%20Mail%04pt%03utility%04product%03Ad-Free%20AOL%20Mail%04milestone%03product-view%04site%03en-us%04pl4%03ad-free-mail%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031709508457%04A_prems%03748%04_E%03dwell%04_ts%031709508461%04_ms%03474%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/cross.svg	false		high
https://www.aol.com/lib/metro/g/myy/rapidworker_1_2_0.0.2.js	false		high
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348145722112&time=1709508408212&seq=3&response_time_ms=2627	false		high
https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false		high
https://edge-auth.api.brightcove.com/playback/v1/accounts/6415665815001/videos/6348016108112	false		high
https://3p-geo.yahoo.com/p?s=1197803361&t=Ielwz1sf1Elf9ep8,0.4855611982310222&_I=&_AO=0&_NOL=1&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-aa-2%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03KjBZped2yRrWXXhX%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aolfrontpage%04site%03aolfrontpage%04mrkt%03us%04lang%03en-US%04colo%03us-east-1%04_yrid%0302r7skdiua1p4%04_rid%0302r7skdiua1p4%04abk%03%04A_utm%03%7B%22perf_fcp%22%3A2898%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031709508395%04_ms%03131%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://pm.w55c.net/ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Ddxu%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D_wfivefivec_	false		high
https://lg1.hb.yahoo.net/log?logid=kfk&evtid=brqlog&itype=YHB&tElp=53901&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=-3&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&pbAcid=115808224950101171709508448142&pbBidId=98796538270567361709508448159&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf=	false		high
about:blank	false	Avira URL Cloud: safe	low
https://s.aolcdn.com/caas-assets-production/assets/v1/notification_banner.915ccd933b879101.js	false		high
https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%207213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&rnd=RND	false	Avira URL Cloud: safe	unknown
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348144188112&time=1709508426232&seq=14	false		high
https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&redir=true&gdpr=0&gdpr_consent=&dcc=t	false		high
https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/js/vendor/jquery-2.0.1.min.js	false		high
https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=26&ns_st_sp=1&ns_st_sc=1&ns_st_psq=13&ns_st_asq=13&ns_st_sq=13&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=11502&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11502&ns_st_dpt=9&ns_st_ipt=9&ns_st_ap=11502&ns_st_dap=9&ns_st_et=39496&ns_st_det=9&ns_st_upc=11502&ns_st_dupc=9&ns_st_iupc=9&ns_st_upa=11502&ns_st_dupa=9&ns_st_iupa=9&ns_st_lpc=11502&ns_st_dlpc=9&ns_st_lpa=11502&ns_st_dlpa=9&ns_st_pa=11502&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508457835&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=13&ns_st_dpc=1&ns_st_pp=13&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.aol.com%2F&tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&axids=gam%3Dy-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A%26dv360%3DeS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B%26ydsp%3Dy-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A%26tbla%3Dy-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1	false		high
https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10192611&ec=aolmailrtg&gtmcb=2055888851	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	false		high
https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/scroll-indicator.js	false		high
https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25036%2C25278%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25033%2C25274%2C25276%2C25071%2C25202%2C25003%2C25245%2C25127%2C25006%2C25204%2C25126%2C25007%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	false		high
https://oidc.help.aol.com/login?dest=https%3A%2F%2Fhelp.aol.com%2Fapi%2Fcustomer%2Fprofile&language=en-US&src=pseauth	false		high
https://s.yimg.com/ch/icons/adchoices/adchoicesblue.png	false		high
https://s.yimg.com/aaq/wf/wf-image-1.4.0.js	false		high
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2	false		high
https://lg1.hb.yahoo.net/log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2615&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25307&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf=	false		high
https://edge-auth.api.brightcove.com/playback/v1/accounts/6415665815001/videos/6348152174112	false		high
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348145722112&time=1709508405585&seq=2	false		high
https://s.aolcdn.com/caas-assets-production/assets/v1/utils.9111c432fb133fce.js	false		high
https://ups.analytics.yahoo.com/ups/58739/cms?partner_id=BLKAI&orig=ono	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&gdpr=0&gdpr_consent=	false		high
https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=ZjMzODUzYjBjYzE5ZGZjYjYwMzY4ZDY3Y2QxMzMxMzkxN2RlNzc1Mg&gdpr=0	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=32039267&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=2056953496763385149&gdpr=0&gdpr_consent=	false		high
https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-96x96.png	false		high
https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=ac1c86f1c864869accf8544da530e03be9b801e8	false		high
https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F41d3b880-3404-11eb-937b-3aacf54802f7&client=76f99bdb8f78cd44cc0b&signature=ab41e87f69cf3babf4095d9b8ba35b1a6bbdb360	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:IKSGvoFb1RGVed5&gdpr=0&gdpr_consent=	false		high
https://sync.technoratimedia.com/services?srv=cs&nuid=2E84A48E09184096882C93C926E94179&att=1&pid=46&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=2056953496763385149	false	Avira URL Cloud: safe	unknown
https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=13&ns_st_sp=1&ns_st_sc=1&ns_st_psq=7&ns_st_asq=7&ns_st_sq=7&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=11422&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11422&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=11422&ns_st_dap=0&ns_st_et=31855&ns_st_det=4&ns_st_upc=11422&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=11422&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=11422&ns_st_dlpc=0&ns_st_lpa=11422&ns_st_dlpa=0&ns_st_pa=11422&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508450194&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=6&ns_st_dpc=0&ns_st_pp=6&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png	false		high
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LTC55UNV-1B-13RH	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png	false		high
https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7627948201254899201	false		high
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348152174112&time=1709508424774&seq=10&response_time_ms=3267	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1813050730410820489	false		high
https://rtb.mfadsrvr.com/sync?ssp=google&no_redirect=1&google_gid=CAESEHCGma9YkBLeeRR1TOzfYEc&google_cver=1	false	Avira URL Cloud: safe	unknown
https://ssp-sync.criteo.com/user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=0349ad77-5ea1-447f-9167-09b58573447a&gdpr=0&gdpr_consent=	false		high
https://s.aolcdn.com/caas-assets-production/assets/v1/gam.865272a6dce058cc.css	false		high
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348150529112&time=1709508427326&seq=16	false		high
https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=5286816B-07A3-4831-82CF-92827DD7440E&redir=true&gdpr=0&gdpr_consent=&dcc=t	false		high
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=5e803909-7b6d-45a4-8be8-533d655de3d1	false	Avira URL Cloud: safe	unknown
https://3p-geo.yahoo.com/p?s=1197805337&t=4EAVD0NupKKNk2yy,0.8232030662922181&_I=&_AO=0&_NOL=0&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04ncid%03mbr_rusacqdsp00000691%04A_pr%03https%04A_tzoff%031%04A_sid%03tPDO6VATZHtuH6mF%04_w%03www.aol.com%2Fproducts%2Futilities%2Fad-free-mail%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.lifestore%04ver%03mcare%04pstcat%03product-detail%04pg_name%03AOL%20Products%20-%20Ad-Free%20Mail%04pt%03utility%04product%03Ad-Free%20AOL%20Mail%04milestone%03product-view%04site%03en-us%04pl4%03ad-free-mail%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031709508447%04A_prems%03406%04_E%03dwell%04_ts%031709508448%04_ms%03434%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://www.google.com/pagead/landing?gcs=G1--&gcd=13l3l3l3l5&rnd=2074632853.1709508442&url=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html&dma=0&npa=0&tcfd=10e44&gdpr_consent=tcempty&gdpr=0&gtm=45He42t1n81NB4W2NQv860054492za220	false		high
https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/adobe-target.js	false		high
https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2F462e6bf0-d9a6-11ee-8fdb-97e4a78cac99&client=76f99bdb8f78cd44cc0b&signature=80f3b8ccdec8c8efc49aee8b4ef4a62513d778c4	false		high
https://3p-geo.yahoo.com/p?s=1197803361&t=oDsW5KhRsKhN5pue,0.4783500708178787&_I=&_AO=0&_NOL=1&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-aa-2%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03KjBZped2yRrWXXhX%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aolfrontpage%04site%03aolfrontpage%04mrkt%03us%04lang%03en-US%04colo%03us-east-1%04_yrid%0302r7skdiua1p4%04_rid%0302r7skdiua1p4%04abk%03%04A_utm%03%7B%22perf_ttfb%22%3A868%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031709508395%04_ms%03134%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false		high
https://lg1.hb.yahoo.net/log?logid=kfk&evtid=brqlog&itype=YHB&tElp=53897&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25307&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf=	false		high
https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false		high
https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/navbar.js	false		high
https://lg1.hb.yahoo.net/log?logid=kfk&evtid=brqlog&itype=YHB&tElp=53893&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25014&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf=	false		high
https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=5aa61d192ca3818eb6ba7e0db0dc91240b4ed0b6	false		high
https://sync.targeting.unrulymedia.com/csync/RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005	false		high
https://idsync.rlcdn.com/1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDcyMTNEQkI0LThDNEUtNDVGOC1CQUM4LTIxNDlEMzJBOEIxRhAAGg0IxY6UrwYSBQjoBxAAQgBKAA	false		high
https://tsdtocl.com/	false	URL Reputation: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:052965e5-0745-4000-9327-cb3c56f7de4d&gdpr=0&gdpr_consent=	false		high
https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=24&ns_st_sp=1&ns_st_sc=1&ns_st_psq=12&ns_st_asq=12&ns_st_sq=12&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=11493&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11493&ns_st_dpt=12&ns_st_ipt=12&ns_st_ap=11493&ns_st_dap=12&ns_st_et=39354&ns_st_det=12&ns_st_upc=11493&ns_st_dupc=12&ns_st_iupc=12&ns_st_upa=11493&ns_st_dupa=12&ns_st_iupa=12&ns_st_lpc=11493&ns_st_dlpc=12&ns_st_lpa=11493&ns_st_dlpa=12&ns_st_pa=11493&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508457693&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=12&ns_st_dpc=1&ns_st_pp=12&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://lg1.hb.yahoo.net/log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2606&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25014&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf=	false		high
https://rtb-use.mfadsrvr.com/sync?ssp=google&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://s.amazon-adsystem.com/dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0	false		high
https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FI6DaBWv57W5cAMSJrdUW0w--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2F76ers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=cae8d7c451f50d2dd6da30979cae9ae2c7f3e628	false		high
https://lg1.hb.yahoo.net/log?logid=kfk&evtid=brqlog&itype=YHB&tElp=53895&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25113&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf=	false		high
https://eb2.3lift.com/xuid?mid=7976&xuid=5286816B-07A3-4831-82CF-92827DD7440E&dongle=u6nf&gdpr=0&gdpr_consent=	false		high
https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=8&ns_st_sp=1&ns_st_sc=1&ns_st_psq=4&ns_st_asq=4&ns_st_sq=4&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=7821&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=7821&ns_st_dpt=6&ns_st_ipt=6&ns_st_ap=7821&ns_st_dap=6&ns_st_et=20204&ns_st_det=6&ns_st_upc=7821&ns_st_dupc=6&ns_st_iupc=6&ns_st_upa=7821&ns_st_dupa=6&ns_st_iupa=6&ns_st_lpc=7821&ns_st_dlpc=6&ns_st_lpa=7821&ns_st_dlpa=6&ns_st_pa=7821&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508438543&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=4&ns_st_dpc=1&ns_st_pp=4&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://oidc.help.aol.com/login?dest=	chromecache_365.2.dr	false		high
https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN	chromecache_686.2.dr, chromecache_614.2.dr	false		high
https://products.gobankingrates.com	chromecache_592.2.dr	false		high
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Light.woff)	chromecache_956.2.dr	false		high
https://s.aolcdn.com/images/dims?thumbnail=400%2C225%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%	chromecache_678.2.dr	false		high
https://live.rezync.com	chromecache_938.2.dr	false		high
https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff)	chromecache_956.2.dr	false		high
https://support.office.com/en-us/article/Add-an-email-account-to-Outlook-6e27792a-9267-4aa4-8bb6-c84	chromecache_926.2.dr, chromecache_465.2.dr	false		high
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff)	chromecache_956.2.dr	false		high
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	chromecache_614.2.dr	false		high
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Thin.woff2)	chromecache_956.2.dr	false		high
https://pubads.g.doubleclick.net/adsid/integrator.json?aos=	chromecache_499.2.dr	false		high
https://s.aolcdn.com/os/help-main/content-types/article	chromecache_465.2.dr	false		high
https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.eot?#iefix-3	chromecache_956.2.dr	false		high
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-SemiboldItalic.woff)	chromecache_956.2.dr	false		high
https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&outcm=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fw	chromecache_382.2.dr	false		high
https://code.jquery.com/jquery-3.6.3.min.js	chromecache_456.2.dr	false		high
https://subscriptions.aol.com	chromecache_938.2.dr	false		high
https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=5286816B-07A3-4831-82CF-92827DD7440E&re	chromecache_955.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
152.195.55.192	cs550162656.adn.psicdn.net	United States		15133	EDGECASTUS	false
151.101.194.27	unknown	United States		54113	FASTLYUS	false
151.101.2.27	dualstack.brightcove.map.fastly.net	United States		54113	FASTLYUS	false
34.95.69.49	i.clean.gg	United States		15169	GOOGLEUS	false
54.198.146.149	prod-rotation-v2.guce.aws.oath.cloud	United States		14618	AMAZON-AESUS	false
172.66.47.75	aolserv.pages.dev	United States		13335	CLOUDFLARENETUS	false
68.67.179.155	unknown	United States		29990	ASN-APPNEXUS	false
35.236.220.17	um.simpli.fi	United States		15169	GOOGLEUS	false
68.67.161.182	unknown	United States		29990	ASN-APPNEXUS	false
100.26.88.123	rtb.adentifi.com	United States		14618	AMAZON-AESUS	false
151.101.193.44	unknown	United States		54113	FASTLYUS	false
52.216.50.121	s3-w.us-east-1.amazonaws.com	United States		16509	AMAZON-02US	false
195.244.31.11	visitor-usa02.omnitagjs.com	France		63140	IGUANA-WORLDWIDEUS	false
69.90.254.78	ums.acuityplatform.com	Canada		13768	COGECO-PEER1CA	false
35.170.143.77	unknown	United States		14618	AMAZON-AESUS	false
34.225.231.221	ds-ycpi-pn-ybp.gysm.yahoodns.net	United States		14618	AMAZON-AESUS	false
151.101.1.44	tsdtocl.com	United States		54113	FASTLYUS	false
107.178.254.65	pippio.com	United States		15169	GOOGLEUS	false
54.205.210.54	unknown	United States		14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
151.101.65.44	tls13.taboola.map.fastly.net	United States		54113	FASTLYUS	false
134.122.57.34	match.adsby.bidtheatre.com	United States		14061	DIGITALOCEAN-ASNUS	false
54.145.107.21	unknown	United States		14618	AMAZON-AESUS	false
18.238.55.58	synchroscript.deliveryengine.adswizz.com	United States		16509	AMAZON-02US	false
23.77.240.29	unknown	United States		16625	AKAMAI-ASUS	false
192.229.211.36	cs629.wpc.lambdacdn.net	United States		15133	EDGECASTUS	false
3.215.106.87	unknown	United States		14618	AMAZON-AESUS	false
23.40.179.62	unknown	United States		16625	AKAMAI-ASUS	false
18.238.49.52	sb.scorecardresearch.com	United States		16509	AMAZON-02US	false
142.251.40.198	s0.2mdn.net	United States		15169	GOOGLEUS	false
23.40.179.59	lg1.hb.yahoo.net	United States		16625	AKAMAI-ASUS	false
13.225.214.90	d20qwf0wrdtevy.cloudfront.net	United States		16509	AMAZON-02US	false
142.251.40.196	www.google.com	United States		15169	GOOGLEUS	false
52.0.10.132	sync.crwdcntrl.net	United States		14618	AMAZON-AESUS	false
34.200.65.202	unknown	United States		14618	AMAZON-AESUS	false
18.238.55.69	unknown	United States		16509	AMAZON-02US	false
52.201.82.109	thrtle.com	United States		14618	AMAZON-AESUS	false
18.173.132.105	unknown	United States		3	MIT-GATEWAYSUS	false
54.211.182.170	cdn.w55c.net	United States		14618	AMAZON-AESUS	false
34.102.163.6	ad.mrtnsvr.com	United States		15169	GOOGLEUS	false
108.138.129.160	www.datadoghq-browser-agent.com	United States		16509	AMAZON-02US	false
52.86.42.47	idaas-ext.cph.liveintent.com	United States		14618	AMAZON-AESUS	false
44.195.157.207	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com	United States		14618	AMAZON-AESUS	false
142.251.35.162	securepubads46.g.doubleclick.net	United States		15169	GOOGLEUS	false
35.207.24.140	pool-bid-gce-us.dorpat.iponweb.net	United States		19527	GOOGLE-2US	false
54.243.148.230	unknown	United States		14618	AMAZON-AESUS	false
74.119.119.73	ssp-sync.va1.vip.prod.criteo.com	United States		19750	AS-CRITEOUS	false
104.36.115.113	pugm88000nfc.pubmnet.com	United States		62713	AS-PUBMATICUS	false
40.76.134.238	us01.z.antigena.com	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.24.48	cs964199420.wpc.mucdn.net	United States		15133	EDGECASTUS	false
142.250.72.102	unknown	United States		15169	GOOGLEUS	false
3.230.217.116	unknown	United States		14618	AMAZON-AESUS	false
104.18.36.155	dsum.casalemedia.com	United States		13335	CLOUDFLARENETUS	false
104.18.38.76	js-sec.indexww.com	United States		13335	CLOUDFLARENETUS	false
104.36.115.111	gob-njr3.pubmnet.com	United States		62713	AS-PUBMATICUS	false
18.238.49.124	unknown	United States		16509	AMAZON-02US	false
142.251.41.2	cm.g.doubleclick.net	United States		15169	GOOGLEUS	false
34.206.105.187	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com	United States		14618	AMAZON-AESUS	false
18.173.219.51	unknown	United States		3	MIT-GATEWAYSUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom		39832	NO-OPERANO	false
142.251.41.1	pagead-googlehosted.l.google.com	United States		15169	GOOGLEUS	false
52.4.203.155	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States		14618	AMAZON-AESUS	false
18.238.49.99	unknown	United States		16509	AMAZON-02US	false
195.5.165.20	core.iprom.net	Slovenia		44968	IPROM-ASSI	false
52.71.191.116	match.prod.bidr.io	United States		14618	AMAZON-AESUS	false
52.71.97.125	unknown	United States		14618	AMAZON-AESUS	false
34.110.207.99	rtb-cache.hb.yahoo.net	United States		15169	GOOGLEUS	false
34.193.135.180	crb.kargo.com	United States		14618	AMAZON-AESUS	false
162.248.18.34	spug-njrpb.pubmnet.com	United States		62713	AS-PUBMATICUS	false
108.138.125.44	d1sjyfqescdy46.cloudfront.net	United States		16509	AMAZON-02US	false
151.101.130.27	unknown	United States		54113	FASTLYUS	false
74.6.143.22	ncp-gw-video.g03.yahoodns.net	United States		26101	YAHOO-3US	false
34.111.113.62	pixel.tapad.com	United States		15169	GOOGLEUS	false
35.186.193.173	i.ctnsnet.com	United States		15169	GOOGLEUS	false
67.220.226.233	unknown	United States		18450	WEBNXUS	false
54.198.32.5	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com	United States		14618	AMAZON-AESUS	false
68.67.179.166	ib.anycast.adnxs.com	United States		29990	ASN-APPNEXUS	false
151.101.129.44	unknown	United States		54113	FASTLYUS	false
23.47.168.66	contextual.media.net	United States		16625	AKAMAI-ASUS	false
54.158.147.217	rtb.gumgum.com	United States		14618	AMAZON-AESUS	false
142.251.40.98	unknown	United States		15169	GOOGLEUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States		13335	CLOUDFLARENETUS	false
69.194.240.13	sync.1rx.io	United States		6336	TURN-US-ASNUS	false
54.204.110.249	unknown	United States		14618	AMAZON-AESUS	false
52.7.155.131	unknown	United States		14618	AMAZON-AESUS	false
35.214.170.179	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States		19527	GOOGLE-2US	false
142.250.176.194	googleads.g.doubleclick.net	United States		15169	GOOGLEUS	false
162.248.18.37	pug-njrpb.pubmnet.com	United States		62713	AS-PUBMATICUS	false
74.119.119.139	gum.va1.vip.prod.criteo.com	United States		19750	AS-CRITEOUS	false
38.91.45.7	unknown	United States		174	COGENT-174US	false
35.244.154.8	idsync.rlcdn.com	United States		15169	GOOGLEUS	false
38.68.201.140	pmp.mxptint.net	United States		39988	INTELLIGENT-TECHNOLOGY-SOLUTIONSUS	false
34.196.218.225	ds-pr-bh.ybp.gysm.yahoodns.net	United States		14618	AMAZON-AESUS	false
18.205.47.0	unknown	United States		14618	AMAZON-AESUS	false
66.218.87.15	fam-geo-atsv2.prod.media.g03.yahoodns.net	United States		26101	YAHOO-3US	false
193.122.128.135	adserver.technoratimedia.com	United States		31898	ORACLE-BMC-31898US	false
108.138.128.93	unknown	United States		16509	AMAZON-02US	false
34.224.160.74	unknown	United States		14618	AMAZON-AESUS	false
54.231.163.129	unknown	United States		16509	AMAZON-02US	false
52.44.19.224	sync.ipredictive.com	United States		14618	AMAZON-AESUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1402259
Start date and time:	2024-03-04 00:25:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://aolserv.pages.dev/robots.txtIP:
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@65/1106@567/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.aol.com/ Browse: https://help.aol.com/ Browse: https://www.aol.com/products/utilities/ad-free-mail?ncid=mbr_rusacqdsp00000691

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.72.99, 142.251.41.14, 142.250.31.84, 34.104.35.123, 142.250.80.74, 142.251.40.106, 142.250.64.106, 142.250.72.106, 142.250.80.10, 142.251.41.10, 142.251.40.138, 142.250.65.234, 142.250.81.234, 142.251.40.170, 142.251.32.106, 142.251.35.170, 142.250.176.202, 142.250.80.42, 142.251.40.202, 142.250.80.106, 142.251.40.142, 142.250.80.78, 142.250.80.110, 40.127.169.103, 52.165.164.15, 142.250.65.202, 142.250.65.170, 23.51.57.13, 8.43.72.32, 199.38.167.131, 151.101.130.49, 151.101.66.49, 151.101.194.49, 151.101.2.49, 69.173.151.100, 23.51.57.131, 23.73.244.44, 23.199.48.23, 159.127.43.169, 142.250.72.97, 172.217.165.130, 13.85.23.86, 13.95.31.18, 23.47.170.102, 69.194.242.12, 142.251.40.234, 63.251.28.233, 63.251.28.234, 63.251.28.134, 63.251.28.133, 8.18.45.105, 3.217.51.221, 216.34.207.169, 96.17.64.208, 23.200.3.26, 23.200.3.7, 23.200.3.11, 23.200.3.12, 23.200.3.20, 23.200.3.21, 23.36.85.188, 185.167.164.52, 185.167.164.53, 142.251.40.193, 142.250.65.162, 23.216.
Excluded domains from analysis (whitelisted): fp4.ads.stickyadstv.com.akadns.net, tags.bluekai.com.edgekey.net, uipglob.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, e9126.x.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, rtb-csync-geo.usersync-prod-sas.akadns.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, imasdk.googleapis.com, na-east-digital-dual-active.fwgtm.akadns.net, pagead2.googlesyndication.com, players.brightcove.net.edgekey.net, edgedl.me.gvt1.com, a-us-east.rfihub.com.akadns.net, rtb.adgrx.com.tech.akadns.net, e6603.g.akamaiedge.net, eus.rubiconproject.com.edgekey.net, g11v.fwgtm.akadns.net, clients.l.google.com, wildcard.owneriq.net.edgekey.net, h2.shared.global.fastly.net, dualstack.k.sni.global.fastly.net, pixel.rubiconproject.net.akadns.net, e11294.g.akamaiedge.net, track.adformnet.akadns.net, tagged-by.rubiconprojec
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://aolserv.pages.dev/robots.txtIP:

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 290

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42356
Entropy (8bit):	5.351903146875997
Encrypted:	false
SSDEEP:	384:nvWe2+5f0QjvAcrU1WivLqHeXDZYZ8IaGRRyr4lH7xlIuSULCrYc9ahi0:++B0Y7remNZ0GP57xeb38c9ahi0
MD5:	A7830EC310497514636A3160AB50BA4D
SHA1:	C12D14F05047107B1509E58827BC040248A16575
SHA-256:	8E2B415197995065A91926F5C7AD3DD672DC9B75AB31CE09BD39AF85233A8C17
SHA-512:	60456673227A48DF5F2B5F31E6FD17F07194160B8449B1D2B4444522FC48FCB1756597F5BC8BEDD4D6AE188757FB450EF807EE2E4498BB44B971AA2401C5D7F3
Malicious:	false
Reputation:	low
Preview:	{"data":{"curatedVideos":{"streamInfo":{"returnedListCount":12,"requestedCount":120,"streamType":"jarvis","snippetCount":12,"queryProfile":"assetlist_single_feed","id":"JARVIS:curatedVideos:assetlist_single_feed:null","jarvisFeedName":"main","params":{"feed.main.pagination":true,"feed.main.pagination.snippet_count":12,"feed.main.dedup_uuids":"","feed.main.count":120,"feed.main.stream.asset_list.listAlias":"ymedia-alias:playlist=aolcom-homepage","feed.main.stream.asset_list.variableArr":{"streams.blacklisted.enable":[false]},"feed.main.dedup.enabled":true,"feed.main.stream.asset_list.listId":"","feed.main.filter.contentTypes":"video"},"streamName":"curatedVideos"},"listInfo":{"info":{"id":"cb43b5d0-9b51-11ea-9de6-a66d97c2b28d","title":"AOL.com Homepage Video List_122123","description":"Main PowerBaby Module on AOL.com Homepage"}},"stream":[{"content":{"id":"3caca4ca-191c-3933-bab5-595ca1d1495a","title":"Winter storm wreaks havoc across Sierra Nevadas","description":"A winter storm is sl

Chrome Cache Entry: 291

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3920), with no line terminators
Category:	downloaded
Size (bytes):	3920
Entropy (8bit):	5.0776707896148014
Encrypted:	false
SSDEEP:	48:YozhSx5M2PjYJakqOcyGbmq1Tk0yXD0TtZH/yVL74hk+oy+JZFs2dM+Gbnq1kk0X:3hqjgjq1Tryw//UXqcjGq1krpteCGy
MD5:	2429AF8E863DD0A24A014A7270AEC347
SHA1:	214F5F82D8E8C0E5D9D60607C2DC609BE4C0AC50
SHA-256:	EB27798916686B1D4F0A2C925901767C4C14DC2A2C7B5CEEC0EE959A65AA4296
SHA-512:	68AF9A0E544DCA6E1F9C29B0C50624FA5EAD05D704677174A77F924A478F0930E6BE716B630FCEA0B7343EBE2FB13227266D408E2CCB59E0166855A3AE832266
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-text-1.2.0.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-text"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(

Chrome Cache Entry: 292

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	105664
Entropy (8bit):	7.998285669998278
Encrypted:	true
SSDEEP:	1536:TEAVxQkL5j3aXzXDf75A/BWL+PUIAQ94SChJzkOnpt82sjcdlQ5n7OI:TLVxjL5j3MDk0F04SiJg6M2sIvm5
MD5:	3EFF6DDAABCAF86C5FF4413CA1FC3CFC
SHA1:	F1F24E35FE63225AC763ABCA54B838AD62DA8389
SHA-256:	897B2324A6FC02977752898F808F745A87DC372156303408F93DD1C7DBEBEDA2
SHA-512:	106A79079A566BCE8F7815BC3131356812D0DDB3E18FBB4E1FCD93C7029BA24E928B931EC1E2E483119FC39A646394FB214162CB8F1AA424F34B41FA01ABA8DB
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment4.ts?akamai_token=exp=1709530988~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e8b40a2463d355aee79ce16d02f266fb895828cb22f6586733f56f035b643b4a
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI....T.9Cj..i.T5.......M..q......=.....c...h..(....._.h>.b...[.#NN..l.......d.K.W.v..\|t!..YZ^Q.Z.p`..%...s..K.0...d......q(?...N...1.B.}."6.....nL.T.......2Wa...&..5..%)........6.h...9Y.6..)....e3......d3.p.$}D.)'..[.....?}..]~...B....GX..s....."\.......<. 9;..9....1\ ..6..^.. ......)@....D..x..M...S..R[.z..S.N.A._..-.....Z..a.....qBg..B...Z.D6.F..H5..fcb.mN..].$C.7..q9DH...Y>..`2;-....Z.\|.(.X....m.X.k.;.^P..o......6.IF ~...418.S+..l-.%..^.X...d..j..M...........Z...@.(.....A..:e..^<..u..6.X.8.Y......y...h...N.1....m8Yv....e........vBD.J.. ^>-..9\|.D......g..*..fL..`;XJ.c...^,[.Y.7.J...

Chrome Cache Entry: 293

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2270), with no line terminators
Category:	downloaded
Size (bytes):	2270
Entropy (8bit):	5.293637408833405
Encrypted:	false
SSDEEP:	48:cfPNl5QMIly3GypSVtt+JQkZabltQkZabEFwTQkZabIjFwl64K+pz+twaz:cfPChpycJ+exbQxbEF3xbIjC04K++9
MD5:	2F0B6D18F9D045D884A2FE0463D1394F
SHA1:	ACF12BF7854F0CCDE35FBE2A3F145F89A2056F66
SHA-256:	70C56D62A43971CAB8ED932003F097F77FF44A16C329E11985E960271AB787DA
SHA-512:	EF6044EB84728F69383CA33444CC1C0AB6B566C6652E07F7055AB384E6DC084E16383FD38D24383E9F91890FF851AFD60FD9EACC93C5D6ABE568678426477F9A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/hero.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.hero=function(t){"use strict";function n(t,n){var e="function"==typeof Symbol&&t[Symbol.iterator];if(!e)return t;var o,r,i=e.call(t),a=[];try{for(;(void 0===n\|\|n-- >0)&&!(o=i.next()).done;)a.push(o.value)}catch(t){r={error:t}}finally{try{o&&!o.done&&(e=i.return)&&e.call(i)}finally{if(r)throw r.error}}return a}function e(t,n,e){if(e\|\|2===arguments.length)for(var o,r=0,i=n.length;r<i;r++)!o&&r in n\|\|(o\|\|(o=Array.prototype.slice.call(n,0,r)),o[r]=n[r]);return t.concat(o\|\|Array.prototype.slice.call(n))}var o;function r(){for(var o,r=[],i=0;i<arguments.length;i++)r[i]=arguments[i];t.store.debug&&(o=t.logger.tag("hero")).info.apply(o,e([],n(r),!1))}return function(t){t.DEV="dev",t.QA="qa",t.QA5="qa5",t.STAGE="stage",t.PROD="prod"}(o\|\|(o={})),t.store.once("PAGE_LOADED",(function(){r("Handling % event","PAGE_LOADED");try{t.dom.applyFunction(".hero",(function(n){var e=n.parentElement.id;e&&t.rapid.initializeViewabilityTracking("#".concat(e),e)}))}catch(t){r(

Chrome Cache Entry: 294

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156078&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&predirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dpub%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D%0A
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 295

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	105664
Entropy (8bit):	7.998324180471296
Encrypted:	true
SSDEEP:	3072:1zddgoskn0mtcLyep7KF+B0JbWxmvmLj8GMgnngsjTOt:NdGXkDwyepuy0rGznTjTOt
MD5:	C8047A4310262FEA1D12BE758D926E2A
SHA1:	A61F221417FA6248161AE51AAF2ACCF4FE0FFD24
SHA-256:	3A982902B0FA6EEA6BB75861DAC431A158A5A367D62D37B58C33DC9E07608AE9
SHA-512:	BE215F5963BC61BA98C5824099C937161BC3FBE9257015EE7A8DCD06A0AC716FEE6711DA2CC564ED719E08D996966ED2D8A4064D2173CC8CDC5E3AD1DBCF64DF
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment3.ts?akamai_token=exp=1709530988~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e8b40a2463d355aee79ce16d02f266fb895828cb22f6586733f56f035b643b4a
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI....'p5b......X(.!..#.l.w......@y.\3...n....U....f#PY.3..\|g..7...f.\|.[.......3.....'..N_....ko./.....F..p.DYl...#T..^..#~5...%..}AQ.H.).5..W............t3....aF..0....d..t.....{..#@.......~.wL.O.z...Z....G!......X.T...b.m*...i..$lI.....A.......X&[p.B...M.....M...3..{k_.<.....;.K..a.~Y.;..f.,.c..$.m.....,3b...oX....J.../.C..O...Gq.^./Z.....l3...73h...\|A..GWF.^d..>..&..V..K.bU...t.....2.!f`..........im.....$1.a.h.Y.O$2K.D.o.>..7..}>.\|L.R(.(......G...l.(.0.....}$...L5.q..m.._......=.;[.Y.Q...p....9.......J'U...t.O2.2..1T.....v.~...'..?.G........k.....'P.;...b.R..1:..v.^2.Q..<o.Z)....!3...X!.....

Chrome Cache Entry: 296

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 297

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 298

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	109056
Entropy (8bit):	7.998155130411241
Encrypted:	true
SSDEEP:	3072:dgvKLK/KR7VHIoOCLt5mXgQDj+uT4LaV4Wif:mvZShVkCLtut4W4B
MD5:	B70310FBF6CD522B7B917154DEAC82F1
SHA1:	1372AAFF1423E3919120356A70B3729941B8BCFC
SHA-256:	FFD81272B70EB147A92715AF01FF430B5A65E9F172F0E8A53CFF63EEEC21293C
SHA-512:	9CB07027A1CE7B65F1EE5007F5DFF1C7DE573C170133C4642826FD7517F208C8FF4CD52DCB3B3564BED4F08A1FF4C75F743B801B763C9CC125E162A08928EAA4
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI........o^...$n....@.{.d.:- .....,...K.a.~j?.6&j>..L.%]..............4,.U...P...7v..I....U.i..<wM..w..H..R.K...aXT.3.E.g7QZ.P.>~....y..9.....D...._\|...l......i..s.....Z.j..9D....f}...lv..h.dh......+....n.U..G.BeL3j...).-...k.qG.2B./../V$.......M..../......o..Q.}.......'].v[.l.9....../.pa..2..Vh,0..>%6.2...x..T...ma'..J..di9.w~-=....g\|........1MtJZ.5...Wt.....\|!...1&s...o...7.\.../.H.A.?#.=~.O.....E.I....Bx.k"o.m.&]h...h...P}.\+.....&..K....l^,X>g9...T.+..].....w.t....\.........ag<..F$P...y.."lS....=.@.2KS..o$.z.H.......[...a!P.......*.e+.d....e .j5.(b.C?.2l....x.0(}2.Z..=....vi..^.9]HP..4...%.:..~.<.

Chrome Cache Entry: 299

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1414
Entropy (8bit):	7.607472877824864
Encrypted:	false
SSDEEP:	24:wPgfg4/cpE7vs7jsx1uCAGWgMSKKgGMEaqHeH0PlZbp/75a:tfEEm4/ueWvSErN0PrbpE
MD5:	C5072F4F3A2588F7B3C1E237A3A1A4B3
SHA1:	E1AA80557EEEC3361706454950D32236998AAA25
SHA-256:	44BD585BFE101ACD1618A2072C6FE6BDC15612AD2049621BD2C95623199B964D
SHA-512:	EEC1A72CE0E588AC6DBF0926BE65B5229BBBCEE56DB4E55DC7AB07673E8D7303466C233873CB854E0F7C9703E864D4CEC740577194676AF3A2FF97BF9EE94D98
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T............................................#....#)" ")1,,1>;>QQm...... . .............z...................................................B."a1...................................................!.1Aq.a"....#............?..=Eu..bL..".....GN6.;.goU..r....R?J4@.n.cWVY(Q...+...y:X.>......9. .I.,.."....2..O9.3{:=PY.v..tTqB..Q..=...nz]...._......o.C.X~...x.c........h..,.p.{.3.z....>.8.U.j...}c....]......X........z....U..z.ls.D...>......y..n\..m9.&F....+...du..(c(.Py1 qQ.IY$.S..q.8..~.....OM..V...L(.m.r.h.....NO.]....K...Z...=.q...E...#Eby..K$.......'.......^..G8$.I.UWK..UYc....#.........U@\....MX3....g.<......8...+N.>.....-.^.v..X8...\|.....t..wW...S.......3...Op.n..uC..q..h;m\t.3.2..-4.........q..1.L....w>.5...Uw.d...2S.`.Tc... x..M...=.s...RC..!e..3 .".d:)V1M.F.O....C2Q.=,..,y...u..z...}.J..XP.,..9.'#r.F..].>c.G..~~....;v.$.rYZ...^-4...3y...M.<2... .9.....

Chrome Cache Entry: 300

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36248)
Category:	downloaded
Size (bytes):	98523
Entropy (8bit):	5.63738759952853
Encrypted:	false
SSDEEP:	1536:3Ew7WftFEMtCuOvIeuNagXR6h2oq87dt3eiWckdk:dWfK6HXQh5F
MD5:	C8EDC5371575486B9565C574017583A6
SHA1:	65EA56CF8C2C70BF33CE08EAF50A3ECDE1AC6468
SHA-256:	C0B1735592CB2D2453598477093D1DB098CC146525F7ACCD0BC89F32520C3A58
SHA-512:	B28C4C9A08DB96A8FDFFE5E44F89279136AF4B3FA5269114D16554B3DE38671448ED36D363C1B3A9B5DB000FB292F2671643A7BDB66CD15D7FC12178B3D85912
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},fa={},u=function(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 301

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	293
Entropy (8bit):	6.4750551588457315
Encrypted:	false
SSDEEP:	6:6v/lhPfUOlSJSSSSaffEX2iIHUk7aZ9mnuWIAJfZ9PXglt532ffcranZCtjp:6v/7/lSJSSSSafP3VK9mnuWh3gp32fzO
MD5:	FB63BB3AD5A7073858B9E60838B00C27
SHA1:	0D97131EB6E06430E5F3814A167FC1CD8221634E
SHA-256:	2BF78EFEABCC4E59EE927E997D3F4F465CBE08C127DC12CF9F10B4E1EAA6FAD2
SHA-512:	D8B6E3CBBC0A7FC2536980F6D524F9DEC169AA50182CE88AA5AC31B8595DAADAB0B24B57E9008B2717227E6260BB28FF38FF54A6F9A2AD3EEACDF534F799E40D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=ef85e8cf2223994c333ea8e9159b98ffe0bc6080
Preview:	.PNG........IHDR.............(-.S...NPLTEGpL......a.........................................l.....x..;..1.."..E..I..C..B1......tRNS.........1...T...\|IDAT..e....1......t..Q>`..........e..... ..X"../.........d.t.G.MEK.:.......X/fexx.j.....w.pH..J...5...O!I..v.6O.......e..........IEND.B`.

Chrome Cache Entry: 302

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	303
Entropy (8bit):	6.851067234343195
Encrypted:	false
SSDEEP:	6:6v/lhPfB2pJIMfJM/LTCaXPP1t2RJSsZZ1Ags8hRrIJ/E5zJ+8yBOGf2Rzq2up:6v/7YJVJ2LTZ/PnkSGZ1FX3rTJJrpGkg
MD5:	7D2BE088AD917300C315484257E2B54A
SHA1:	FCADE8CE8CF0A59D69CD3C7B1FA6EB0690C04128
SHA-256:	05A27A5D181998C2623C3DF03D385437AFBE893C313F0AA9DC82A652B0B5668A
SHA-512:	C77D056E4E8E7E5B9CF2DE7C3ECA1CA6DB24852D8893894A0557BBFBB050266794EDA256FC482460538B770618F828D0A6A702A4B5FB6ABCC62F43638F475C53
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fdd3f1af0-6985-11ec-bffd-65bff269a401&client=76f99bdb8f78cd44cc0b&signature=0b14194fa91554247f3b182be18f5c009196e427
Preview:	.PNG........IHDR.............(-.S...KPLTEGpL.)1..$."*.)1.)1.$,.)1.)1.)1.<B.^c......................NT....08.......w\|.9......tRNS.....1.....slh....IDAT..e.... .D.4....M.._Zhk.....cD......ie.....E..^..i+........^.....joL...@G.8.5.h..O..`hy\@,.CN..Z.h.....G.m.Xu#f}+.j:.H...`..r...O..Q&(.0....IEND.B`.

Chrome Cache Entry: 303

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 690 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48096
Entropy (8bit):	7.898215003733756
Encrypted:	false
SSDEEP:	768:UZAzrdxsPx2RcQokm++BCj6OxH3//wdbYEtZ/hFCnOZi7NdZwrCt:06rGxCNxX/4nLhZZi73ZuCt
MD5:	C2D3E450E3D2713695B001271660B07C
SHA1:	3EECD761C6A897025ED788FE0C9593891F083257
SHA-256:	70FD5611BFD459154EAB8B7C42538806C1D9CFBA2C266667543432411F5B19CB
SHA-512:	E66A6D698E954275CBA9C2AF09A6A213EC201B9FE1C5A010ACCF22D5AE7FC0BC50D2A65BA26AE9245A3E007E95C15B7594BCDDB747D9E637FDEE6E05B1F3F4BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................l....sRGB........DeXIfMM........i........................................................g.....@.IDATx....d.u.y....7czzz03.`f0.Fp$@..A.E.KJ.D..5......]qC.TPKQ...Q..I.....`.....3.}wUu.J.3..oVVeVWueVefeV.........~.;...T......=....q..........P.J@.(.%....Z.D.....M<.../[,.<...,w......%..3..w[V.S.J@.(.%.....P.u"0.~.....A.\....,D.....c...s%.....P.J@.(.%.@.7..oC.~u.m.e..A.Z..w..+x.....o...P.J@.(.%...H.Z.+..K.[...._.B._...W.J@.(.%.....P..H.o.._.u.P..R..../T....P.J@.(.%...@...F.V]h..YXc..Kw.mJ@.(.%.....P.J.U..\.g..Y.Xf'......!.q).%.....P.J@......2.A..).T...6%.....P.J@.(.V&@.J..P@1;...%.mJ@.(.%.....P..N.yf.(bY.KEl......P.J@.(.%...@....c..,;.M.(.%.....P.J@.......=.N#..%.....P.J@.(..8A!;.(...P.J@.(.%...@...f.W......u.J@.(.%.....P.[.@.Bv....f.{.....P.J@.(.%.N..Z.M.(.%.....P.J@......mw.t.J@.(.%.....P.$.BV..%.....P.J@.(..$.B.-...Z.(.%.....P.J@....J@.(.%.....P.mI@.l[.6...P.J@.(.%.....Y=....P.J@.(.%......<l:h%.....P.J@.(...z.(.%.....P.J@..%...my.t.

Chrome Cache Entry: 304

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1137)
Category:	downloaded
Size (bytes):	1173
Entropy (8bit):	4.9245661098350375
Encrypted:	false
SSDEEP:	12:VU+oFn2Ge8CxVYkJDi+QlbpJbOJcCgc0U2WQC5wB60ecmUEmUKo0wBzUGBzUKo1i:y+lVYqm+I8cgOfes5e7326z5j58AZ
MD5:	865272A6DCE058CCE0416EBCBF34E230
SHA1:	72985A6A9EEDFCAC177748E6A7306E6F6486321D
SHA-256:	27449F5BC3335833D268DBFCB080C50323B7C018B1454D81FF429C87F79C60F7
SHA-512:	37082D93857A0CA0692D31B16C7B275055DF7019953A12E9AB0E4B9B1F03C89FAFAC5F29AFCA42602F2152A097EB5868FB17109889DC2070CC495B9899C4B993
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/gam.865272a6dce058cc.css
Preview:	.m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;margin:0 auto}.m-gam__placeholder p{margin:0!important;padding:0!important}.m-gam__ad-lbl{margin:0 auto;padding:0;text-align:right;font-size:13px;line-height:1.35;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#6e7780}.smartphone .m-gam--loaded{margin:0 -10px}.smartphone .stream-container .m-gam--loaded{margin:0 -25px}.smartphone .caas-body .m-gam--loaded{margin:0 -20px}.m-gam__container--stacked{height:600px;overflow:hidden}.m-gam__container--stacked.m-gam__container--abp{height:617.55px}.mpu--stack .m-gam__container--stacked{height:512px}.mpu--stack .m-gam__container--stacked.m-gam__container--abp{height:547.1px}.m-gam__container--stacked .m-gam--stack-top{margin-bottom:12px}.m-gam__container--stacked .m-g

Chrome Cache Entry: 305

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:H2gd8zthk+MkYYn:d8BmLRY
MD5:	143255C20167CB962642030B73F66C52
SHA1:	F1EB37219B0E304DB7F93C7775C063DB9509E5C0
SHA-256:	8A7162BC2FF1BEB5204CF0A05E05B563637D3A517FCF4C69227083B0ED6A568C
SHA-512:	64F4C08B0E05595ED919D158A631E47BD1AB62DD4005500A5E2E2098A59FAF29AA15D7FE1F3262749D22277A1EC9C1C8584256250D1265BC7489A09EA7398410
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn-oBW9X9T6eBIFDQ5ATHMSEAloOkiBqTuJsxIFDQ-1Uno=?alt=proto
Preview:	CgkKBw0OQExzGgAKCQoHDQ+1UnoaAA==

Chrome Cache Entry: 306

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5079)
Category:	downloaded
Size (bytes):	5121
Entropy (8bit):	5.166031179122029
Encrypted:	false
SSDEEP:	96:/08026W6JHslO6HJswCpgx0P9HqMfDCpSB1Evyc:/X0vBWJ5CpBHz7Cps6x
MD5:	DC61A583417D3D7BC0D0C1D0D9F02F25
SHA1:	00292C2F340F511182CD51756C97A3594E64D5A4
SHA-256:	2A51D3D56F43C6184342431A5375A613B259CF61A9DED08978381D1730D81A96
SHA-512:	8F7FE33D242A0AB8B9BECB675621851815A290003E697CD0FD00AA7721960C1AF41735C4E6FFA4134BF4C642A6087BBB1E47CE953F44F14E327832508021BDD1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/recipe_search.dc61a583417d3d7b.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={9356:function(t){function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}var r={rapidInit:"rapid:init"};t.exports={events:r,rapidReady:function(t){window.rapidInstance?t(window.rapidInstance):document.addEventListener(r.rapidInit,(function(){t(window.rapidInstance)}),{passive:!0,once:!0})},ylkStringToObj:function(){var t=["itc","cpos","pos"];return(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"").split(";").filter(Boolean).reduce((function(r,n){var o,i,a=(o=n.split(":"),i=2,function(t){if(Array.isArray(t))return t}(o)\|\|function(t,e){var r=null==t?null:"undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(null!=r){var n,o,i,a,u=[],c=!0,l=!1;try{if(i=(r=r.call(t

Chrome Cache Entry: 307

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7434)
Category:	downloaded
Size (bytes):	7473
Entropy (8bit):	5.207851796970347
Encrypted:	false
SSDEEP:	192:/X0cegksCp1hH54LK+yvPH/4LEFNDqyWI1R:/X0c3CQ++b4XqDm
MD5:	6F82C6524C431D6FD3876AEDBD95F615
SHA1:	0F1B902FC43F878601892DDD27E79FF225BE33A6
SHA-256:	04CD158173FB47DBFD6A04DBE2E0BF8CFF33A4C7D822E7B2516F65EB8268ECDB
SHA-512:	828F3D014F95469874AE161ED61321A34CAC327485E8DA78CD20911DAEB9A9CBD3156965B4A80AF98C869EFA4D3122B589BD12D969CA60D8CB54265F28914982
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/ad_blocker.6f82c6524c431d6f.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={5497:function(t){t.exports={dispatchCustomEvent:function(t,e){var n=document.createEvent("CustomEvent");n.initCustomEvent(t,!1,!1,e),document.dispatchEvent(n)}}},9356:function(t){function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,o=new Array(e);n<e;n++)o[n]=t[n];return o}var n={rapidInit:"rapid:init"};t.exports={events:n,rapidReady:function(t){window.rapidInstance?t(window.rapidInstance):document.addEventListener(n.rapidInit,(function(){t(window.rapidInstance)}),{passive:!0,once:!0})},ylkStringToObj:function(){var t=["itc","cpos","pos"];return(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"").split(";").filter(Boolean).reduce((function(n,o){var r,i,c=(r=o.split(":"),i=2,function(t){if(Array.isArray(t))return t

Chrome Cache Entry: 308

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2128
Entropy (8bit):	7.677191672138757
Encrypted:	false
SSDEEP:	48:qXeCAk0/WsfR9tkzy6qRnoBpGKsvyFKoYDoxxrOXTL4t7:qXeSO9tkzKJcEKsvyQ5DMrOva
MD5:	A8A6107564C5F4AC3BB288F2DEFF0D0A
SHA1:	D7F5B5E4C2EB2B952D648899CCB1A520BDC29A90
SHA-256:	7536DF678E43FCD1BA8D125D456933603F55162E1CE7CB2E4A205A23A219760F
SHA-512:	E7296B2F42434C6FE2BF6A8120C64303F382E74EE167BD68BCCA5AC09BEE11A07730E311D83787373D9D5FB7F36F3E2B40BFC57FCFFAA4166BA4E7811234FF7A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuDR9Mwaq2Ewj20HNDbJCsg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fknicks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=425c28aa64f58f98097ebabb118cfcfeb80d8ffa
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.........................................................................................................................................................................................&....k..&....,..).{X.yc..2.k..~K]t..n..m..~FS..}Q.xi.....A./.za.{[$o.Os.0...8...J..k...z].~H.}O.-swr..C.\|T^...o..p.ywnbu\|l..@q.Ks..\|Q.1.(?......r..<......{.V...<.\|V.......l.'...{\9q.3..jvx.?:.......@.u..}M.zb(t....x..@}.a.....3...&\|..yh9..Q..4p..x..{Z}xl.m..*s..C.....x..#{..yg\..z`.xkV..4\|.Bx..yd.(6...m....a..u..du{...L..Yt..:\|..St..m.....6.4J......k..n.ovu....+.=Js....e..O..z_......a}..K....;}.,p....@.......D.....s....\..C.....h..........5v.v.. ~..}L#v....[..?..D.....y.......OGr....nvu.....eK.....g..%y./\|.W\|.{.........~vQ....g...\|d{..............>tRNS....4.(...{.!,1........x.w...Dm.ZO.`....>.A.;..u..Iso.6..j.wJg....IDAT....eT.Y.......`.......1..$0.t7H7H.4..C....`wwoww....g.."..}..o0.....dP...,....\|...m?,x..UC.$..2[..=

Chrome Cache Entry: 309

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 310

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	664
Entropy (8bit):	4.654474309626
Encrypted:	false
SSDEEP:	12:hYxu3VHdyC/3KDVU4dtzSwVaRfmfY3fb32FA4Nbx8QL:hYElHMiKhHz+ia94Yvj2FA4NF
MD5:	8B140F0F0F6E1A0F986CC7D6DFD74D65
SHA1:	E75B9E716E6DF29768EACFA27332F62144BDDA0C
SHA-256:	AE57797F708333552A13BCD7293180163E6F38FD11B1A8CD5AA8F05421E5B8FA
SHA-512:	BF71C5810BE6018D6C5564D4A11965F3543C458CA0AC755C4531796A14AC0A322CB838C4064C344643B0C53CD5074BE7FE6DA48AE6EBDD33B8ED610FEC46D4DF
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Taboola Topics Frame</title>. <script>. (async()=>{. var s=document.referrer;. if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")). try{. var e=await document.browsingTopics();e.length&&parent.postMessage({topics:e},s). }catch(e){. parent.postMessage({error:e.message},s). }else parent.postMessage({policyMessage:"Topics not allowed in document feature policy in: "+s},s)})();. </script>.</head>.<body>.<div></div>.</body>.</html>.

Chrome Cache Entry: 311

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	354
Entropy (8bit):	6.624288456317598
Encrypted:	false
SSDEEP:	6:6v/lhPfanDLGuaRzRq2W/dg+os5oglGksNx+RsOlI6tyF4PFM6GsCtiJjmHxDQ3f:6v/7qLGuaR9nWK+noTx/le9MXJtBHJQP
MD5:	4E60D49658A9F45ADEB0F4A371574F52
SHA1:	460B58EF85F4966E87521A375524BC4D61D22582
SHA-256:	794054A00504519338C27752BE5316A79C24707EA375CE52E871A89F4FF77AA9
SHA-512:	816AC9C4845B91DA19AB70B8AFA8DFF912AA0031FD47BE5823E1E713B26C7E70AFEA6B421A9A8DF355CB03CC187D5F311913A3D9E99271F70D4B5A36F5EA2F4A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...iPLTEGpL....HQ..........................................OOO.........:::...wwweee.........kkk......111XXX.........9....tRNS...1....1.........IDAT..U.... ....B..........\,-...S4...`\|..*4.h...sb.9.V.".H...{..a..^.&....<..E).\g.=...6uI.('.w.}..GR..+......TXy.:..i...!..........v..[...=...v...{.....D.....IEND.B`.

Chrome Cache Entry: 312

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	16
Entropy (8bit):	4.0
Encrypted:	false
SSDEEP:	3:Ja4Fzf:Pp
MD5:	6626573EF18846D45690B362A392D01F
SHA1:	AC7FA98D1C6706542ACD4BAED3D44C7C6FE15878
SHA-256:	44355EE5A31EE119F735B7F72FF8073B742A2CAEA0ECBC91D44D5C567D6557CC
SHA-512:	998A82AE67C61ECB95F399B7C1BFED342A00B00D779444FAE905B40CB24E3F8403271782EE947145325BE1E16F8DC97DF241329153849A4EBE3A13DB276B1C52
Malicious:	false
Reputation:	low
Preview:	...T...../.I7...

Chrome Cache Entry: 313

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42235)
Category:	downloaded
Size (bytes):	42236
Entropy (8bit):	4.826639941969204
Encrypted:	false
SSDEEP:	192:1M3YTrbvZHQRemW3rt1Tx1slYHDD8v3NV:y3ArbvZgemW3rt1TXsleD8vL
MD5:	B64CB9E8767B2D362C81856BB194BAEE
SHA1:	63617A70A5E511C3E37A4C27425EBFBD443C6724
SHA-256:	51F89DEA5BE24F9ABC6E569EF16C5093F0A558CD8F319B59EC63A21CF3EA1056
SHA-512:	B66780681FB2BCFD4AA82968B06692A7EF999D781BFF7E412C9C8B05956F617FF19A64E8C06A83875527BD9E6F13EEEC94560318C83C0B901C9B0C2AC67BE8AC
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/list-grid.css
Preview:	.container{box-sizing:content-box;margin-left:auto;margin-right:auto}.container>*{box-sizing:border-box}section.list-grid--theme-1-aol{background:#242e39}section.list-grid--theme-1-aol .section-heading__title{color:#fff;margin-top:0;font-weight:300;font-size:2.125rem;line-height:1.29;margin-bottom:.27em}@media(min-width: 768px){section.list-grid--theme-1-aol .section-heading__title{font-size:2.25rem;line-height:1.08}}@media(min-width: 980px){section.list-grid--theme-1-aol .section-heading__title{text-align:left}}section.list-grid--theme-1-aol .list-grid{color:#fff}section.list-grid--theme-1-aol .list-grid__items__item{margin-bottom:0}section.list-grid--theme-1-aol .list-grid__items__item__content__title{margin-top:0;font-weight:700;font-size:1.125rem;line-height:1.33;margin-bottom:1.33em;margin-top:1em;margin-bottom:.2em}@media(min-width: 768px){section.list-grid--theme-1-aol .list-grid__items__item__content__title{font-size:1.25rem;line-height:1.4}}section.list-grid--theme-1-aol .list

Chrome Cache Entry: 314

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	12342
Entropy (8bit):	7.949432785065123
Encrypted:	false
SSDEEP:	192:SUOeKX5cx0liGHjaggfyMDAvFACkTGdgEMHrTeXsMKjPhJhvTmJn1bz6DT55ATIB:SUtU0GH2gg6MkOT6gEcHe8H5vaJizAU
MD5:	BB2958D9675223A47A39E5D4FB042399
SHA1:	22A231E3BDCF018744B3DF37D09E41DD15595BA1
SHA-256:	AFC2AB72C8B9AF40D37E5CE13BF2E8D30F12F31509B8E98CF8B8E317E9A8199B
SHA-512:	77BB575AB5DBABD8FAE82FA9BB5B2DA12EDDEEA71EF7BF7754D99E6AA4C87CA1560849982D4C18A952EDAC04EFCF164296325CB42ADA858070018E6C07D0B538
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/10s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/10s/match/image.jpeg*~hmac=dfb93c1dd5d784be21a559c2f7cead50d35b31d7d1b9306755b13cab549d2773
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE...........".......................................G.........................!.1A.."Q..2Taq....BSU..#3Rb..$&5Drt..46su................................../.......................!1Q..ARaq."..#r.................?..z..!rMJ...^.AA`E+S...`.@V5...T@.QD...("a.... ..P0...J......v+up.)fY...NCHJ...w..w..... ...I.s........Uq@..I.g....V..\9.Y.uJ.E..Q9.y...P^...;.....8U..<.n..h...6.@.........R\.2y.k...Dj......mE..5.......pkB......fW^..:(.?.)..+tYv.....:g..'....+.+.2...{...;...r...UOU.1.i...e\...........U%].s....P.:?..W..[j...\..'l.P.{E.h:>N.\|.....Y.uM<a...E..Y..[...$...Sa.....~.;.....K%..C.-..k.=`..`...Z~.j.L...@.......I'...)...:?..y.........<..b.^.N...N:.X........Uv.o..J..D...:K.FA..'.Gw.(..~...G.....+.3>..-9l1.'.K..........<...e....,.......8.GO.........*w.....\....c"u;t..8.r..&.7...t..tg}

Chrome Cache Entry: 315

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	43830
Entropy (8bit):	5.38616555597883
Encrypted:	false
SSDEEP:	768:9EFrXrid+uQvnFoskOLD5J0pPXQ3480lm9mJTLh8tCxZJuNg6LAXYm7qMUD:CFTridmaslYm4nE9mJTLh8tCxZJuNg6L
MD5:	8CEEAAB271ED688991789ED1090CB398
SHA1:	E3CD13A10D7783461081C253B0D7AB5D337C71D8
SHA-256:	1B3F1A6337F21366CF59487BB664DD0983C245CCF100BE143F4366A07E005D09
SHA-512:	D0742BFA85769A93815E0EE91ACC3F6B312BFD628EEF2FB0E0A06BA4C8C6B0E7CC3E31E559845AEFEF2925532325527510176B4696CCD93924ACAF9F38BF694D
Malicious:	false
Reputation:	low
URL:	https://cdn.js7k.com/rq/iv/inside.js
Preview:	!function(){var l,h=null,s=1e3,a=30,o=50,c=242500,u="https://cdn.js7k.com/rq/iv/",r="hidden",d="visible",m=1,f=5,g="",v=".",y=".",w="performance",b="getEntriesByType",T="resource",V="function",p="https://beap-bc.yahoo.com/ym?",I="x_vi_di",C="x_vi_di_exp",x="data-vwb",k=[1,5,20],E=10,n="x_vi_di_processed",S="getAttribute",P=100,A="1.0.261",M="inViewPercentage",D="resize",_="load",H="unload",L="beforeunload",B="click",W=20,R=20,e=5,i=5,O=10,N=.9,F=.5,z=255,Y="data-request-id",$="["+Y+"]",q=250,j=1e4;function t(t,e,n){var i=n\|\|"";try{i=t&&e in t?t[e]:i}catch(r){}return i}function U(t){return parseFloat(t,10)}function X(t){return t===+t&&t===(0\|t)}l=navigator.sendBeacon?function(t,e){navigator.sendBeacon(t,e)}:function(t,e){e=e\|\|"",(new Image).src=t+e};var G,K,J,Q,Z,tt,et,nt,it,rt,at,ot,st=window,ct=document,ut=t(st,"screen",h),lt=t(st,"navigator",h),ht=t(st,"location",h),dt=t(lt,"language",""),mt=t(lt,"platform",""),ft=t(lt,"userAgent",""),pt=ft.match(/(opera\|chrome\|safari\|firefox\|msie\|tr

Chrome Cache Entry: 316

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3328
Entropy (8bit):	7.9073035026964895
Encrypted:	false
SSDEEP:	96:6xOWKNAghbnUwL0H8W7x5FlQ4uyWxPkpBjhwIiQRcIW:6xOWGAWbUaujPGyLpBjhwIi6e
MD5:	99F89D94EBCFF9A04EF4C4174C7BC13A
SHA1:	E3C04F617638DD5E9ACFB7E3C970B7CD2A72DC21
SHA-256:	E4D7AD9F57F6CFAB7610B8B0855C7937F5EC119BE17AC6CF6377553C5E735F98
SHA-512:	2529E4430753AD3D8CC53A3E16141BF46C18849E699F09E5B91A1F5864CAEACA0548042BF8884B7CFC033765031118343E15125489F270A5E0F9949B407432BD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....sRGB.........IDATx...lUW...+....q..S......`esB.......!@[hg.Nc0sn..iD..B..qA.1.....9..7.t..B..[.l].@.~~......s.y.O.$...s~....;...y}".jkk.G.%yyy./_...s#..jjjNE...)\WW..x<....[u...X.t......a...]A.~...........?...Z...).\.pa.@.....2..!..0.G...,m.S....\|. li.r...../P.x...5..../..:....D..].../.~BI...gz..@.._.N.o...4.J...........C..m...z..=..r..Y..... ;..$..q5..a..j)b.....&c\|.m.N.b......7\.t.Id... ...\..\|.nD...,@....\O....s.~..V.(......yk\|oy.....3lL.i........k..&...S...`.fs...+.u..;}...2./..%..b.v.........^.((.\|EE.........L.m..k...oU(!..q...P..\|..3%.L.s.4On.Ia.....N.M...<UK7.}.y.Y...]tI.$.v.9w.iW.M..eJ.[.J..a..7.K.[}..%...:m......$.....&.$t..v....1.~.-}.N...q.!.q.`.tG.+v...C.&......[n..i..G.ygF..\`&.....p..^vJ.....0...m.....+s..m...!.....$.......T.D.8..0.G..r......nM......\|....mXn.K..-[.0i..j'......A..d.=.O...0....lq./P..%.....$.\u.\|.;."..f)`.%h..yj..\|2....7.[6gH[I...\|.i..P*o..)....{.6.x<....\|....\|+3

Chrome Cache Entry: 317

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4188
Entropy (8bit):	4.008208576286222
Encrypted:	false
SSDEEP:	96:gVFFNBS/iHy7AqDbqB1VFFNBS/iHy7AqDbqBl:sRS/0ylnq3RS/0ylnqv
MD5:	A245C3EEF95AC561D99DADB82BD47618
SHA1:	1DFE58FD590696B0A0F3B3E068FE3800853AFE8F
SHA-256:	04E3A2AAF1311F86673ED6CCCFBCA5D21D02DF4444E080A79A1329C25351453C
SHA-512:	B71CF1BEFB02D42BCDEE72D9785B6D1F990D75635F4369B91CF2BF52814F9B646FF42C3C876B7D02C0C425FC7858EBB71AA8BCADD61110DA8F1F9747DA6BFA81
Malicious:	false
Reputation:	low
Preview:	<svg width="65" height="58" viewBox="0 0 65 58" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1_327)">.<path d="M0.671976 57.7471C1.15586 57.8681 1.65059 57.5882 1.77698 57.1079C3.6367 50.1692 11.1948 48.3708 15.7123 47.2947C16.8443 47.0257 17.7381 46.8126 18.3195 46.5617C23.4653 44.3282 25.1427 40.7351 25.6446 38.1135C25.706 37.7975 25.5923 37.4725 25.3467 37.2594C22.6673 34.9465 20.4067 31.4744 18.9803 27.4806C18.9406 27.3668 18.8774 27.2621 18.7943 27.1718C16.9075 25.1207 15.8242 22.9522 15.8242 21.2243C15.8242 20.215 16.2052 19.5379 17.0628 19.0269C17.3246 18.8699 17.4889 18.5936 17.5016 18.2903C17.8952 9.08917 24.4475 1.85069 32.4804 1.80194C32.4895 1.80194 32.6646 1.81458 32.6736 1.81458C40.7481 1.92653 47.2571 9.32208 47.49 18.6496C47.4973 18.9078 47.6128 19.1497 47.8114 19.3158C48.3766 19.7943 48.6402 20.401 48.6402 21.2243C48.6402 22.6706 47.8692 24.449 46.4717 26.2293C46.4049 26.3142 46.3543 26.4117 46.32 26.5146C44.8756 31.0935 42.2828 35.1361 39.2

Chrome Cache Entry: 319

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	5.084962500721158
Encrypted:	false
SSDEEP:	3:YEOBHw4cccMGDe:YEOB2hMGDe
MD5:	A4D4E122734C951F9AA0463DC77BAC08
SHA1:	99A7F450CD219B1E9BB4A4B4009DFA469FEE6579
SHA-256:	63C6C9C73F13D5D923A330EE9F5DD0CF858DFED0BC9FBA4AEE723CA8A79C4466
SHA-512:	A95C03B381F3B85E1E59A2C4D516A90ACBA7C478EFFE902FE8A70EC94C2FFC52E08826F50397816D10DA3E99047B6ED503C5E9315044994C3B937624D9F27127
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A"}

Chrome Cache Entry: 320

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65255)
Category:	downloaded
Size (bytes):	241645
Entropy (8bit):	5.575450061084219
Encrypted:	false
SSDEEP:	3072:a9r/YYI0SD/qEJpWf70OBb7XtnZQSjoTUVwWg5VYRo9thMUaJz/sOVed:wr/YYI0SD/qEJpnTYRo6UaJzkOVo
MD5:	E88130B4694E228EA7F1EBCBA7D6EFD4
SHA1:	D424F456C2FCD66D3DA95B6A3E83E9F4812BD895
SHA-256:	451EE2BFFB82BBC954099C796966F81C79CCB922DED8D98A328DFCD9431213A7
SHA-512:	F56CE4012DE1BA46DC593A8C0081B0464392647996CD852C34284C842B59E26BF81889A2768F57BD0C8D23866793F810AA99A69B0EF6A0233782B9955CF6022F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/prod/evplayer.js
Preview:	/! For license information please see evplayer.js.LICENSE.txt /.(()=>{var t={1556:function(t,e){"use strict";var i=this&&this.__spreadArrays\|\|function(){for(var t=0,e=0,i=arguments.length;e<i;e++)t+=arguments[e].length;var s=Array(t),n=0;for(e=0;e<i;e++)for(var r=arguments[e],o=0,a=r.length;o<a;o++,n++)s[n]=r[o];return s};Object.defineProperty(e,"__esModule",{value:!0});var s=function(){function t(t){void 0===t&&(t="anonymous"),this.name=t,this.i={},this.u=0}return t.prototype.destroy=function(){this.i={}},t.prototype.addEventListener=function(t,e,i){return this.i?this.l(t,e,i):""},t.prototype.addEventListeners=function(t,e,i){var s=this,n={};return this.i&&t.length?(t.forEach((function(t){var r=e.bind(i,t);n[t]=s.l(t,r,i)})),n):n},t.prototype.on=function(t,e,i){return Array.isArray(t)?this.addEventListeners(t,e,i):this.addEventListener(t,e,i)},t.prototype.removeEventListener=function(t,e){this.i&&t in this.i&&Object.prototype.hasOwnProperty.call(this.i[t],e)&&delete this.i[t][e]},t.

Chrome Cache Entry: 321

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	155457
Entropy (8bit):	5.167774030819128
Encrypted:	false
SSDEEP:	3072:esoL+hcfilxOvFUGpwzSVMPfchXlADW50XqN5WXtBKt8/eBgjb4dD75WDAlifc+f:b
MD5:	5A5E92D32C044529F643B0866F9F8B10
SHA1:	4561B8332035BD291C36BF11FB679D87A98C0F59
SHA-256:	485392BA727B15D3D0B523A68B0325191C0DA0CC06C7067744848CCFD5BE7C2A
SHA-512:	2A9B0FB5FD8E41579F1036E16C86075F0202A0EA010E9EEB6022B04FC6ED62D0D987C69A9EFF383855654EEAC7153F738A09B191D5399D31186DC0A5F070043E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css
Preview:	:root{--mail-bgc:#f9f9f9;--text-base:#232a31;--text-gray:#6e7780;--accent-color:#0f69ff;--hover-color:#0e5ee6;--bg-accent:#fff;--bg-accent-dark:rgba(15,105,255,0.65);--mail-border-color:#fff;--mail-bg-new:#fff;--mail-bg-hover:#f5f8fa;--mail-border-style:none}@font-face{font-display:swap;font-family:_OpenSans;font-style:normal;src:url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff2) format("woff2"),url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff) format("woff")}@font-face{font-display:swap;font-family:_OpenSans;font-style:italic;src:url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff2) format("woff2"),url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff) format("woff")}@font-face{font-display:swap;font-family:_OpenSans;font-weight:700;src:url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Bold.woff2) format("woff2"),url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-

Chrome Cache Entry: 322

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LTC55UNV-1B-13RH&gdpr=0
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 323

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CKWH356f2YQDFQ0SdgYdYtwNUw;src=8867627;type=yahoo;cat=afaolmal;ord=6208305308593;gdpr=0;gdpr_consent=tcempty;npa=0;u1=hashedguid;u9=ad-free-mail;u29=aol;ps=1;pcor=737013112;pscdl=noapi;gtm=45fe42t1z8860054492za201;gcs=G1--;gcd=13l3l3l3l5;dma=0;tcfd=10e44;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-NB4W2NQ%26cat%3Dad-free-mail%26u29%3Daol%26u9%3Dad-free-mail%26u59%3Dmbr_rusacqdsp00000691
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 324

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	847
Entropy (8bit):	4.80772256869591
Encrypted:	false
SSDEEP:	24:vMlCARgZzvB9hkSvWwiWhxbNd7P7tF3PBPJ4AyZ:vMlpRczZ9hkSewiWh9Hr3PBy3
MD5:	2566F30C3D04937BE5C314B0A6AB35E1
SHA1:	F68D55B17C07877BF7C3F08EE1017D6A7748B291
SHA-256:	308273C266590A60DF8F55B828E1C93D6111356F9DC95F73B1EC85BD2AAFE895
SHA-512:	D5454FBE68875295F2380A415F29F988CD1B9C69631DCD6B81369901F2FCF43FBD6FD1DB68F3F687CC633BEBF634BA9BCAF52A6DE9BCBC299103285E646ACB7A
Malicious:	false
Reputation:	low
Preview:	<button class="exint__close" aria-label="Close {{title}} modal dialog"></button>.<div class="exint__offer"><img class="exint__offer__bg" srcset="{{bg_img}}, {{bg_img2x}} 2x" src="{{bg_img}}" alt="" />. <div class="exint__copy"><img class="exint__logo" src="{{logo}}" alt="{{logo_alt_txt}}" />. <h2 class="exint__title" id="exint__title">{{title}}</h2>{{#subtitle}}. <div class="exint__subtitle" id="exint__subtitle">{{subtitle}}</div>{{/subtitle}}. <p class="exint__desc" id="exint__desc">{{desc}}</p><a class="button exint__url {{btn_theme_classes}}" href="{{cta_url}}" data-ylk="elm:btn;ll1:{{sku}};ll2:yhoo;sec:exitintenpopup;itc:0"><span>{{cta_label}}</span></a>. <div class="exint__disclaimer" id="exint__disclaimer">{{disclaimer}}</div>. {{#links}}<a class="exint__link" href="{{url}}">{{label}}</a>{{/links}}. </div>.</div>

Chrome Cache Entry: 325

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 368 x 276, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	118025
Entropy (8bit):	7.960298644156457
Encrypted:	false
SSDEEP:	3072:Iup6CV3ELMn3MyTuwd7qX/z4P+UDpirdCH8UIKE/7/G:LZWM3MyTuycO+UDpiCGvrG
MD5:	C067439D3ABF10293FF87374D1B478FB
SHA1:	B793409F29C185E7AE49C2B06AD4B15D32FF4020
SHA-256:	05FA20B5DB383AAD701C12AEE357C8DB8D2C1269018FB8F24DE67F906476221A
SHA-512:	EE5FA7CD392DF052A79C2E29429B2ECDDB9EF37CC5C321AC7953ED0C50FF2415E77DE94F14796C898BC8BCF2CD1762E69C7F9FF6EE1BB9B2D6DBA0B1DD4C3774
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p............$....pHYs.........O%.....IDAT....k...].....<c.....R..R.b.&(.E.!16QA...Cb..P....x#..D...D_.!......"."..Ames.Km..B.v..u.c.1...<c.U(..s...m..w..=...Pu.j..q<..qp1...q.Z.............K.E..,.pUH.....N..DH5.0..-.t2D.:..M....Ex`q.]W...p.R.($A......T...ad[=Em.... $.a.....X5M..Nc.lRXv..jT..2H...a...H....z..D..C9.%j.BC.v......c..hiA..@...G,...cI... F..!.$=!.".&".8.8m........XcG%S .@.DXX..@M.....L7..u.N.jY.T.2.SR.Dq..ji.;.U...UX%3E.....C.$.6..Iw:.......S:49FR.....%.X..x.GX..U&Af*....>..#...........c..."..,\.".D..cI.g.D....B..N7.&(...&.$.1.:.@HcA.M...Xx..B.B.#D.`..I...".T..6..#I .2....LI.z.@.`...P&..@R.b.0:V.....qto......N..i..N.I. Ff.....T."$.,A.p..Ca \|5e`..jb..D....(v.&A......v...&d...#G.YB.d..0HA.j%.I8.`..;.....2.I....4V@..\.D...B.$...Y...........LM......!\%M.I$.P..c.._ .!(D....(B.2.4.Y...E.BAH.G......v.Uc..H.IY@H......)]=T.";B...........,.....h...A.G(.@a..."]5LM..I.N...0.PU.t...#C......f..`)"..b.r.7...PC...f....tf......$..a&....V. h.

Chrome Cache Entry: 326

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1837
Entropy (8bit):	7.81059795605347
Encrypted:	false
SSDEEP:	48:8RpWGlCuhUznu0P96Cdc2cvI9+3u3G1imCBg45wME+:8Rb5Uznu0P9Bd2A9zG4mCBg4uME+
MD5:	2D31C6A99E63D38B32AA0FDAA1100445
SHA1:	32809162012A2A7350C7543B3AF0C906B442F87A
SHA-256:	D4FFE6BC2B576A137B920DE9849A33B92F703B26F950DC3D27F6E9C10C0D3DC1
SHA-512:	7B1B88D18DEB9DAD10DF5D48F998CAA8D4A06F3BDB3874B583A83456BEFC94C72075DCF32C22571411A744FE5EB25732CE1D7E25D5881270193349B9EFA63064
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLHd_1h13Yx5f.pZrF.YlPw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Ftrailblazers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bf7b50ac67ea7239e80e50d623f7202f3f25466d
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..................r}.u............................................cou..................}..u..........<KR............[gm.............\io..................................................".:>.....$.$-......."..$..#..4$4<...+2.27.49.9>.7<...,.'..'....:>'7?.3./7...W%,.."..%ny~JX^.38N$+.5:...ESZ2 (..$.8<p)0s~.."+..3..&.49....7;.(1..(.7;./4y1BPW....16.6;...Xek)9A.7<.#+.+44DK.."'8@.!).05\&-d'.........%.9=4 (..'.9=b'....%.&..$P^d~..U%,..#:IP.&./>FE"u0...,<D... .%...\|..couams...`lr......K#+...y........%5=t*00.'..$Ubh...\hn.06<!).6;}+1@")./5.,2...>MT[&-7 (......AOV........#.&............'.&...49.5:./5.......-5......!2:.,2.........6:....:>.......%.,3....6:?MT..4.17...Z&-q)0q\|.fqw.09...v.._kq.28...mx}...H#+Q$,HV]l(/.....#".&....38...u..j(/...............Xg....?tRNS...............t'xOL....\f3....u...FG...........H.G........9.......IDATH...gXSg.....m............(A..E.k....H."...a(.. "K.(h.."....{....k.....y.}.s......WK.S..<U..B

Chrome Cache Entry: 327

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1801
Entropy (8bit):	7.7410881990478355
Encrypted:	false
SSDEEP:	48:aK8a00006vXH7TA4uJr8u5aUZbetxU4Dzvm9B+WZ1/1ufS:gH7jOrvlkt/Dzuf+WdQS
MD5:	ACC901C1C48D9B5C70AA019EC7807ED4
SHA1:	32315B269F64B39CBCE5819F1938CE665870D72A
SHA-256:	85151ECE1F855B6BF1B5029212A875B918967F0D8F21E76D7403D2DEF7E01FD6
SHA-512:	BC4FE1AE381B447849A4907183C320B60255866141715A4FC78BD65486DBFB20259EB5613D9EB0A49F6C1244C5857600DB781F1F80CF100B942A3444B214C2FC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..c.......-b.-b.-bA[...c..........-b.-b.-b...................-b.-b.-b.-b.-b.-b.-b..\|.-b....-b...Y...9k............-b...W..9X..-b.-bu...-b.......-b.....c........................................Ab...t...Xd....-b.........f...-b...5_....~...........;$.}..-b.=n............O...0e.............^....6j.6;..4X.Cd.Ii.!Hvx..r......S~j3F.76...i..............[x.....<0S;]..;$"..5=.82Q2M.Brc\|...0...1U.....z.....P..;&........}...R>...f....77(M{.9.......Cr..x.......rb.:'Ql.E...K6.T&.~*b....T..........yi$Kx.............]J.4A..2....;F...l~.9+.....,...9..-....\p...\..n.81....G2P..jb3I....zr@N%0Z.>?.XD$b...AmWJ..3;b...xr..75..0....J.j..?v........mTk$_..s).......['s.....Y.......c...a...HG...}4B.5?.Zj.5@......@).0[_P..y......MNo..y[o......v.sF.....StRNS....!5...%..s...;^/.k.N..G....t....eS\|\..A.....+L...\|...G.M....\....T.m..............hIDAT....epTg...d5.+.@.@....{o.......;..uwww..N:.d...s.L..C...\...$.$....LE.....'.$.

Chrome Cache Entry: 328

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2323
Entropy (8bit):	5.073134355096355
Encrypted:	false
SSDEEP:	48:ByTCWL/TCkTCQMV8d1CWLR7LLO7aHtQFL0tTiA7Hb3+GHtQFL0y:g773Ha+wKb7jXwj
MD5:	9845F4F8FCA19653DDC63008DE59B3EC
SHA1:	80A36103AD1F062CD53F00EC40BAC8D9E05BB1D5
SHA-256:	14A44CC9A629912015AE348331FA19058B9F4E217225673316350F30E0BCD8EE
SHA-512:	E74C0D5D04029016BFA79AD6FB242A45CE79E0CF4B604C910DF9398FFE19B0488D5EBD4AFE0B50E73C0D4CBD6A5521F3B2C56A7CFDF2EFE06C435DB898F75AFF
Malicious:	false
Reputation:	low
Preview:	<svg width="128" height="128" viewBox="0 0 128 128" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M60.8 26C47.2 26.4 36 37.2 34.4 50.4C30 49.6 25.2 49.6 20 52.8C14.8 56 11.2 61.2 10 67.2C9.6 70.8 10 74 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6 82 90.4 69.2 90 53.6C89.6 38 76.4 25.2 60.8 26Z" fill="url(#paint0_linear_104_169)"/>.<path d="M60.8 26C47.2 26.4 36 37.2 34.4 50.4C30 49.6 25.2 49.6 20 52.8C14.8 56 11.2 61.2 10 67.2C9.6 70.8 10 74 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6 82 90.4 69.2 90 53.6C89.6 38 76.4 25.2 60.8 26Z" fill="black" fill-opacity="0.07"/>.<path d="M60.8 26C47.2 26.4 36 37.2 34.4 50.4C30 49.6 25.2 49.6 20 52.8C14.8 56 11.2 61.2 10 67.2C9.6 70.8 10 74 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6 82 90.4 69.2 90 53.6C89.6 38 76.4 25.2 60.8 26Z" fill="#7DCBFF" fill-opacity="0.04"/>.<g opacity="0.4">.<path fill-rule="evenodd" clip-rule="evenodd" d="M88.0572 44L77.1215 44L9.98687 72.2391C10.1822 73.9284 10.5866 75.5642 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6

Chrome Cache Entry: 329

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32007)
Category:	downloaded
Size (bytes):	42861
Entropy (8bit):	5.3053387729552615
Encrypted:	false
SSDEEP:	384:P/yxlvIFOs1rliFjtfDFIJ95z8y5swwTzy2IiXzA/rDItw1CNE2RxRY+d9BP4ahL:P6URNd5syirX54I1E53yDq5CB+SFd/
MD5:	D9D4F5C3991C0454ECA3E6B2DDFE31D9
SHA1:	83AFBC4B9BBE18BE753EFE95550A14873047B0DD
SHA-256:	13E8B4F6220702A10A7566FB389055FEDD388A364975146C8D2780C1D2FDC0D0
SHA-512:	5890997B7A42893A54F1524DFB39CB4BBAF5E296414C29EE577BD4500B1291124E178F138D95D7B954B6FB73D417A2D15B29F10532D86EB8B2F3E41FFB83D162
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1208.min.js
Preview:	!function(t,n,e){function r(e,o){if(!n[e]){if(!t[e]){var a="function"==typeof __nr_require&&__nr_require;if(!o&&a)return a(e,!0);if(i)return i(e,!0);throw new Error("Cannot find module '"+e+"'")}var s=n[e]={exports:{}};t[e][0].call(s.exports,function(n){var i=t[e][1][n];return r(i\|\|n)},s,s.exports)}return n[e].exports}for(var i="function"==typeof __nr_require&&__nr_require,o=0;o<e.length;o++)r(e[o]);return r}({1:[function(t,n,e){n.exports=function(t,n){return"addEventListener"in window?window.addEventListener(t,n,!1):"attachEvent"in window?window.attachEvent("on"+t,n):void 0}},{}],2:[function(t,n,e){function r(t,n,e,r,o){var a=c(t,n,e,o);return a.metrics=i(r,a.metrics),a}function i(t,n){return n\|\|(n={count:0}),n.count+=1,p(t,function(t,e){n[t]=o(e,n[t])}),n}function o(t,n){return n?(n.c\|\|(n=u(n.t)),n.c+=1,n.t+=t,n.sos+=t*t,t>n.max&&(n.max=t),t<n.min&&(n.min=t),n):{t:t}}function a(t,n,e,r,i){var a=c(t,n,r,i);if(!a.metrics)return void(a.metrics=e);var u=a.metrics;u.count+=e.count,p(e,fun

Chrome Cache Entry: 330

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	967
Entropy (8bit):	7.4509660798232895
Encrypted:	false
SSDEEP:	24:ztFspDRkRIb3wKvJKupw5k9s2qKp/z9SYc:ztapRkOgQJKLIpxg
MD5:	ECFB9D0FE05A55DA841156C2E67F42C0
SHA1:	C31207CC94772F6E3793C27E2369D6A52C103B56
SHA-256:	8F1E1989655DF26756B971027B1C5D34162F0B30B3639EC65203697B47059C4B
SHA-512:	9BFE7261FDEAEC2811766A6A63F14807F8FF76F27D45273209896E86B118FF67721A62A7AF88964D49AB6851777C28CE53E3415AD3B9CB78718DD416217A0AB6
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd.............................0.#..#.03)')3L;55;LWIEIWj__j............ . .............\|..................................................!1ABQaq.."2...............................................!.2.."1#Ba.QR.............?.Pu[.Pl...nh..:sw.r..#.a.s.]o..7..a......{.F.<B-..6.w....+..'..H?H..G.cM.Z... V[e.oc4..nK..S=..Wn.......y'.a.F.eU.=a.+...(.c...H.v.U....F_..L.e...5....'.yM......C..y...r..[..w1.3U.;.T..9...?R.U"l.,..km..N.NY,..U.5..#..T.S.;.#L$...2..k..Yh...x........_.D./.w...6...%...w...S.FA......)..a...}.&...-.n]7...p.AF..%.(x.0G..9V%.E........k../?..ROu..4..@*.......d...a.......%.`f..............W..p.z.4.....I.[<...t....G;......I.f.sQ..D.Z.........)R]...'Sw.-.~.L...V..a..Y./.q...R(...V$.J._ ..e......m.m..=.........[....~..JWG'..D...,......KR..(`VWugN.$M.h..e.R[).c..i..Q.......=..r.8.[i.+4j...l.#..e.....<V..0...S.....xM..a..[..x...

Chrome Cache Entry: 331

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:+:+
MD5:	CF1731F1EADF52F064E6059D699E7615
SHA1:	816201B65AF045985CF47B5C7C58089759D00A45
SHA-256:	2E34AF284C28BF285781A36241B6E00EC74C81E6AE6858D52BDEDE5EBF7E37C1
SHA-512:	6C1809CAE27A9024FAE8DF165028316CD65E877E9362F5D132724675F7F9DC14A4A52DA43C0F6BDF7826CC1E6AA4633F79082B6125AD73DBA067C358169B29F8
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/tr5?abgroup=doc-client-width-4_var
Preview:	ll;

Chrome Cache Entry: 332

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1414
Entropy (8bit):	7.607472877824864
Encrypted:	false
SSDEEP:	24:wPgfg4/cpE7vs7jsx1uCAGWgMSKKgGMEaqHeH0PlZbp/75a:tfEEm4/ueWvSErN0PrbpE
MD5:	C5072F4F3A2588F7B3C1E237A3A1A4B3
SHA1:	E1AA80557EEEC3361706454950D32236998AAA25
SHA-256:	44BD585BFE101ACD1618A2072C6FE6BDC15612AD2049621BD2C95623199B964D
SHA-512:	EEC1A72CE0E588AC6DBF0926BE65B5229BBBCEE56DB4E55DC7AB07673E8D7303466C233873CB854E0F7C9703E864D4CEC740577194676AF3A2FF97BF9EE94D98
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=f96c8983d15c2cd551b47caf27cd710ec77e61ad
Preview:	......JFIF.....................................................................&""&0-0>>T............................................#....#)" ")1,,1>;>QQm...... . .............z...................................................B."a1...................................................!.1Aq.a"....#............?..=Eu..bL..".....GN6.;.goU..r....R?J4@.n.cWVY(Q...+...y:X.>......9. .I.,.."....2..O9.3{:=PY.v..tTqB..Q..=...nz]...._......o.C.X~...x.c........h..,.p.{.3.z....>.8.U.j...}c....]......X........z....U..z.ls.D...>......y..n\..m9.&F....+...du..(c(.Py1 qQ.IY$.S..q.8..~.....OM..V...L(.m.r.h.....NO.]....K...Z...=.q...E...#Eby..K$.......'.......^..G8$.I.UWK..UYc....#.........U@\....MX3....g.<......8...+N.>.....-.^.v..X8...\|.....t..wW...S.......3...Op.n..uC..q..h;m\t.3.2..-4.........q..1.L....w>.5...Uw.d...2S.`.Tc... x..M...=.s...RC..!e..3 .".d:)V1M.F.O....C2Q.=,..,y...u..z...}.J..XP.,..9.'#r.F..].>c.G..~~....;v.$.rYZ...^-4...3y...M.<2... .9.....

Chrome Cache Entry: 333

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	849
Entropy (8bit):	7.254858416595615
Encrypted:	false
SSDEEP:	12:6jQtFfsDvjQtFfswVz9BVJMkwKEw92YF96acjk8uwOGrBiYp/XdcfqDPS7HSg4hQ:ztFGstFF+q92YFH58u+fNNjDPSD34Kn
MD5:	782119761D9A9EF7B0E1A43CFA75091C
SHA1:	D19851EF60AE96B9154D2DBC532ABAEC05D476CD
SHA-256:	3380DA7DF559FA39E5A3780B9B27C8D5C9966F3E1FBE21826E6763050851D55A
SHA-512:	9051FAFF7D5C21944995F58B55C41A6C328D7144A41D8E17782FC7E6E6CAF54D1980F43D50AFB59FE4624B854FD9D12F174F2F5BD3740106F6C0CE5F10BA1CCF
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................................ .... %...%-))-969KKd...... . .."..........r................................................!1Aa.".Bq................................................!Aq..a.............?..8....-..{.....Jt=...>....Q.d3..[.][1.$.`..:(.5.-.<...:.u...A.b<........]..."..".:7.>l.......n..,\}."S.)X)y:.b._..`.,.,. &...,.FE...5t...r...!.....^-&p.l..p^ ...T ..<0.4..c..W.Lv..QI..&......../...K+U...)....MAt&H..@.U..r.2...h$..YB.G.eC...I.#...4G.Z+....6..u... .#..S...C.}.u;J.z....p.$.D.;\|5_G.........g=>8..T...v.......J........../.c..[5]#).$ga..:0.5....}........X..NX.....9.....h...KSt....F.Ah.Kq.#T.q ...7..YS..^.....Mq..."........!.t+e..,.t..f..f<....=...=.Y.%.`..;..=.x.}:.:....'W.....7..'.T..}..&.`>2..-...

Chrome Cache Entry: 334

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	89477
Entropy (8bit):	5.372300120206585
Encrypted:	false
SSDEEP:	1536:KC/Q7UWSuq7XZw+VIKmNLZ1gsowlAppsi46FxIiTiw:KCQ7hoVY1w
MD5:	BB48EFF52A09BFA5A348F06D43AC8972
SHA1:	7C0E8711DB4C5D25CBDBE240DE5627B24FFED11E
SHA-256:	7DC052E3AC42CA1E8BFA66B9FA1F36EFA5356C63186B124A00E1457C90E05D3C
SHA-512:	AF78C0A77E9B0DC3E51C0FC4A0B430CA21DBA2249CD958CB11E2A6C97550E821CFD06AEB1CC4639008ED916A3331C65169EFC6D246339FC5A7ED106AD5C1081A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/oa/consent.js
Preview:	/! For license information please see consent.js.LICENSE.txt /.!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a)?o.apply(n,i):o)\|\|(e.exports=s);else{var r=a(),c="undefined"!=typeof self?self:$.global;"function"!=typeof c.btoa&&(c.btoa=r.btoa),"function"!=typeof c.atob&&(c.atob=r.atob)}}((function(){"use strict";var e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";function n(e){this.message=e}return n.prototype=new Error,n.prototype.name="InvalidCharacterError",{btoa:function(t){for(var o,i,s=String(t),a=0,r=e,c="";s.charAt(0\|a)\|\|(r="=",a%1);c+=r.charAt(63&o>>8-a%1*8)){if((i=s.charCodeAt(a+=3/4))>255)throw new n("'btoa' failed: The string to be encoded contains characters outside of the Latin1 range.");o=o<<8\|i}return c},atob:function(t){var o=String(t).replace(/[=]+$/,"");if(o.length%4==1)throw new n("'atob' failed: The str

Chrome Cache Entry: 335

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2382), with no line terminators
Category:	downloaded
Size (bytes):	2382
Entropy (8bit):	5.077541349929822
Encrypted:	false
SSDEEP:	48:c8oP9Bp5QaOTXD/YKw6IDkOyKYzFy6FtQqlVQkZ6i//hLQkZDf:c8oP9BIaHN6IDkOwbwE/im
MD5:	1390619E8122CDDB9A24F9FE8F049437
SHA1:	8682E8EEB1CC9F141364EEEF5CF9C50134F39399
SHA-256:	E89596BC279A0504B683D55730608DE92395876A45D7A3DD0981125E95B14EB8
SHA-512:	5524CB0007742D04D15D77E307D13CD5BEB7528209B0BB4BFB19F8EB7E38220425BDB915DF26D25E38FFCF268F4AEC395FDF118D8AAB2E46F22370FA714086EA
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/feature-list.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.featureList=function(t){"use strict";function e(t,e){var i="function"==typeof Symbol&&t[Symbol.iterator];if(!i)return t;var r,a,n=i.call(t),o=[];try{for(;(void 0===e\|\|e-- >0)&&!(r=n.next()).done;)o.push(r.value)}catch(t){a={error:t}}finally{try{r&&!r.done&&(i=n.return)&&i.call(n)}finally{if(a)throw a.error}}return o}function i(t,e,i){if(i\|\|2===arguments.length)for(var r,a=0,n=e.length;a<n;a++)!r&&a in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,a)),r[a]=e[a]);return t.concat(r\|\|Array.prototype.slice.call(e))}function r(){for(var r,a=[],n=0;n<arguments.length;n++)a[n]=arguments[n];t.store.debug&&(r=t.logger.tag("feature-list")).info.apply(r,i([],e(a),!1))}function a(e){t.dom.removeClass(t.dom.getElements(e,".feature-list__item--is-active"),"feature-list__item--is-active"),s(e)}function n(){t.store.once("PAGE_LOADED",u),t.store.once("URL_DATA",l),t.dom.addListener(".feature-list","click",(function(e){if(t.dom.isInside(e.target,".feature-list__item__close

Chrome Cache Entry: 336

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65120)
Category:	downloaded
Size (bytes):	78321
Entropy (8bit):	5.203597565669959
Encrypted:	false
SSDEEP:	1536:aC9Jom+OVMYbKqUrTmD6DqFcZN/U8atgRwaA8vdN/yzJut6f3CXTd4nqCt5eYXQ6:OOVFcZN/U8atawaA8vdNyzwt6f3CXTdA
MD5:	5FC5433BA8350606E1977308CC2277B3
SHA1:	64E1C812DFA4B6E1EC1D07BCA7EC1C538203A0F9
SHA-256:	DEB2433EF360C2BF0FC51D3ADEBC8AEC0F56E9759D00D651A54F0EC656DD5616
SHA-512:	BF76C1F86F48FB48046DBD2A9184737C099C7685D7EE50023E79A1EADA5BAC1087336AF3C55101B87CD92C2056CE58AF2908CD104FA122E736CC38E15246C2E9
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-ima3/5.2.6/videojs-ima3.min.js
Preview:	/! @name @brightcove/videojs-ima3 @version 5.2.6 @license UNLICENSED /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("video.js")):"function"==typeof define&&define.amd?define(["video.js"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).videojs)}(this,(function(e){"use strict";function t(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var a=t(e),n="7.3.3";./! @name videojs-contrib-ads @version 7.3.3 @license Apache-2.0 /var i=function(e,t){t.isImmediatePropagationStopped=function(){return!0},t.cancelBubble=!0,t.isPropagationStopped=function(){return!0}},o=function(e,t,a){i(0,a),e.trigger({type:t+a.type,originalEvent:a})};function r(e){"playing"===e.type?function(e,t){e.ads.isInAdMode()&&(e.ads.isContentResuming()?e.ads._contentEnding&&o(e,"content",t):o(e,"ad",t))}(this,e):"ended"===e.type?function(e,t){e.ads.isInAdMode()?e.ads.isContentResuming()?(i(0,t),e.trigger("resumeended")):o(e,"ad",t):e.ads._contentHasEnded\|\|e.ads.stitc

Chrome Cache Entry: 337

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	109056
Entropy (8bit):	7.998155130411241
Encrypted:	true
SSDEEP:	3072:dgvKLK/KR7VHIoOCLt5mXgQDj+uT4LaV4Wif:mvZShVkCLtut4W4B
MD5:	B70310FBF6CD522B7B917154DEAC82F1
SHA1:	1372AAFF1423E3919120356A70B3729941B8BCFC
SHA-256:	FFD81272B70EB147A92715AF01FF430B5A65E9F172F0E8A53CFF63EEEC21293C
SHA-512:	9CB07027A1CE7B65F1EE5007F5DFF1C7DE573C170133C4642826FD7517F208C8FF4CD52DCB3B3564BED4F08A1FF4C75F743B801B763C9CC125E162A08928EAA4
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment1.ts?akamai_token=exp=1709530988~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e8b40a2463d355aee79ce16d02f266fb895828cb22f6586733f56f035b643b4a
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI........o^...$n....@.{.d.:- .....,...K.a.~j?.6&j>..L.%]..............4,.U...P...7v..I....U.i..<wM..w..H..R.K...aXT.3.E.g7QZ.P.>~....y..9.....D...._\|...l......i..s.....Z.j..9D....f}...lv..h.dh......+....n.U..G.BeL3j...).-...k.qG.2B./../V$.......M..../......o..Q.}.......'].v[.l.9....../.pa..2..Vh,0..>%6.2...x..T...ma'..J..di9.w~-=....g\|........1MtJZ.5...Wt.....\|!...1&s...o...7.\.../.H.A.?#.=~.O.....E.I....Bx.k"o.m.&]h...h...P}.\+.....&..K....l^,X>g9...T.+..].....w.t....\.........ag<..F$P...y.."lS....=.@.2KS..o$.z.H.......[...a!P.......*.e+.d....e .j5.(b.C?.2l....x.0(}2.Z..=....vi..^.9]HP..4...%.:..~.<.

Chrome Cache Entry: 338

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 339

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6157)
Category:	downloaded
Size (bytes):	6200
Entropy (8bit):	4.972199778523947
Encrypted:	false
SSDEEP:	48:fvbpY8mdDBR8S695rFVRcMVeeUzbVyoR8446hqTt6tMt0wItF7t3B4tOGmfd7mig:fTR2nFuc+0hHgSf1CVN
MD5:	A6B7D6A1BC8E39ACDEE82363FEB23A2F
SHA1:	42FDAB962AAF612922677F613E517C08B2D5CA0A
SHA-256:	3FD74974A2DAB2DC7C0EDDFA04A3EA9EB7A53B1E6768E17E0B728DE1B15B110E
SHA-512:	AAB2A701AB6DC0B41DF09E60FC0AA401F33DE61D4E5B7E289AB593E780051FB5E9BB6A91B1FE4B872485AE8DA79C100601F719A26A59B683FD610451A9D2D60E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css
Preview:	.ie-11 .m-AolFooter .logo-wrap{min-height:65px}.ie-11 .m-AolFooter .links-foot{width:70%}.ie-11 .m-AolFooter .social-foot{width:30%}.ie-11 .m-AolFooter .social-foot .item{width:50px}.m-AolFooter{padding:0 20px;width:100%}.m-AolFooter .container{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;max-width:1400px;width:100%;position:relative}.m-AolFooter .container:not(.cell){margin:0 auto 36px}.m-AolFooter .container .logo-wrap{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-flex:1;-ms-flex:1;flex:1;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row;-webkit-box-pack:start;-ms-flex-pack:start;justify-content:flex-start;margin-bottom:32px;-webkit-box-ordinal-group:2;-ms-flex-order:1;order:1;padding:15px 0 12px;width:100%;border-bottom:1px solid #e0e4e9}.m-AolFooter .container .logo-wrap .logo svg{fill:#000100;height:3

Chrome Cache Entry: 340

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89947
Entropy (8bit):	5.290839266829335
Encrypted:	false
SSDEEP:	1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL
MD5:	CF2FBBF84281D9ECBFFB4993203D543B
SHA1:	832A6A4E86DAF38B1975D705C5DE5D9E5F5844BC
SHA-256:	A6F3F0FAEA4B3D48E03176341BEF0ED3151FFBF226D4C6635F1C6039C0500575
SHA-512:	493A1FE319B5C2091F9BB85E5AA149567E7C1E6DC4B52DF55C569A81A6BC54C45E097024427259FA3132F0F082FE24F5F1D172F7959C131347153A8BCA9EF679
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.3.min.js
Preview:	/! jQuery v3.6.3 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},S=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|S).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 341

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	10088
Entropy (8bit):	7.95253893746316
Encrypted:	false
SSDEEP:	192:/8GWfjOfky3aS0+oI9EV/8BJePEMc7vCp9DRrvvFARpWXlrjJXP1bUH5jUz:/8Pj5S79EV/8BJeMMaChjFAp+lrj5PVz
MD5:	FA1778FBC0A931DC76D48F4C45CD77C3
SHA1:	4F6CE7EF83C6D1C3AE798776B41824B6F274D033
SHA-256:	D4E4D2BDA11237CA03563442F95B48644DAA00FA2E70180B26BE6E5F247E45D1
SHA-512:	6CFBB90C1F12F68C7D0AB2A30E06B5CDA1FA067BA5F3801DAD49FE85914AA3E84C695F37C96A310657AF55AD9199B309D87BB0DB93823FC721D373023F5A2685
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F36824bd1fd4d41014ce41b12a880833a&client=76f99bdb8f78cd44cc0b&signature=d2d0d0c6211286d34012cd7d6f5266200dd03b5d
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4................................................................7........3..^.a......h..[.8...P7.....nt.....WA.:.....VI.sW..K..V......Oy.K.3.,....\|...\|.A..j./j..W...L..........\|.>.IJG.9_.m.g.1d=:n.......(!W..j."..\|..<.J.Z.=Wj.u9v..+....._j.....6.P.e..GB)...#..`};0i.9........3-..(.\T.f."...#.Z......d..'.....\.J../(./..........i.]._TR..3.l..P..d.q.....gw>Wuo0.......a.....f.I.Y...w..M........Y......S@..y..dC3.h.{.{.m.s....9.sQ[.....k...8.Lm..>...[.0([..Y'^7o.&.k..#..8..$.e.a......+..k.lL.Z...3W.U.&<.y....2..b.....4..)nL4}G,..(.].9._7V...5.cf.m..]E.=S{\.."....y>..Uo&..H!...a.Z.&....Y.S..n..;8..).!..N.s..'..BqU)....!.=...........`....\..nu5e..]y..j.<..r..#.....e@.`...r..T.\j.@..%Z^5X2.&\J`&.e.../].\|...L.^I6...oK..O.g..x^..^...'\.JLl..q.../......+0./.n...,...g..'L.NV...

Chrome Cache Entry: 342

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	downloaded
Size (bytes):	6637
Entropy (8bit):	5.2318449765719794
Encrypted:	false
SSDEEP:	192:wE/GXcL/au/ah/a0/aH/aa/aN/aw/aT/aW/ac/Op/A:wQGk
MD5:	3303A547E4963CDD958C055F095C75E6
SHA1:	F908159DF964D81C3716E7C45FAB8EFB8F7B10E2
SHA-256:	1A68A943FF7EB293CE92EBDC9BEE1327450B425268F0CE75517FAD9BAFF223FA
SHA-512:	260756402AC0A6D110CE8D18FD0E9409B0F9B086EC9912CC51E3E37AA4AA9EB371F54C5BC04CB5E1E3F8D572577336B9E9788DB38566DDD1B123E58699BD7788
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/6s/rendition.m3u8?fastly_token=NjVlNTVmNmVfNDUxNmZkY2Q2YWI5ZWQ0YTdmMGQ3ZmNhZDdmNzYzMzA4MmY1N2Y0MmI0OTQzZjY2OTEzNDEyYTViM2E3MTRjZQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNmNfYzAzYTBmOTQ2YzE3YjcyNmM0ZGNjNmI2Mzc1NDc4ZGE4YmZlODY5M2JmM2EyZjYyZGVkYTMwNmQ3NjEwMDg4OQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ",IV=0x78e53fc16aa71fed0b0a09b4730a08d3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 343

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dpba%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 344

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	14649
Entropy (8bit):	7.96406494917929
Encrypted:	false
SSDEEP:	384:85+nr292bJiRfD47/fLiPbWmRQgwos9LFirZbbtteHUL6OlaRt:85wEeJ2r4EHw990dbtteHUL6H
MD5:	F30AEE18597FA668E0545295FE6C5805
SHA1:	DECD8C531A8C18658840D6C1413159DB9583BC24
SHA-256:	4BD77F14AC356F7E87BE88B7C3F5E74E507C6286DB396413DCE0BD46BE9E5B70
SHA-512:	61473D7E974C995CB6DA1049F6D90196F9E9D54CC0FFA0C00794D73DB5874278B1C872DFAD6E26BBA01F113176396A92E827428047F48FBCEAE1010302D86486
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/30s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/30s/match/image.jpeg*~hmac=bad7cb184e924853311f7a710d1ad721d9b27b27beff24567e67926f7513a553
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE..........."........................................M.........................!.1.."AQ....2aq.TU...#3BS..R..$5CDEr.'bd...%&4tu.................................1.......................!1.Q.2AR."aq..#......3r.............?.........I&N..D.(..%&.N.......P2...M...\....qU3b..f....z6..i...Z....+@P.l..........\.+..3U.;+.,.)....P7.....X....8]M...J......r6..+.y.[.Y..0..CY.....6(......Tq..Y....C.....900T.`].L.....%.U)X&HD..@X.&.%fG4.-v.M.0........... ..%.....V.D.A.$%.eS^X....s...1...-r.c..7TO.wo4...Q.\|....l....W..+\Y.i8X....4...S..?...._...n?..~..K......e....#..\|..i..;!.....o...i..X..H]..U..5..@..5.{{N.......!..c..r..F.n.c.....G..\|..m..%%L.<H.qt.+....#.....(k..RR.$.2iDD26O..^3....E..x..C\|..\P}..E`.V..q..JvHc.[.f.._go{8.S.PD.c]&.....`......).>..(>.."..(~..".K.E...CC<sH...vK..G.'.E.QY`.

Chrome Cache Entry: 345

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2191
Entropy (8bit):	4.821427070865943
Encrypted:	false
SSDEEP:	48:352TB8Q2iq2TBLW+Jb2TBNcjr82TBPv2TBOSrCnykdkU6+l9fqz8/OEX2TBM:p5Q2iq0W+JbX8gvSrCy8166fU8/NV
MD5:	D9B7F07F8E20839A49E51279956F7B7B
SHA1:	70B21FA45E7668DBE920226D0F0CA3CE1319AAE4
SHA-256:	F28747FCE29902000F2740EE25408F500C41983C489E0AFDC5F8991646F4A97B
SHA-512:	4E82F407896BDFB5DE8387C221494B21E58C7C3854CDDA17B5484F72B99E04E1D2801AB4A977267E40CCB865679D9E69A7E6C00412D9A9C1D7C7EA25142A6AE3
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/money-dollar.svg
Preview:	<svg width="65" height="65" viewBox="0 0 65 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M50.8833 6.5V14.1148H43.2679H50.8833V6.5Z" stroke="white" stroke-width="0.84" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M50.8833 14.1147C46.1793 9.4107 39.6799 6.5 32.5 6.5C18.1402 6.5 6.5 18.1395 6.5 32.5M6.5 32.5C6.5 39.6786 9.41005 46.1786 14.1148 50.8839M6.5 32.5C6.5 39.6792 9.41005 46.1792 14.1148 50.8839M14.1148 50.8839C18.8195 55.5886 25.3208 58.5 32.5 58.5C39.6799 58.5 46.1793 55.5886 50.8833 50.8839" stroke="white" stroke-width="0.84" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M57.302 24.6811C56.6117 22.4912 55.636 20.4294 54.4244 18.5327C55.636 20.4294 56.6123 22.4912 57.302 24.6811Z" stroke="white" stroke-width="0.84" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M58.2725 35.895C58.4174 34.7829 58.5 33.6512 58.5 32.5001M58.5 32.5001C58.5 31.3489 58.4174 30.2186

Chrome Cache Entry: 346

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.975652212593064
Encrypted:	false
SSDEEP:	3:YEOBHt2oigp4zcd2HxeKjmRS6:YEOBFp4zcd2HoNn
MD5:	A819D0DE0286C3B1A3E818E693A413A0
SHA1:	55CDE80DD076917239C9C085E75152DF6899A197
SHA-256:	548B2BF55F807DA1B4F30879BFA0F3C3692B97F3BF2BA2654BB3C4EC5B351AA2
SHA-512:	638973E478FAF0D418F4A6E11709F383C2D464A76A223E221F413EA8C1039ADEA27FA2A5EA9A3A4520F2491BB74EF09113F3C3F0E66835E369255DFD8305BCFD
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B"}

Chrome Cache Entry: 347

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	115778
Entropy (8bit):	4.963779036006907
Encrypted:	false
SSDEEP:	1536:ErNEuPH3vfuJBnDagM9h9p9QxEdah/KZOecw0d7c+fAWpA4c+iEzMCbf0efEBBMU:E
MD5:	2B3CCC9B472FB30DFE785EA636E22FC4
SHA1:	CB47BADB98FA1B39172CA0CD7D2C961E4457600B
SHA-256:	8F9A83BF3B1E17C899CB2F079C70693F1CE01668497DF7AF3ACCAFD83EE02539
SHA-512:	8520581DE6725601FE0A518F024159243A3C1B9ADE17BBEB9B6EDA207DD041568B43C560A354B5ED627001A58B75B7384C2DC91D3D9FFB8D9C525E16D42E4BBF
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/weather.2b3ccc9b472fb30d.css
Preview:	.m-ln{text-align:left;font-size:16px;font-family:Poppins,_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#232a31;margin-bottom:24px;margin-top:24px}.m-ln__title{border-left:4px solid #ffcb00;font-size:28px;font-style:normal;font-weight:800;line-height:1.25;margin:0;padding:6px 12px;letter-spacing:-.75px}.m-ln__body{padding:24px 0}.m-ln__link{text-decoration:none;color:inherit}.m-ln__link:hover{color:#0047ff}.m-ln__content--left{margin-bottom:40px}.m-ln__content--center .m-ln__heading,.m-ln__content--right .m-ln__heading{font-size:.875em;line-height:1.428}.m-ln__content--center .m-ln__image,.m-ln__content--right .m-ln__image{border-radius:.5em}.m-ln__image{position:relative;height:0;width:100%;padding-top:56.25%;border-radius:1em;overflow:hidden;margin-bottom:20px}.m-ln__image img{position:absolute;top:0;left:0;width:100%;height:100%;-o-object-fit:cover;object-fit:cover}.m-ln__heading{margin:0;font-size:1em;font-weight:700;line-height:24px}.m-ln__summary{font-family:_

Chrome Cache Entry: 348

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=ZjMzODUzYjBjYzE5ZGZjYjYwMzY4ZDY3Y2QxMzMxMzkxN2RlNzc1Mg&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 349

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1020
Entropy (8bit):	7.4230444143937815
Encrypted:	false
SSDEEP:	24:ztFJBvuf03gcX0mgB6EbUMyn61KaqetJFdpqakNJHd:ztOEgUVKHqHhd
MD5:	6A6EEC9542309F83D565CE90AB410D25
SHA1:	EE636FF74F312D260AB8B86F477C149C6F113DBD
SHA-256:	393135A0E59C6908E3B92531DC297EAA43A363C653BE394DF9049E8E7470AF26
SHA-512:	9AC06C68C39F12B7BCF12D7C7BDFFD52D7589F77F2ED65F4A342E96BD97C0AB7F5431F81823A49A564CD1540389D012713017FFE0A847CC56EAF537079CACF72
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd...............................!..!..)1(%(1)I9339ITGCGTf[[f.z.......... . .............~....................................................B.!Aa.1q."#...............................................!.12...."QaAR.............?. 7.\|....fH.o.1w%...N...........,..'Jz.>2....+..d........J/..T}.."...-u.2..{.&c.Y...Qd..P..z.)....>..j........e.l..6wF...E.....A.:..d..<..}S.o...e[...9.\|.....n.k.].\|1!/[#..-0.....(..2)..J...U....aB.U..G_....E,.%4....#T">=......jC..g...pH..;.}...f..F'.4t...M#M.E.G.....a...p. ..w..\|...r=..p..Ih.J.....xC...R.`................5m,.._S .l.(.ST.I$......".u.....Eq.TW.....4ck..tjm..L"._%P..~R28...+......)......idx.+f.d.mqz.....J.tx......B.L.o.U..9#B ...X.I-.u7...OV..=d4.....n.u...,X.\..E...$..e.W[......d.....SEI}.@...uQ..?.<[Y.O..S....X"[....o.d../..,U....f....9S....j@C.`...!..,>..!.....u1..q...s.t....n.G..&.!#leDe.Z."X^.lt.k..k..U_..J{.K..C...

Chrome Cache Entry: 352

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	324
Entropy (8bit):	6.793708552960668
Encrypted:	false
SSDEEP:	6:6v/lhPMMPXXOjNkXfHP32QjNe8QJcipblk61W8vN6qsVIZp:6v/77XeGvP3j48B2bl1NNa4
MD5:	4E69B4BD1929E36297EC905E04213F7A
SHA1:	04F5DF92FEFF48187FA2BD6E4CD31D4262BF65C4
SHA-256:	303A32E284957FC90520D4677308472019CF6D4CA3698B475231AD3171AAFDD3
SHA-512:	38C742B7BFD7337A9193EF204562D981B928CF8C4BC44761824840D216115F1983C0E5ECB2633F7315D1AAAC08832CF4FA7376F2417EC82866236A98CF45AFF2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... ......Tg....-PLTELiq/..1../..1..&../...........K..~.....g............tRNS...;..Ro.....IDAT(.c``QL..!...V.4$..........P.R..P....P........7. .....+!... .Y..@b.5.@fE.....5.`....e......\...S....&.k{uFe..Z.@Vyyy.T.k@......3.W..2...Aly........Z.mi..e/K...Q.0..#.0".#1".=9.......=m....IEND.B`.

Chrome Cache Entry: 353

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	45182
Entropy (8bit):	7.982905130191801
Encrypted:	false
SSDEEP:	768:/8gjOmZaJGCOAXZrYReN3jMJU3ngd2X7HuE892So4XLLdE2q/IbWeA:/8gH4bZfTrjjP0LLdE5n
MD5:	B61112AC42F1FDBC326E5DD508E05D0C
SHA1:	8F802E3CF60AA8C5DC0B885534DD865A5D0443C5
SHA-256:	3756D90D44799321B629B408B403B38D8F2673014D0233DD4C65F9A0E3162267
SHA-512:	44A1987158FC7F7586492D3D1AFFB2C8FAD9ED1D38B69BAD35D6E26B1FBA1B567D01DE5E261750F8BA46D3A82FDF4F586C3FC2F227AEEC1F0C60977012FE434C
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F9bd8fadceb9b5eb9917c1c48de181771&client=76f99bdb8f78cd44cc0b&signature=59ab14b5e625248cf28afb5053ca5d32e497ded0
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........5...................................................................m..&<_'...X..;.. .8...l1..5.G....<rL..L...Dy/&&G....C2}u...X..Z..m^.^...Z..^.BjwJ.{Q.5".... .73.`F2.K..F..X.......3..4..3.....&...X...l1.EqT+..mC..\|(..WY...F..KiB.+..\|.q.J.qe.X....../..d.....W..Z.h....u.7.....3V..)..)2..t".a.....kZ.`A....M...'.6GT..Y}.~....<.....Y..&....E....6.\..Gi..Bh.:ur..xD...........#V.1..1..I...1M......g(.w...)O.E-6.!..."R..6.cf..E..gJ.N.....].B..O^.~U.X...[.~.e.9.....7K[9.Oo..<..7.......7.6...!.it]..e...V....b...Td5.;D{S.Fni...z.=s.....r.[.\|.....9A.z.\.I.1.....o9.9.....1.d...NSK..Z.L}....H.2...>=.;... ......i..S.....v..W........l1%1..)008".&..}...zNz.T...3V...3J.2Pc&...[=q^Ih..Y.^.T...>}...e..Q.2.{.P'.\|.U..;...B..V....:....#[`.65..y~..,.b5i.....Nih.x..[MJa*...(_@..z.Y.3"...6L

Chrome Cache Entry: 354

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3948)
Category:	downloaded
Size (bytes):	3989
Entropy (8bit):	5.224436708488888
Encrypted:	false
SSDEEP:	48:YozhS8pv0kSqguti9GmqiiHfZ+qDoGu8EO0tMYH5A0OKWiiGbmLWTyo5de2WYXIe:3hDId95qnHfZ5DCpFZABDe1OWqPb8N/
MD5:	F80A4703A28265698C7256C1FA3ACD5D
SHA1:	FB89C0DC1998EA1E77690D5401C71057DEFF0AAC
SHA-256:	2C8CF2E1CA532C00769BDF553E891D91EF0A015619E44F9EEDC78A8F50BF8C72
SHA-512:	C274341132E340F1A94E3087D6B73FBDA65641C97554D3FB1EBB7634FF822D3F847AE0716D83E7F4CB960F6492BC087F890476E2A81F0784F89F813D58F2B670
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/trivia_games.f80a4703a2826569.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"use strict";var e={d:function(t,r){for(var n in r)e.o(r,n)&&!e.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:r[n]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}function n(e){return function(e){if(Array.isArray(e))return i(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["

Chrome Cache Entry: 355

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4741
Entropy (8bit):	4.913921186279149
Encrypted:	false
SSDEEP:	96:uTS0mCQ0XDmyQnpHfFhx6t77yxHdadFSt05j+Zv1KD:UFcp/Dx60YdYt0Av1KD
MD5:	14E7B89FA161E7B8A08389FFCBDB54A6
SHA1:	F2DB4A03C3AC9DB59FB0C1CB275CC35B30991EA4
SHA-256:	6793E19A7E6F84DE47051BA22D319EAA3726CA44D92FCA9349A4F4460A1144DA
SHA-512:	79F8653AC92BE872C71F6DBE9D00C3C7D7A7EB15E83821847CC6D2B452BCBD6982520C3160991C664DC74C97434BBA46625186A2E0FCE1ADA05BE53E98DB8030
Malicious:	false
Reputation:	low
Preview:	<svg fill="none" height="255" viewBox="0 0 249 255" width="249" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><filter id="a" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="254.805" width="248.4" x=".531494" y=".192139"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feColorMatrix in="SourceAlpha" result="hardAlpha" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 127 0"/><feOffset dy="2"/><feGaussianBlur stdDeviation="16"/><feColorMatrix type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.475907 0"/><feBlend in2="BackgroundImageFix" mode="normal" result="effect1_dropShadow_20_135"/><feBlend in="SourceGraphic" in2="effect1_dropShadow_20_135" mode="normal" result="shape"/></filter><filter id="b" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="107.02" width="107.02" x="135.911" y="6.19214"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feColorMatrix in="SourceAlpha" result=

Chrome Cache Entry: 356

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50572, version 4.262
Category:	downloaded
Size (bytes):	50572
Entropy (8bit):	7.996141534336881
Encrypted:	true
SSDEEP:	768:kuVuL+gWA7/p3BouJHC2zBFvGxIzSWuBBmVgQaocgh1wwa1Zn16O8aWt:/VuS6pB1J52IaWVtafgh1wwa1V16j
MD5:	8892A5EA3278DA84BD17D9188DD8F05D
SHA1:	0615D45B0AD5509889FB7D8364C26AA1118E008B
SHA-256:	649D2E547C33CF45C6C6DA6FFCBD1EDB91AB28C5B327DC3BB08403F8B1721380
SHA-512:	E063321B67C1CB8D65DE52BB2770C6040E8D3926401A17CA96799372C5CA1836055B2E77C72A6451A946B95AD54986CC73E6EE14948D4E3FC6311F1752DA37C7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Extrabold.woff2
Preview:	wOF2.............W....2.........................@..L..x.`..R...<.. .6.$.....H.. ..>...[.....c...8j.~[...../'pr{.;zn.CQ.<.;....4.}(d.......D.K.zIS.0l.P...$.%.Xd+m)E.z.ei[.""..;z.....x.=!.......g..jInz.1.,..SU%b.XU...."^.)C.A.`.b..C...^ .I8}.9^z..5.R(.....u.&.a.L........,f.............:..s.=...=..S...O(....I.vY....X..\|e....d\|..0.\|..lt.H.m[U.'.M...s..-.!n...C..<...Cu.....\.p..5...o..f6...A..$...:.%.....Os.w.1.Q5G.1...1..%.D.....3.....I....$..X.'J"G..?..m...m..m.H..JjB...7\.+.01..9L.mlL...C.=eU....'Cl<.P.b..H.. \....Xfz...,......Qc,Y2.`.@X0h..bGD<%.0..P1......yj.iof......K1.C.C...~.X..<w.....I...pd...i....{..{...X3..!.c.?.,...).U[0.K3Gqu..)..MX.Aa.4k&#...Y.I.^{Z..1.+q...../...GO..(.E.(...S4.F....~..w..m..#....b..o.i.._...6.[...3..b'....$Fb`...S.u.._...y..)q~L.9I.tRj....M..S1.\....Y.W..O.I.x..o....<..4.Q.\..v.3..../.2[LNL# ....].W..}...4..<L..K8....u......"7...u.A....\.3M...^...O{..._..pS..CD...r.N....@.q........Oj....e.a.eu..T..)T,.{.a._uU.

Chrome Cache Entry: 357

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16393)
Category:	downloaded
Size (bytes):	16396
Entropy (8bit):	4.819126983655911
Encrypted:	false
SSDEEP:	192:1A2hoWGG6/mFL3ulHWH2oXLn7xBpiiHzHLWSG6Xng207LPV7EFE5EVErE21Ni5ry:6jZYL+hoXLn7HvHzHLWShP07LPN6QUyj
MD5:	F4E78F9D032FC5AF735083A4A31CCCC7
SHA1:	AFE6606982BCC9D994712A52B07A5A2CBCB7FD47
SHA-256:	5C2ED39B1C9C9329B334C3AC1CF74776765BE6E70E0D16BC26B83B3116E2EE49
SHA-512:	1D201A6FFD7CAE23E3B390D3DC17AE2DBAC39ECF6D009A0D17C321A738B85C16E6F36E2EA18B0B25725713C177F7257D5F03E9345C8B0AD2245F0D8878084A87
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/footer.css
Preview:	.container{box-sizing:content-box;margin-left:auto;margin-right:auto}.container>*{box-sizing:border-box}.section.footer--theme-1-aol{background:#fff;padding:0}.section.footer--theme-1-aol .footer{color:#fff;padding:0;max-width:none}.section.footer--theme-1-aol .footer__top{color:#777;padding:40px 0;margin-top:0;font-weight:600;font-size:0.875rem;line-height:1.71;margin-bottom:1.8em;margin-bottom:0}@media(min-width: 768px){.section.footer--theme-1-aol .footer__top{font-size:1rem;line-height:1.5}}@media(min-width: 768px){.section.footer--theme-1-aol .footer__top{padding:80px 0 70px}}.section.footer--theme-1-aol .footer__bottom{background:#000;padding:20px 0}.section.footer--theme-1-aol .footer__link{color:inherit}.section.footer--theme-1-aol .footer__list__item:after{background:#fff}section.footer--theme-1{background:#e0e4e9}section.section.footer--theme-2{background:#f0f0f0}section.section.footer--theme-2 .footer__list{margin:0}section.section.footer--theme-2 .footer__list__item{margin:

Chrome Cache Entry: 358

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30578), with no line terminators
Category:	downloaded
Size (bytes):	30578
Entropy (8bit):	5.256621409888506
Encrypted:	false
SSDEEP:	768:NGX+9cjI/qSpKpwAhrfxrPrtameY1tFXfuZBZE0B7vfp+p:YXZjWqSOwA5xrV4z5G
MD5:	9183A4186084C8DE52D97DD3B48AF62A
SHA1:	92E555B67B9FAC7DFE95514E9C55C44621F800CD
SHA-256:	FDD78DA27D75BB44751EE774AC833B4CFC5D233E6177B226CFA889DCB299D584
SHA-512:	35CB8C467C2A445D856942E80FE9FC0672DB645A2DA23B91DA20F192F29325E9AF3EEB5079B12F04770614EB38CAD10B55EB5BCBC31F38ED13849D075ADF88CE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-video-3.1.2.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-video"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(i[a])return i[a].exports;var n=i[a]={i:a,l:!1,exports:{}};return e[a].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,i){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function

Chrome Cache Entry: 359

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1972
Entropy (8bit):	7.539604201044246
Encrypted:	false
SSDEEP:	24:Pxs2zV+4k+doK/rFS1QVvY0mSgjeA44xY5IzxSur+EMJCEKoQ+EJm5NC/J1:E9+Z/pSgY0sjBW0xX+EMgEXQL7X
MD5:	D1DB55C3575AF5D237EBFFE75DE882A6
SHA1:	FAA808E14E95486CDF8636E65B105D7E987F8D0F
SHA-256:	6DDC75CA5E8ABFA8BB41E08BC0F7EFB58ADA6EB971ACED085F5150513AE340C0
SHA-512:	EDBBDFAF5815161B248834854479B5B483B7AF19A93139D1ED7A269711718920348F315F3B06C780349DCBADEDB9FCEBD1E02D652A75DDD81A8A76F059D69463
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FKe39LUOwUzQN.gkOzB70lw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181220%2F500x500%2Fkings_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e6505ecf04d45160caf54563bd8e44f5b1ace420
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.......................................................................................................................................................................................[+.cqz......................_0......e.c5.uM.......i....mB....]-....{....g;....dr{..................k.oE.......................xP.......x........tK........^........qH.k@...v............................._1.............[....\|V..u.{T.......[,..`....b.................................r~.{........kx.ft}p}.......y........f9...........s..b4.n{.....yR................a2....~X.....l.qG.hv..........d7..s..p............j........mz..............................................................o\|....mC..........................\|.............s.$....>tRNS........v...J.!.o..$...u.&`,?..7.2..5.....Z..ET\ki3.gm...:....0...(IDATH..wT.G..p...FB.b.../......s..R.JS t...."E0.A...]..%.h.X.%.7RIbz1.efw.n.;....g.7{...7....v.[os.7/.z*MW

Chrome Cache Entry: 360

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	331
Entropy (8bit):	6.979178920515702
Encrypted:	false
SSDEEP:	6:6v/lhPfd2pZIQKYsQUUVD+1/rzILNDwYHSQg+tcNOzoYZFmyGdfxviyeC+IVp:6v/7MZIQKxt96NDwYHSQlcNGFm31x6yB
MD5:	6E73E8B5F42F8EB2A888E9482F70C0D2
SHA1:	D0DE9FA1BB16D3FA18DE58F01DFBB493F3D06F11
SHA-256:	F376E4F8B74B99D4A88FCCE470C6098071632B0B94507255DF10744320BE1E1A
SHA-512:	BC52ADDF2304AF93744D98957A99EC5E6A6E1AD8BFF1E6E470F1A74FF420D0FE5CB007002DA17D3BBC0072A8B01CD00C572B8C2BD187BC54E2165089E3D7312F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=9db333fbfbd97c489dfb11e31107155b55541a73
Preview:	.PNG........IHDR.............(-.S...WPLTEGpL<[.<Z.Lh.;Z.;Z.Gd.A_.<[.<[.Ca.;Z.<[.;Z.:Y.Gd.....Sn.^w.w..q..........h.....?].Mi....\....tRNS.......1........F.....IDAT..e....0..C.$.v.....w.).*u..V...(=H9h%...'f..O\....`8.......PB..6....h1..a.,...B.1.....X.#.K.h.....o.........f.>.Zb-..?L..=..^f..-g_.G9.G...6...q.L....IEND.B`.

Chrome Cache Entry: 361

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	9556
Entropy (8bit):	7.945182730641828
Encrypted:	false
SSDEEP:	192:/8INLUsmP0yy56MvdGwuIwQzIsStMnkwnWQr5b3ign4Vfbn5:/8vs60OMvwwLwQzIbtMndNr5bP4p5
MD5:	D9EDE0BE89101A8321565977239E2F6E
SHA1:	469353D237E448DAD2B7655DD7E437930817152B
SHA-256:	4083DB0748404C8CDCFFE67A2951C697CA311DBDE0AAE012A726168779B97649
SHA-512:	EA66E0571C023F262FB5ED983EB6D7A8F37B616FCEB4CAB89A8799D8E610B694749D68B3E202FE3178850BA251203883D421DAD2B97F5ACD1582941D8D8E75B2
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F6ef5be46479c981bdac4bb73b42d643c&client=76f99bdb8f78cd44cc0b&signature=bfc7d32d8d9dbfc92ecf53c0948be318dad2632c
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4................................................................3 m/y......]E....f..:"n....XS..G9.C-.'....s..5GWI.=g.M..I..vE......l...g.....8.H...P.}..q.q.....zc...!.......O.M.X..([2@..a8..[.6..o....u.$..l+R.9..."...Ll.6.4..i....C6S..5...Y.b)`.....'..YR.+.Q..F..&3......~........UIcHE....[..'.....l..`Z3r..Mu.g.D..H....l.+.kj..+.8;.S..S...0.Lm..l.<-....k..\..+..5".........D...6.Gf.....ASlL...u.;.\.\|G.. o.KV$..z.B.F..0'.$C...+......._..?V.....Se..I.J...!S...%..(....4.^-.........fF:.e..Z&._....j.e..yY.:..>.K.....rAt..WSK2.)z^VJ.j...........oJr.iz.H..k.*..T.`..3L.$.Xu.z.......#....$Z'.j.}K..%.)0....hf<........R...>.+......w.+q...Q.Z.".h.d.a...Y..5.~\.}..Q....W.5....&..)m9@.abX#.].K2....;..\|.nB....... uJpC6.S..>..M...Y!a.eS.x.....Q0.g&Q.r....{..l8........"..G

Chrome Cache Entry: 362

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=8&ns_st_sp=1&ns_st_sc=1&ns_st_psq=4&ns_st_asq=4&ns_st_sq=4&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=7821&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=7821&ns_st_dpt=6&ns_st_ipt=6&ns_st_ap=7821&ns_st_dap=6&ns_st_et=20204&ns_st_det=6&ns_st_upc=7821&ns_st_dupc=6&ns_st_iupc=6&ns_st_upa=7821&ns_st_dupa=6&ns_st_iupa=6&ns_st_lpc=7821&ns_st_dlpc=6&ns_st_lpa=7821&ns_st_dlpa=6&ns_st_pa=7821&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508438543&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=4&ns_st_dpc=1&ns_st_pp=4&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 363

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3201), with no line terminators
Category:	downloaded
Size (bytes):	3201
Entropy (8bit):	5.242802101325068
Encrypted:	false
SSDEEP:	96:cxloPchDDwfmVmn0UVYlohmG+lfZeWKl2bYC2W:cOiAOIn0+YlowlfZeWm2YCp
MD5:	95676F0F3A89D25EB4E55BA41B80E2C8
SHA1:	883AACB0C856813ED7CBE15D5A4CEDFEFBF0C097
SHA-256:	C3275A7E8983C157CA0317CA42A0D8719BD555AA72D0E5DFA2609ABAB04BD0BD
SHA-512:	8C01CECFCD3EF7A1778953978A9F61254B365F1C450E24DE5CADF045082284F13C3F35E53B314AC4A1246E0B36F2200432E62DB051EEF61763B6BDDBB06689B2
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/tiles.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.tiles=function(t){"use strict";function e(t,e){var i="function"==typeof Symbol&&t[Symbol.iterator];if(!i)return t;var n,o,r=i.call(t),l=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=r.next()).done;)l.push(n.value)}catch(t){o={error:t}}finally{try{n&&!n.done&&(i=r.return)&&i.call(r)}finally{if(o)throw o.error}}return l}function i(t,e,i){if(i\|\|2===arguments.length)for(var n,o=0,r=e.length;o<r;o++)!n&&o in e\|\|(n\|\|(n=Array.prototype.slice.call(e,0,o)),n[o]=e[o]);return t.concat(n\|\|Array.prototype.slice.call(e))}var n;function o(){for(var n,o=[],r=0;r<arguments.length;r++)o[r]=arguments[r];t.store.debug&&(n=t.logger.tag("tiles")).info.apply(n,i([],e(o),!1))}!function(t){t.BREAK_SMALL_MEDIA_QUERY="(min-width: 768px)"}(n\|\|(n={}));var r=768;function l(){var e=t.dom.getElement('.tiles__tile[data-tile-index="1"]');if(e){var i=e.clientHeight+200;window.innerWidth<r?t.dom.applyFunction(".tiles__inner",(function(t){return t.setAttribute("style","height: "+i+"px")})):t.d

Chrome Cache Entry: 364

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39626)
Category:	downloaded
Size (bytes):	40676
Entropy (8bit):	5.7117087576244625
Encrypted:	false
SSDEEP:	768:jyOKG9IskWsGQ3nz1/ZhA6sVTgDGQBA1EkYPjAPfhPa9m1U4Dl+9YcN9iNcK5aeI:jyOKG9IskWsGyR/ZhA6sVTgDGGA1vYPd
MD5:	F177AB8976B428CB30EAB8DA4A35629A
SHA1:	D00F943FF81746961251B873B4A157E9B0E717D9
SHA-256:	8614FBAF68FB20CF38223AC73EAE03962A33CA5923A65A9250DDFC4FB7373EA9
SHA-512:	5147529090FEE3498AB8F21E95F2FAE0664F486057628BF33ADC220B5A929FA6FD689EA1A11BC0E44843EEDC9111664F62FAE96045304D626BDF9E4A689B9103
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/hhT7r2j7IM84IjrHPq4DliozylkjplqSUN38T7c3Pqk.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function W(T){return T}var G=this\|\|self,L=function(T){return W.call(this,T)},l=function(T,k,I,K,a){if(K=(a=G.trustedTypes,I),!a\|\|!a.createPolicy)return K;try{K=a.createPolicy(k,{createHTML:L,createScript:L,createScriptURL:L})}catch(q){if(G.console)G.console[T](q.message)}return K};(0,eval)(function(T,k){return(k=l("error","bg",null))&&1===T.eval(k.createScript("1"))?function(I){return k.createScript(I)}:function(I){return""+I}}(G)(Array(7824Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){/',.

Chrome Cache Entry: 365

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	289
Entropy (8bit):	4.709134573700085
Encrypted:	false
SSDEEP:	6:Y9KQOQacdlmUFOJ1SjZfIfNsSpPL7u5DHJvQJPZNsSpJMXu5DHJPfl7n:YoQOAvmEFQfNsSp/kHiPZNsSpJAkHFt7
MD5:	F90CC8343F06975D3B64B88DD4728194
SHA1:	D714FC317F33DD1318BC60D7E912E436690BD82F
SHA-256:	78854A5E3B05C677AEB85ADC960420B8CE1712B90E434254107ABD4CD5710531
SHA-512:	35C0B1B61DD5552898FDCBF1F2AF96C28F73E2CADD9EAD5EFA0D5ACE46E36156B0DCC8DFCD1CB4C5A4F198C1AC7B2E35DD3D29A445EA424D00826259AC56726E
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/customer/profile
Preview:	{"profile":{"guid":null,"loginId":null,"displayName":null,"localizedBrand":"usaol"},"isAuthenticated":false,"isPaid":false,"loginUrl":"https://oidc.help.aol.com/login?dest={dest}&language=en-US","logoutUrl":"https://oidc.help.aol.com/logout?dest={dest}&language=en-US","nameValuePairs":{}}

Chrome Cache Entry: 366

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	693
Entropy (8bit):	6.920719556719218
Encrypted:	false
SSDEEP:	12:6jQtFfsDvjQtFfswVz9pggyv4z+93CSNDhcsSIHkIT2mhyO3r4xdi:ztFGstFFjyv+idQY12WyO3uo
MD5:	94D97E37D6FAE7AD498A7A43B6EE966D
SHA1:	6556BBCDD8F29CB7EBCE7485E38A95F653DFF097
SHA-256:	EF2C1892FBF103B484B5C3D76E3B9C02C53A9291CE080F46CCE9E3CD79464CBD
SHA-512:	B693E35FA206A381A84DD28B1953234238B1C0E8A442B1E60CA0412CE8F62F7F71E4191AC8DC221900232230D365EB0E1AAFCBFE395BFC45AC498D994B58797B
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................................ .... %...%-))-969KKd...... . .."..........y....................................................1!..."Q#UVq....................................................!1.A............?.?._e.6.4...sUA.......q_....R.l.....f.v...6...M...a..1.\|.{.7.......V........z,u...2.\.~k.C(9....f...[.....1....}.L2.....m......B.OEEO.....8...q.L..P.j....%L.08&.G.MdjZ....x....5.pd..+..i\..P......\`..&..hg...u.........M.\{..l!n..+..n...G.\|.....1!!B.EEEL...{.......ez.......`....].f...........R..u....&j.._W[........... ..s.I..c.6a0........}Yt..\.r4N.........X..

Chrome Cache Entry: 367

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2126)
Category:	downloaded
Size (bytes):	2195
Entropy (8bit):	5.18115226936036
Encrypted:	false
SSDEEP:	48:Qo1bVUV5nuo5ogNG1n9GbFdyF+ub4fcKBqKh:HZVpgNG18dyF+uNi
MD5:	5EBADC61DD15218E851FEE952298F033
SHA1:	EC60019787D3EEB873D4A159636CF916386724A8
SHA-256:	9F8AF8F83BC240216BF38055A42EC24E91678381E13C17FF1485B81095DB69B3
SHA-512:	6405D678567640C3CA6988B1042051D88C9BB79DB53B6BFAE52F1A0CB72FF40D7E13B938FF0A9242939DE65259043BCB0B3B55727E8E0291340D7066729F6522
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/back-to-top.js
Preview:	/! For license information please see back-to-top.js.LICENSE.txt /.this.LIBRO=this.LIBRO\|\|{},this.LIBRO.backToTop=function(){"use strict";function r(r,n){var t="function"==typeof Symbol&&r[Symbol.iterator];if(!t)return r;var o,e,a=t.call(r),i=[];try{for(;(void 0===n\|\|n-- >0)&&!(o=a.next()).done;)i.push(o.value)}catch(r){e={error:r}}finally{try{o&&!o.done&&(t=a.return)&&t.call(a)}finally{if(e)throw e.error}}return i}function n(){for(var n=[],t=0;t<arguments.length;t++)n=n.concat(r(arguments[t]));return n}var t;!function(r){r.DEV="dev",r.QA="qa",r.QA5="qa5",r.STAGE="stage",r.PROD="prod"}(t\|\|(t={}));var o,e,a,i=function(r,n){Array.isArray(r)?r.forEach((function(r){return i(r,n)})):f(r)?Array.isArray(n)?n.forEach((function(n){return r.classList.add(n)})):r.classList.add(n):s(r)&&i(y(r),n)},c=function(r,n){Array.isArray(r)?r.forEach((function(r){return c(r,n)})):f(r)?Array.isArray(n)?n.forEach((function(n){return r.classList.remove(n)})):r.classList.remove(n):s(r)&&c(y(r),n)},u=function(r

Chrome Cache Entry: 368

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1448), with no line terminators
Category:	downloaded
Size (bytes):	1448
Entropy (8bit):	5.143245795752604
Encrypted:	false
SSDEEP:	24:cckaBM6lh5Jm5tDJapB7fuW25MSiEHGDFFZxRWUn/axRWM8nR2V2gxRWb8exRWbw:cpa95k5tD0/DuW2OFF7wG/ywxQcIwTw0
MD5:	CC922C4232D577B384EB627C7FF18268
SHA1:	50F92FB9ACC53CC670443FBB2EA57CDF14C764E1
SHA-256:	DBAA6519FBB9780393EE02E0634E242012CB009652C211AE2C30D66BF5918A45
SHA-512:	2D5546DA8339A6BF4EDD74D48A686E12D23EA088E9B06735611B9AF89386ACCA244C71FD41D6A80CE69076B6421844450A7769140FFCD4BD0BC786E1561661D5
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/price-table.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.priceTable=function(e){"use strict";function t(e,t){var r="function"==typeof Symbol&&e[Symbol.iterator];if(!r)return e;var n,o,a=r.call(e),i=[];try{for(;(void 0===t\|\|t-- >0)&&!(n=a.next()).done;)i.push(n.value)}catch(e){o={error:e}}finally{try{n&&!n.done&&(r=a.return)&&r.call(a)}finally{if(o)throw o.error}}return i}function r(e,t,r){if(r\|\|2===arguments.length)for(var n,o=0,a=t.length;o<a;o++)!n&&o in t\|\|(n\|\|(n=Array.prototype.slice.call(t,0,o)),n[o]=t[o]);return e.concat(n\|\|Array.prototype.slice.call(t))}function n(){for(var n,o=[],a=0;a<arguments.length;a++)o[a]=arguments[a];e.store.debug&&(n=e.logger.tag("price-table")).info.apply(n,r([],t(o),!1))}function o(){var t;e.store.once("URL_DATA",a),(t=e.dom.getElements(".price-table")).length>1&&t.forEach((function(t,r){var n=e.dom.getElements(t,".price-table__feature"),o=n.length,a=t.nextElementSibling\|\|t.previousElementSibling;if(o>e.dom.getElements(a,".price-table__feature").length){var i=e.dom.getEl

Chrome Cache Entry: 369

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	167501
Entropy (8bit):	6.01985717879387
Encrypted:	false
SSDEEP:	3072:wMOUKf0KA4IujMThx1VdlY7VruEDx+r0iX:IfyhX/iBrukrm
MD5:	2B4CC678F83CF0576C080FD8301E92DA
SHA1:	8198F594E766AD4054DEA303CBA4A6FCAD027155
SHA-256:	4FDD15296D1FEB60900D4539BE98B0C23EE72BAE9E90094180BCEB3940154665
SHA-512:	6CEC5C0D178A7AB4B51B8DD64389D232EE7F5B3C1DA703453089F8EABF34CC52DBDCC4CC9DD5DFD1FF7F48692DCC146AB6C5994923632E2AA8A55170EFE19FBC
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3589207970860027&correlator=145139669414128&eid=31081519%2C31081350%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202402220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_as_top_right_c%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a%2Cus_aol_hp_dt_top_center%2Cus_aol_hp_dt_mid_center&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x600%2C300x250%2C300x250%2C728x90%7C970x250%7C3x1%2C970x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1709508398540&adxs=-9%2C855%2C855%2C268%2C197&adys=-9%2C721%2C733%2C0%2C1841&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1%7C0%7C0%7C0%7C1&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.aol.com%2F&vis=1&psz=0x-1%7C300x600%7C300x600%7C1263x0%7C1121x290&msz=0x-1%7C300x600%7C300x0%7C1263x0%7C1121x290&fws=2%2C4%2C4%2C4%2C4&ohw=0%2C300%2C300%2C1263%2C1263&ga_vid=167189262.1709508399&ga_sid=1709508399&ga_hid=2079726794&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X2FzX3RvcF9yaWdodF9jIixbXV0sWyIvMjI4ODgxNTIyNzkvdXMvYW9sL2hwL2R0L3VzX2FvbF9ocF9kdF9hc190b3BfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL2FvbC9ocC9kdC91c19hb2xfaHBfZHRfYXNfdG9wX3JpZ2h0X2EiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X21pZF9jZW50ZXIiLFtdXV1dLG51bGwsM10.&dlt=1709508388026&idt=8752&prev_scp=loc%3Dtop_right%26noads%3D1%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_center%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0&cust_params=bucket%3Daol-aa-2%26colo%3Dus-east-1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Daol%26ver%3Dtd-app-aol%26pct%3Daolfrontpage%26pt%3Dhome%26spaceid%3D1197803361%26yrid%3D02r7skdiua1p4%26bka%3D0%26y_bx%3D1&adks=2925883975%2C3459255604%2C1294450886%2C274640380%2C2523778429&frm=20
Preview:	{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_as_top_right_c":["html",0,null,null,0,600,300,0,1,null,null,null,1,[["ID=5f754106410cdef1:T=1709508399:RT=1709508399:S=ALNI_MYnIUVMVlsIYkFHA-RSwJMdhkowYw",1743204399,"/","aol.com",1],["UID=00000dcf03e41a0c:T=1709508399:RT=1709508399:S=ALNI_MZSweHx1DoXuB5AdbYDZ0AYIee9iA",1743204399,"/","aol.com",2]],[0],[0],[0],[0],null,null,[758579],[10004520],null,null,null,0,null,null,null,null,null,null,null,"CPGHsoef2YQDFU8DTwgdAewBSw",null,null,null,null,null,null,null,null,["052402022342000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=7bb82c97959dc59c:T=1709508399:RT=1709508399:S=AA-AfjZPE8XmncuK1jLB_EFwQ-PX",1725060399,"/","aol.com"]],[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=0524

Chrome Cache Entry: 370

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	224
Entropy (8bit):	4.9207862451818025
Encrypted:	false
SSDEEP:	6:/uIyOyGJ1aVN3TVcouEnViARgU10IyOy7MskeSuIyZ:O384NpcREnEARdY37Mssu1Z
MD5:	35F949AB045720F0B6F75A311584A1D7
SHA1:	02E9ED67863D09819F70A2698D720D577D056B36
SHA-256:	89AFC3009E156E65090C97179FF909D96510FE1C606DB04950D466F0EC41FB7F
SHA-512:	55416B00E6BC0392E840D6CFE0D2EF4A85B92B9EDE9EC341B7B107971DAE2B89E28BD7E7642569B1719081D80CE1EB190A9029819F387784492AA5283111F1A7
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/dispatcher.35f949ab045720f0.css
Preview:	.m-dispatcher--rightrail{margin:0 -10px 20px;padding:0;position:relative;text-align:center;z-index:12}@media screen and (max-width:480px){.m-dispatcher--rightrail{padding-top:60px}}../# sourceMappingURL=dispatcher.css.map/

Chrome Cache Entry: 371

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	dropped
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 372

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16604)
Category:	downloaded
Size (bytes):	16605
Entropy (8bit):	5.626229597255949
Encrypted:	false
SSDEEP:	384:MDKpNJrrjUOMLdZS1O4afmu4ABOUyZsuDr:/poLuwl1uxDr
MD5:	AFFF28B6DD72D1BD824133318DDEAA17
SHA1:	8FE632D123AEDC3F74C5CDC663BE6EEC08E194F0
SHA-256:	1CD9AD59C920DF7A6CA75F6B536658D7AB4B01E928B926DEAEFD5D9974A47A75
SHA-512:	2864DFFB3F8F61421A4D47455B3FA8EEE1A82118AEA2E8F0D94562976672708E846C4EE6335DC36E1DF2F0C58D06FF30CF7BE8AB8DB30A748722627BB221D941
Malicious:	false
Reputation:	low
URL:	https://www.aol.com/lib/metro/g/myy/rapidworker_1_2_0.0.2.js
Preview:	function base64(b){if("undefined"!=typeof btoa){return btoa(b);}for(var q,k,d,j,c,h,m,g="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",p=[],v=0;b.length>v;){q=b.charCodeAt(v++),k=b.charCodeAt(v++),d=b.charCodeAt(v++),j=q>>2,c=(3&q)<<4\|k>>4,h=(15&k)<<2\|d>>6,m=63&d,isNaN(k)?h=m=64:isNaN(d)&&(m=64),p.push(g.charAt(j)+g.charAt(c)+g.charAt(h)+g.charAt(m));}return p.join("");}function lzw_encode(b){for(var q,k={},d=(b+"").split(""),j=[],c=d[0],h=256,m=d.length,g=1;m>g;g++){q=d[g],null!=k[c+q]?c+=q:(j.push(c.length>1?k[c]:c.charCodeAt(0)),k[c+q]=h,h++,c=q);}j.push(c.length>1?k[c]:c.charCodeAt(0));for(var p=j.length,g=0;p>g;g++){j[g]=String.fromCharCode(j[g]);}return j.join("");}(function(aQ){var aN=32768,a9=0,aW=1,a8=2,aV=6,a4=!0,bg=32768,a1=64,aM=8192,aO=2*aN,bc=3,a6=258,ba=16,bY=8192,bh=13;bY>bg&&postMessage("error: zip_INBUFSIZ is too small"),aN<<1>1<<ba&&postMessage("error: zip_WSIZE is too large"),bh>ba-1&&postMessage("error: zip_HASH_BITS is too large"),(8>bh\|\|258!=

Chrome Cache Entry: 373

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666)
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	5.061230097277091
Encrypted:	false
SSDEEP:	12:vTsogIKyqHZsaWSxCoLuxsRkv1moFGHewsLhyXaWSVxvnonUJR/iGog/:vTso1Zwj/okuIEnonUfKGoW
MD5:	C1D898B0401CFF71BA37BC158C6D70DA
SHA1:	6E8084E3593D799117B87D81998C210CFE948216
SHA-256:	346B9A405AF3F3144B8B7F1E3D4B6F68ED87DAC245B7A670FC44884B6C62BEB9
SHA-512:	1BD6095D3AAA7588F27E012EFFE08386E9ED2F2EE2771A82A41F07A86342DA20C8AD69F0C3DD7D22136E398DD805CC95A958060E3C451217CFE094B687922503
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/tooltip.css
Preview:	.tooltip{position:absolute;top:0;right:0;z-index:2;cursor:pointer}.tooltip__content{display:none;position:absolute;top:100%;margin-top:0.1875rem;right:-0.375rem;padding:1rem;background:#fff;border:0.0625rem solid rgba(0,0,0,.2);box-shadow:0 0.3125rem 0.625rem rgba(0,0,0,.2);border-radius:0.375rem;max-width:12.5rem;font-size:0.875rem;z-index:2}.tooltip__content:before{content:"";position:absolute;width:0.625rem;height:0.625rem;transform:rotate(45deg);background:#fff;border:0.0625rem solid rgba(0,0,0,.2);border-width:1px 0 0 1px;top:-0.375rem;right:0.6875rem}.tooltip__content img{max-width:100%;display:block}.tooltip--is-active .tooltip__content{display:block}.

Chrome Cache Entry: 374

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuS4hUL_ZHHshIx_ZOw-2vIBVTZT84aK_6YoJpsismGPJY8FtpNNT3AFsGsZ3mLuVs-o3SU6ITbd2BTz_wUEW6sJ7U2jh8ONwPSKBsyDgCe2AXceCgW7xiNuSoiaeJ1LKeKtrZkWTIA7zzNJFlVa-qK-jqtMDtA7Uc&sig=Cg0ArKJSzDe3dCuZWQ1mEAE&id=lidartos&mcvt=18614&p=382,855,632,1155&mtos=18614,18614,18614,18614,18614&tos=29598,0,0,0,0&v=20240229&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=3&adk=1294450886&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=544120601&rst=1709508403048&rpt=3107&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 375

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 376

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	589255
Entropy (8bit):	5.447790442069474
Encrypted:	false
SSDEEP:	6144:pI+Hj1CuyY0fVPnaVzDpdoqDGuYftwhVz2fISxfTrYpGoUs6gYUvP/Zi4bfReeDn:pI2ytnEVz7IePm8h
MD5:	E9FBB4FBA5E7C83DD56FC4F9BE56325C
SHA1:	AEDFBFBDEB43E6B1E7679A42D776AA9E349519CE
SHA-256:	6069AE6296928B23FB575B0D3EEDBE89DA27DC3A2FD05938A41DF45FC695006A
SHA-512:	7FF68AF84E1A29AAFCC90493B6A6C12BC8BBE62DCB0C9246780E50039E620C187B9F1CFCCD4CE4B48D7D2F29FA6ED2E4FF4295D677B8D41D5AA149746A4400FF
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/bidexchange.js?cid=8YHB8F956&version=12.1&dn=www.aol.com&ysection=main&yregion=US&ylang=en-US&ysite=aol&ydevice=desktop
Preview:	try {(()=>{var e={4764:(e,t,i)=>{"use strict";i.d(t,{QE:()=>r});var n=i(8386);n.eP.getConfig("abpWhtlstUrlsRgx");const r=n.eP.getConfig("AbpAcptPrm")},5364:(e,t,i)=>{"use strict";var n=i(859),r=i(3277);const s=new class{constructor(){this.trackerMap=new Map}add(e){return(0,r.DM)(e)&&this.trackerMap.set(e.id,e),this}each(e){this.trackerMap.forEach(((t,i)=>{e(t,i)}))}find(e){const t=this.trackerMap.get(e);return(0,r.DM)(t)?t:null}remove(e){return this.trackerMap.delete(e.id),this}};var o,a=i(4612),c=i(8626);!function(e){e[e.TRACKING=0]="TRACKING",e[e.DISABLED=1]="DISABLED"}(o\|\|(o={}));class d extends c.Z{constructor(e,t){super(),this.stateMap=new Map,this.detectorMap=new Map,this.id=t;for(const t of e)this.stateMap.set(t.type,o.TRACKING),this.detectorMap.set(t.type,t),t.startTracking(((e={})=>{this.isActive(t.type)&&(t.isOneTimeEvent()&&(t.disable(this.id),this.stateMap.set(t.type,o.DISABLED)),this.emit(t.event,e))}),this.id)}getMeta(e){const t=this.detectorMap.get(e);retu

Chrome Cache Entry: 377

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1009
Entropy (8bit):	4.784211257131328
Encrypted:	false
SSDEEP:	24:+lqZHPPAa3ZTWZ5Rg8r2ORg885LHaBk2PWX3fVEfVmbplvlzpE:xAQcrj85eByf6oDs
MD5:	FD349DF18514D0B87D15B0E7DCA4B56F
SHA1:	C0FE1D1B2211FB71684868CE7D496A9050494AA9
SHA-256:	B345D89F6222BFF0984EB136FF2FD6D6897B9C09268778E6AC3B6CDFE935B9E9
SHA-512:	A38BA37277C284FFF14969B9FB86B62D64B7770724882E38CB853CEEEA38541573542DE60AF48E077ECFCF00080218D47D874EBD646F74CB10531AEFE08467B1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/0.css
Preview:	.user-profile-opener {. cursor: pointer;.}...user-profile-panel {. display: none;. width: 100px;. margin: 0;. padding: 0;. position: absolute;. text-align: left;.}...user-profile-panel li {. list-style-type: none;.}...user-profile-panel.expanded {. display: block;.}..#user-profile-mobile .m-flyout__container {. display: none;.}..@media (max-width: 900px) {. #user-profile-mobile .m-flyout--open .m-flyout__container {. display: block;. }.}...chatbot {. position: fixed;. bottom: 0;. right: 0;.}...chatbot .chatbot__open-chat {. position: absolute;. margin: 0;. border: 0;. padding: 0;. bottom: 10px;. right: 15px;. background: transparent;. animation: bounce-in-bottom 1.1s both;. -webkit-animation: bounce-in-bottom 1.1s both;.}...chatbot .chatbot__open-chat__logo {. width: 100px;.}..#ais-chatbot-iframe {. height: 100% !important;. bottom: 0 !important;.}..@media (min-width: 745px) {. #ais-chatbot-iframe {. height: 655px !important;. width: 465px !importan

Chrome Cache Entry: 378

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.429936107700023
Encrypted:	false
SSDEEP:	3:YWR4bL29RAXxQAfB4xCxKRTiAen:YWybLSUH6qKRe3
MD5:	8A9E551B5CB11639113E37C4A828F43E
SHA1:	B6A26E9482ADAEAF4DED233C774751432B937D6E
SHA-256:	43A54008C947CEC1F6DFDB40C58E0112CB3F7F49175D57576CED014D5BBD1CF0
SHA-512:	86312DCD97D01EC696B624244FD2FAC67EAB21F72BF5164E55AD6B2075DE50CC7DB6E4BB27308B0078F53D9CACE3969A4484C8998B243C9FAEEAE4CFB41834A2
Malicious:	false
Reputation:	low
Preview:	{"status":405,"message":"Request method 'GET' not supported"}

Chrome Cache Entry: 379

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5790)
Category:	downloaded
Size (bytes):	5842
Entropy (8bit):	4.929129626952789
Encrypted:	false
SSDEEP:	96:KXjI12CssANhBMZ4EsrwxDOT1fq5JfKsFD0QXcMl4:im2C0GZ4EsrsDYpqPddcMl4
MD5:	AE48C4E59D83A951D7DB7987CEAFA23B
SHA1:	0B239D971E2BD334E53A387FB4B77F2B30E575C1
SHA-256:	7513AF8971949C946C0968BBACC0B43F0C2227412CC4587D11D3D4EC1ECD16E8
SHA-512:	A527C4440A9DB6BD43A5D27F4AC292E7EF7614F802A800AD76500795CBC52DFD694E9ED6BF9646CCADDADB879365353D10BA810344FE6E1A19E57778BA526568
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/notification_banner.ae48c4e59d83a951.css
Preview:	.m-notification-banner__content,.m-notification-banner__lbl,.m-notification-banner__more-lbl{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:end;-ms-flex-align:end;align-items:flex-end}.aol-notification-banner{background-color:#0f69ff;color:#fff;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;height:0;margin-left:0;overflow:hidden;padding:0;text-align:left;-webkit-transition:height .6s cubic-bezier(.23,1,.32,1);transition:height .6s cubic-bezier(.23,1,.32,1);width:auto}.aol-notification-banner.banner-shown{display:block;height:70px;margin-bottom:30px}@media screen and (max-width:480px){.aol-notification-banner.banner-shown{margin-bottom:20px}}.aol-notification-banner .flex-wrap{height:70px}.aol-notification-banner .flex-wrap,.aol-notification-banner a{display:-webkit-box;display:-ms-flexbox;display:flex;-ms-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-box-align:center;-ms-flex-align:center;align-items:center}.aol-notification-banner a{text-d

Chrome Cache Entry: 380

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4616), with no line terminators
Category:	downloaded
Size (bytes):	4616
Entropy (8bit):	5.101866745664265
Encrypted:	false
SSDEEP:	96:3hxG18jgjq1Yrww/HrUeYqN5jlcyI0WOmEVq1krctes4CJH:3ku6woHHN59I0bVuujW
MD5:	9390416F18E2D244487267F89AFFAB32
SHA1:	A7C02ED45A9A7737A6C62FC7690B1774B29E27AF
SHA-256:	5F86EC9907F6433F430F9CAA406D5244809B9623F8EBAC90868AE331775438C5
SHA-512:	A69408CF71A48988C016FDA79A0A9312CB3066CF727DD10C8B87DC99AFE5C9E03FBE72CA17EB5489534902A6C2E23D9383C70BD46AEC233D0D15A0326FF528FC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-module-2.0.0.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-module",[],t):"object"==typeof exports?exports["wafer-module"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-module"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}funct

Chrome Cache Entry: 381

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	701
Entropy (8bit):	5.006215040397712
Encrypted:	false
SSDEEP:	12:S0or1vH1WbDQZ14O2XfIY0YtSTs5XoK/alrr3QUcXfKBMbv3V7aJxKAtfQ8avvIP:SByDQZqPoYcT4barrXcGMb1JJ4yGa1UH
MD5:	0207FB58BFD0359F586C29F0A0BC8A9B
SHA1:	979CEC1FAD3743DAB174976E206D50514B9473E8
SHA-256:	E2EED35B0DA9BC620DA675306ECD19E519B434A3F63C82F57232C4A3215A39BD
SHA-512:	89F6417A7CF5CEA2612C08E2084C155A3B97A264010658EAC1C5C69F48368F59DE67AE5789C3466A1CC7C8790CC9E546567E09ADBC7503CA4D16C3BA0248FB7B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aa/templates/widget/bgImageStickyFooter/main.css
Preview:	@charset "UTF-8";.body {..margin: 0;..overflow: hidden;.}..bg-image {..width: 100%;..vertical-align: middle;.}..cta-container {..display: inline-block;..border: 1px solid #ccc;..position: relative;.}.img[src=""] {..display: none;.}.div#Content_Region {..text-align: center;.}..close-button {..position: absolute; ..top: 8px; ..right: 8px; ..cursor: pointer; ..stroke-width: 1; ..background: none; ..border: none; ..padding: 4px;..z-index: 3;.}..close-button svg {..width: 14px;..height: 14px;..display: block;.}..close-button--dark {..stroke: #000; .}..close-button--light {..stroke: rgb(199, 205, 210); .}..close-button:hover {. stroke: #888;.}..cta-container--border-none {. border: none; .}

Chrome Cache Entry: 382

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1313)
Category:	dropped
Size (bytes):	11987
Entropy (8bit):	5.517485037769276
Encrypted:	false
SSDEEP:	192:Pv9QSOs/FHXEBzpJm5EhFOpntEhFOpnHEhFOpn2EBzpJmvEhFOpnHEhFOpnFeEh/:3ySlXEzvkwOTwOhwOAEzvGwOlwOTewO6
MD5:	DFDB840045B3F138F0365E2AC4C83E6E
SHA1:	32F757C67E9FB5D3CFDB2429F4F38AC8980EAD6B
SHA-256:	450DAB75355B3C4260B581D796991AFA8D290A2FF37842E8B781FB799EB7B839
SHA-512:	895F1378C585906C0F5EDAE759B1ED6E70DEDC096E3716B9E04D2E252A01E08731756408E859599314F54B56ABE936B0FE8FC18E05681239179785196EADE3CE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<vmap:VMAP xmlns:vmap="http://www.iab.net/videosuite/vmap" version="1.0">..<vmap:AdBreak breakId="vceLzXyfISzNpgyo" breakType="linear" timeOffset="start">...<vmap:AdSource>....<vmap:VASTAdData>.....<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="3.0" xsi:noNamespaceSchemaLocation="oxml.xsd">......<Ad>.......<Wrapper>........<AdSystem><![CDATA[Ad System </AdSystem>........<VASTAdTagURI><![CDATA[https://pubads.g.doubleclick.net/gampad/ads?iu=/22888152279/us/aol/hp/dt/us_aol_hp_dt_video&ad_type=video&output=vast&gdfp_req=1&env=vp&sz=640x480&tfcd=0&unviewed_position_start=1&vpa=click&vpmute=0&vpos=preroll&correlator=1709508421517&url=https%3A%2F%2Fwww.aol.com%2F&description_url=https%3A%2F%2Fwww.aol.com%2F&gdpr=0&gdpr_consent=&us_privacy=1YNN&npa=0&ltd=0&is_lat=0&ppid=&cust_params=lmsid%3Da0a6T00000R2KYJQA3%26pstaid%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26colo%3Dbf1%26lang%3Den-US%26site%3Daolhomepage%26region%3

Chrome Cache Entry: 383

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.1474068528255157
Encrypted:	false
SSDEEP:	6:cIerK3VuUo8W0XuPtOD+Lba5+aIgUES8U0NIWeTPti7aVcd17rKQwkE+lallio:cIeSSRba4aHCH0NI/V6yQwkEaa/io
MD5:	B1AA5134D39C9A8C7DC8B40BC680E5AC
SHA1:	81D03C69A59FC76962FB939764DF8C897B6BAEFB
SHA-256:	F9397076FFFFBE7FEA8BF1A5B34BE8BB73B6EEE211C192246932B1852D05BD59
SHA-512:	F4A1B72AD6E1219AF6B8D0616FC5950C22F8496B086125F90514E6797E5AF335ADCBE6E75055BBA2B030C281E9970DB617AD1BCB5F26520EADF3D6D708CB973E
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ....................................................Q...........................................................................$.......................................0...............................Z...........................................................................-...............Z........................................................................................................................................................................................................................................................................................................................@@@.............@@@........................................f...............................................................H...$....MMM.....MMM............................................*.......................................................................E..................................................................................................

Chrome Cache Entry: 384

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	706
Entropy (8bit):	7.548477864749643
Encrypted:	false
SSDEEP:	12:6v/7gZbenw27lf9jGpJ9c7MMGt8d/su+eMmy87Gk1DoQWH5C3bX3/s:tZmmpJ9z89jy8qk1C5Cj0
MD5:	B12B87CFFDAE1BC42B921FCF2BD9CF4C
SHA1:	C707F3E68D75D36B21C4D11945EC0F104D0BFEBC
SHA-256:	F6747270DB8CA343F3A491FC790D6DFB6FB051723BC222566A7D292E6F4A8726
SHA-512:	D0FC28243CD89CE5EFE47A4E37C8F2EE293441CB3E7F71EF9690C754B3ECE0AAE42390E670AB0577F2AC781EC73C2C5C6C466985A5DAA0C23F27109CBB71F9B1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/login/aol-favicon.png
Preview:	.PNG........IHDR...`...`.......j....-PLTE/../../../../../../.....H.....k..............N.F.....tRNS..W.0.%......>IDATX..1O.1..Oc..&...0..'0."R...- 8..`...H...qUL....3..^.Jh.oq...\.......xu.a.kd.m.:.-..\+.+.yba...++H..bi{...X.6.v.#....%._ .[a.&.8d@...Y....q.@.2.8.i..9.P..y.Pr..2 ....0.k<.p.^..(.i....F.@.9.(....h..z..zt.e...@...zJ..d....@.....@.k..5K.nG..3..E.5=...-..0.g...........XuU.C...h.?......o.@...=D.?.....A.e.....#i...SMe..M.....uCh..6...uY...XX.....#...k'. L...w.v8g.$.02.........oW.<..k.P......0....'"..e.....uk)...I4.A.#.j..S..nr$..X'.6$.7x.W.O.;.-..Gjn..].{....Gi.Y.\|P?..B?.8.A...`O.8.n.h...b.d.....^.......&tZ.N..%>yE......./........U..2.s]...b9..w.C....IEND.B`.

Chrome Cache Entry: 385

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU1yltxlHh/:+/
MD5:	93841CECCA9DAF9F88E8018D5FE8B5D2
SHA1:	341414E62D98248DAC3E06ED5C820124E1615028
SHA-256:	F28236CF9FB53F0F4F4F35FAF320AAFAEBCA7C2F0679E6F13F8A4283EC5ED10B
SHA-512:	985F02B75B42A1DDC54062733FCB2CA8BAF8E624E3D9D780183068EA60881064914DC6B747DA77076FAFC4433B57D57BBA2D6680C8B76F8B9D89CE52C9D26195
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 386

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 387

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	70780
Entropy (8bit):	5.913539572311251
Encrypted:	false
SSDEEP:	768:FTay3ZkSD+b09mHLV8y5nk+JkAAiw9rjkhifih+OFCy:FmiD0BHJ8w1wFi3
MD5:	9892C12CC919CB71C7D2F411C307BFB2
SHA1:	089DB419A8C909CC64E2EEA31C32BC0D2A856BF7
SHA-256:	3BE35CDEA5B64C1520DFF22A650C0782EE5E71CDAD5F5A8A8DF4B296A48F2677
SHA-512:	64ABC830BFD25A0040DECD8B8580091E45F4F60395BF5A3BFAD837F302C1A72DC1657D886CED6D14FA463F0A842ADF8DDDBB0AA58A6C2FB36F442A92CAF4C654
Malicious:	false
Reputation:	low
Preview:	{"query":{"results":{"mediaObj":[{"id":"6eb22e94-b4f9-360b-9efe-9314028f9017","meta":{"attribution":"","description":"A Belize-flagged and U.K.-owned commercial ship carrying more than 20,000 metric tons of fertilizer has sunk in the Red Sea after being attacked by Houthi rebels.","title":"Ship attacked by Houthi rebels sinks in Red Sea","genre":"","embed_rights":false,"duration":22,"url":"https://www.yahoo.com/news/ship-attacked-houthi-rebels-sinks-075140381.html","thumbnail":"https://s.yimg.com/uu/api/res/1.2/zoII72XWtA6X45.L0mutlg--~B/Zmk9c3RyaW07aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/video.abcnewsplus.com/22d7c662f81ed7c72973c46ce5f31ce7","create_date":"2024-03-03T14:42:18Z","provider":{"provider_id":"video.abcnewsplus.com","provider_video_id":"107752708","name":"ABC News Videos","url":"http://www.abc.com","logourl":"","publisher_id":"7de8a6c2-ed71-345d-b8d7-ef4ce86f24fd"},"thumbnail_dimensions":{"width":368,"height":276},"credits":{"featured_artist

Chrome Cache Entry: 388

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2424
Entropy (8bit):	7.686691405441984
Encrypted:	false
SSDEEP:	48:A+LjdWMoZuMaPjluoOKrElS4PcKWrm2A6uktMfWtLwxBt/jx+BBahv3iC:A+3dWJZuMaPJuoqS4s/tKWKxLNmcJSC
MD5:	7332FBBF0729991568B70F28354AA9E6
SHA1:	3F64F465595039670E7DAA49AD899B1C3DBCC113
SHA-256:	5F3B0CFC8D982FA62C0298417843F0457549E72865C476689F6C9513344304F8
SHA-512:	55C2A349114E9534AEA0FDBAAF7F342B11A8A13A8507637F2C306041DEA32584CCA1F59E7F4AE20BF70211D3888A04434E6AB1566034FE16C5D51F9378D8B042
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FI6DaBWv57W5cAMSJrdUW0w--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2F76ers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=cae8d7c451f50d2dd6da30979cae9ae2c7f3e628
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL................................................................................................................................................................................................................k...L....n..u..l..m..v.....x.b...............z.......)........+.....F.......B..1..4...s....>.....d..Q.....................H..-........t...q..~.Y...p.~.....@kT.........r.C.....#..<..L....w..z..J..]..p..O........3..q................V.............'...{........M..W.....`......t....6............!~.Y..9.............\|......^..f...8f@...\|..=i....t...O.../..l..u...\........o..........;.......?........`..3b..........R....Mv.%W.t....v..........M&......l...^.......k..Sz.)Z.Ry.......l..~........'Y.e.p...Gq.......v......"U...Hq......q..[.....DtRNS.................K.{......y..@>.$I.....t.i'.o.U.e......E......O..P/.:_....IDATH..w\.G...."X.....Uk]........1....,.a..l.!K.....D%,...........]..P...{...ww..{.(j...`.N..N3.

Chrome Cache Entry: 389

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2131), with no line terminators
Category:	downloaded
Size (bytes):	2133
Entropy (8bit):	5.224475914038371
Encrypted:	false
SSDEEP:	48:lD582vQjIJCQj/bJCXlUr3FHEyElMEBvWlv7LTVUGRDP4h3kGAOzwHGBHsE+LsY7:mIoQHoGrVHE3mE+v73VB9Pf1w/57Y
MD5:	830867AAAFB0A3EF3AB2612A25B6A199
SHA1:	FF483C2631361611AD5BA346EAD11E5C5CDE4C01
SHA-256:	3664C38E377FBE3CE1FF49BFA91A1D613A794665F4D5FFC5022656CDD77A2986
SHA-512:	81F1874812EF09BEAEC09CA49B10663B2347D182515575DCEEDCE97E6961EF7D5C3C3B2EB72D8DF2AF36616F7339F790E1A1A26A84051C2D74159220DE79D6B1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/en-bundle-18.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{11:function(e,o,l){var t=l(36);e.exports=function(){var e=AolHelpGlobals.content.host+"/"+AolHelpGlobals.content.alert.replace("{brand_id}",AolHelpGlobals.brandId),o=AolHelpGlobals.product&&AolHelpGlobals.product.sku\|\|"",l={global:{url:e.replace("{sku}","homepage-alert"),show:"y"!==AolHelpGlobals.getCookie("helpalertg"),cookieName:"helpalertg"},product:{url:e.replace("{sku}",o),show:"y"!==AolHelpGlobals.getCookie("helpalertp"),cookieName:"helpalertp"}};function a(e,o,a){$(t(a)).appendTo("#alerts"),$("#alerts").show(),$("#alerts-close").click((function(t){$("#alerts").slideUp("fast"),e&&(window.document.cookie=l.global.cookieName+"=y; path=/;"),o&&(window.document.cookie=l.product.cookieName+"=y; path=/;"),t.preventDefault()}))}$.when(l.global.show?$.ajax({dataType:"json",url:l.global.url}):null,l.product.show&&o?$.ajax({dataType:"json",url:l.product.url}):null).done((function(e,o){if(e\|\|o){var l={global:{description:e&&void 0!==

Chrome Cache Entry: 390

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 59804, version 3.66
Category:	downloaded
Size (bytes):	59804
Entropy (8bit):	7.996299123384528
Encrypted:	true
SSDEEP:	1536:tZM7za1Nfdqi3iZjd8vObHJ6dWZWMcLUHKkZd5GK:k7zafdqfZvLZW9LUq+GK
MD5:	0562F972A5E554C9ED60EB863E15F215
SHA1:	88F7BBFA4EE3C95BB02C331D625988FF4979369A
SHA-256:	C636C7C3C3F6DBE62CEBCE73594C0B51CF5FA49F0F08B5721A8F7EF144A48394
SHA-512:	9E10034382B3164095B9E7C3D53177ECF343DF3B5489DC4D75E2EF621824AC89A942BCA18150EC084ECFA81F647E7FC359EBBA430E2BBD0C5CB7C88E2B0905F9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff2
Preview:	wOF2..................0...B......................>..l....`?STATZ..v..\|.............6.$..N..j.. ..d..j...[H.....y@.e:o..GE...(......1..#..................!..X%...0q.......Y..rDD..Y.Q...B...K,d..i..(..\+z..5.....Z.m).!i.d/......%.%.....dw.`.ll)+..C.E?...[E.dJ.;.)..`..m..%:D...A..7.b.:.d3......T...,.z..ex.7r..%....8H.<D...c3c....rr..r..s.d.bI...k...W.Et}/x.8P.e+..e.L...{t...q...:............m../.".C.....\..Q..%Y.......!..i6..?.n.o\|S;.! ..'.D...k..J..o.#.J.a.$...`.Ef.......;4h.k.*QlxQ,...b.)...&~D4.`bI./.Z....f~Lo.......m......=.......O.x5."...?../...W....J..,.....@..;...=..a.(.R.B..]].Y....U.......`.\.F.`.f.l.......H.()!.H.....^.7_........;.....We...... q ..'.;.uSf~F..=?...#.@.eL~.......X}Y'....W.IS..`2...6.....o.....m).&...B....h..a.......?2.uh...B~.h..s.y+.e....V....Uv/a...e.z........0..R.A.2f.!.......~.......Y..}D....U...".e.+..m....z.{z....v..jABQ9.9U.{..9&IJJ..J6\..`=.s.1.3..O...WEL".Z...].$M..).w.....28....<..t...H.B,.r...fd&.... ..4..iR..

Chrome Cache Entry: 391

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10804
Entropy (8bit):	4.481624126994836
Encrypted:	false
SSDEEP:	192:v6+WE7QxvAjShzwzb7M1/myAYUNNdZnvGuQTF4U:v6+Pkxv44q/EH10U
MD5:	2928664FE1FC6ACA88583A6F606D60BA
SHA1:	2F2FE1CBD0563B3CE3EA79FCDF1549ED244B3993
SHA-256:	A26FC5B38380272C92E9019A2EB8B45542A66814B3E2B203772DB8904B9FB99F
SHA-512:	7D6F8B7E54A4DA3CF81C767B4AA40C3B04BAFE35F2DD77B85944DE4442F0B1DD1A8EDA0175DEB4652CF055094ACDC0D4B6E38ABE51C52A3DFBF887481315B347
Malicious:	false
Reputation:	low
Preview:	<svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40">. <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title>. <g>. <g>. <g>. <path d="M110.13477,0H9.53468c-.3667,0-.729,0-1.09473.002-.30615.002-.60986.00781-.91895.0127A13.21476,13.21476,0,0,0,5.5171.19141a6.66509,6.66509,0,0,0-1.90088.627A6.43779,6.43779,0,0,0,1.99757,1.99707,6.25844,6.25844,0,0,0,.81935,3.61816a6.60119,6.60119,0,0,0-.625,1.90332,12.993,12.993,0,0,0-.1792,2.002C.00587,7.83008.00489,8.1377,0,8.44434V31.5586c.00489.3105.00587.6113.01515.9219a12.99232,12.99232,0,0,0,.1792,2.0019,6.58756,6.58756,0,0,0,.625,1.9043A6.20778,6.20778,0,0,0,1.99757,38.001a6.27445,6.27445,0,0,0,1.61865,1.1787,6.70082,6.70082,0,0,0,1.90088.6308,13.45514,13.45514,0,0,0,2.0039.1768c.30909.0068.6128.0107.91895.0107C8.80567,40,9.168,40,9.53468,40H110.13477c.3594,0,.7246,0,1.084-.002.3047,0,.6172-.0039.9219-.0107a13.279,13.279,0,0,0,2-.1768,6.80432,6.80432,0,0

Chrome Cache Entry: 392

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1889
Entropy (8bit):	7.695402676147266
Encrypted:	false
SSDEEP:	48:+xngVD5VX52u6iNKClFIOygHPnGWHOw018K:y25/twAI6PGWHO5
MD5:	04350280A37B2459937905A48569A857
SHA1:	7C1EAFAC8B52A4AB2262EF2E3F5E07F22CC350F8
SHA-256:	2A906AE89967F079BA6DDE71AA26DD05D89A913D3BD75F082800DC98319D9DD5
SHA-512:	EC7375CD29A8E4D4D303754B75C78CA855E0414DC65A26844BAF88724E0A4670EE0DFC4EC719629865B4D56A70E305AF42C54FFAE13394A62F56C6D618090CB5
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FaWeb9EeSRk2NKVma2xejiw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fspurs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ecb227b63dd07f6db6e9782edaa510816609967
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.....................................................................................................................................eqvoz.......\|..`lr..............................p{............................................................._kq...............~..............................lw\|..........................................................................................u.......".....KX_+<C..$6FO.!..'..#..&.(1. (\|..:KSWfn....$,"4<.&..2S`f&6>."+..'`ov(9A...->G..$.....1BKRai...EU\K[b8GN./7O_g7FM!3;.......,4hw~...]ls.....>MT 2:ky.....08cou?NUUbh.......0@H......+<Cet{7HO...[iop{.]io...grxr..BPWdrz.........09JZbFV^<LTHX`9IR...}........Udl4DKp~....APWgu}...m{.-=D{........z.....5FN...apx...t.....y..BRZ.+3$5>N\bkv\|HV]...t~.t.....jx.7s......tRNS....Y..9...TB..X.ry7.(L./E1...%................$...<.a....P...]mx.`..4....W......s.."..,..^.J....wl.......O...t.....q.....,......IDAT.....t...../i..w.!.a+0(+.......

Chrome Cache Entry: 393

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x100, components 3
Category:	downloaded
Size (bytes):	17102
Entropy (8bit):	7.921838134374089
Encrypted:	false
SSDEEP:	384:oyvb3JHytkaOxl4sJgXIHVDesYA6087L3JqQjBZGW+nStz0:EtkaOeLCtzGEqZGitz0
MD5:	4A5483A1A509AE238958EBE994BB2DF9
SHA1:	F6726E9427F4F79FFDC1BD49869DBAF04DDBFF84
SHA-256:	FDA19FD3BC838354E99DCFEB18235CCE6C7944C38E3658AAACB4E322726D78F0
SHA-512:	8FF18173D3F81DC33744A4CDDE1790557B8852947E9FF2FDF873BC30C297049897D78AEC4FD3AC4F11D407EFB622E0A41B87B0AC67D7112DA71FC9544C5614B2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aa/aol/aolHelp/aol_assist/aol_assist_320x50-lca-4274-2x.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................d...........................................................................................?.).............................../IJ....$..............................t.&n........$.....$........$8..............v....x....Q..Q7g`......*..!,.$.03.2..5.lo;.....Y.Y.t.......t.......}\|......#...W..G.._...XGJ.7gb..e0.DV.G}c..;.....>f...............D..`.r..zH..........:h.l....9C.......e..k9..i.U......vYk.MFK.2..}.a.N.:..K...\/w.F..&P%$B.b$.Js....../.....T%.?>.._.9.c.a\|......xy.....-...i.1.....q_/......o.M.\M.....\....P.k......k...-....t..#,j"n...-.mS/...u?.{...-Un......{.k..G....6..:...\|.\|...m..o..T.C...}.....}..v........"G..Mfx........}..;.{,....<g>.o.~qB......}...?.;..'.v..r..........K....{.{....}.C.t6..w......A.qo/.8...3JgU{.4.A +..._=.g..2.o)... ..f.u..r.....)...V......0......g@_+...v...F.......

Chrome Cache Entry: 394

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32020)
Category:	downloaded
Size (bytes):	83518
Entropy (8bit):	5.277567638444161
Encrypted:	false
SSDEEP:	1536:cgWi6svQSYLQvjGb2gXkeWXsoZYgjgMPrHMNLIJB6EUEwpoEmBsw7XSPZ:MaXsoOgBINLCF7d7QZ
MD5:	AA9A6DC056F54E67CA23C4DD89128C67
SHA1:	F6A236771E9F6EDAB8133D2D4529F2599F6B6B45
SHA-256:	4F618D3E0AB98FFB03F1D4FA86867478A38EA07FE058DFA6D660F744EDC7BE1C
SHA-512:	D4D802C81041BDDCEC6A19F189549D76BA7893BDBF2E834E70E6F33F7D846A7EB029950345801D112D90140EA92C3AAC425A9EE7B1B4DD4687EDFFDBE1C48B86
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/js/vendor/jquery-2.0.1.min.js
Preview:	/! jQuery v2.0.1 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery-2.0.1.min.map./.(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],f="2.0.1",p=c.concat,h=c.push,d=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=f.trim,x=function(e,n){return new x.fn.init(e,n,t)},b=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s*\/?>(?:<\/\1>\|)$/,k=/^-ms-/,N=/-([\da-z])/gi,E=function(e,t){return t.toUpperCase()},S=function(){o.removeEventListener("DOMContentLoaded",S,!1),e.removeEventListener("load",S,!1),x.ready()};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,t,n){var r,i;if(!e)return this;if("string"==typeof e){if(r="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:T.exec(e),!r\|\|!r[1]&&t)return!t\|\|t.jquery?(t\|\|n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof x?t[0]:t,x.me

Chrome Cache Entry: 395

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 396

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1022
Entropy (8bit):	7.435876359142679
Encrypted:	false
SSDEEP:	24:ztFSRTa0TF1hZYlWXwtlufLarT8D6ekbI1OlKnbHlatW:ztkRTaMf9urThdbIwKnjlas
MD5:	B6B5E2B6A90BFE4CD91C383B3D33EF41
SHA1:	38B15B05EC050D2792DEE60DD755E0476BF4CFD7
SHA-256:	C248A70B7B242A65D4220283205745C8712252C4FA6ECD5B5BD56F90B3057833
SHA-512:	FDEDBBC03387B3E011F777C5C2FCF04A0A65D77126A7D45D9DA57865AEDE771BE1215E1C7796CC73680BF4D7876A2E64EE41AAB06E28F819EE9ECDECC998B5F4
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......... . .................................................................!Ba.1"A..#2q.................................................!12Q..."qa...............?.`..\|..h..gH.o.1u.}..;.&>+......]....e......nWS%E.!..w<..)....Tz.Z...m]J...TU.I.f.n)S.E.!..t<..)...!.Xz#R.z..YR....T.d.7..;.Km."........B..A.a.5..w..j..7.c..._c...".q....".T.].....> .#A.(..f..........@"..!.f..f...s\|H.y.\EGIe+.Wv..#U6v.^./.X..?V.A.3.6.9.......g..x.^.....(y...x....^;.v..M.u.A.Vb..O....jK.SJQ.. .:.L...._...e3.@d+. .ac..s+.E1.m....@.Q.....G..m5Z......N......L.h+#..V.2?..#...y...t...j...T.............._=T..9+.....i.&(..!)....+F...b..>7#..UV.q....6].....\W.bN.A9.G....:.6..K..*...0Uc.#.......$7{L.R.i.!/.:...../.k)..?j~......#M.:>.....G.R....c..bD`.g..~.\r.[v....\..]....b0.X...aYnWS.=....w<uG....9.T{'H[.E#{-U....X.a[...m.Ox.<U7...?....~...

Chrome Cache Entry: 397

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1456
Entropy (8bit):	7.6287974519607085
Encrypted:	false
SSDEEP:	24:wP1PaoROPWxyQZL979dqsxRLqrTbDNqMRrMF+OOLUWeTY5q7UFrdePvi37lFi1Dm:VPZghnqOLEbDNqHJOnpzJ4slFi1DoKlg
MD5:	349DD56DE100C0B4F39353E016E1778F
SHA1:	E968AA3956ADCFA66FB767CCF90703B1BCBE8524
SHA-256:	D62AD6CA66B5B9BD179D0BB783638C2072EAF495150E1C8FDC718C2C45AE1671
SHA-512:	668C3E3C33C7D7B2439026F6902E993C0836FAD9AA691D76ECCE2D322065181EB9199DC190520DC1FCF8D072165BD8DCAFFB3772FABDF722ECFFD6ACA42C8E2B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F93412d20-245e-11eb-bfbb-1ba7d4a515e3&client=76f99bdb8f78cd44cc0b&signature=36aa3331b61a3ab35c58aca2ff4e86ae1c72c40c
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . ................................................................."Ba1..!#.Qr...................................................!1A.."Qa.B.#%2q.S............?...s.....ZPjM........\|.......E..a..a.=.{.]>..S&v..7.xmP..O.;......._%.2..Q...<.w..U@}.&.)..U.Em][..gr}.....f..{/@..-.... .~Y.$..Lk8...A&..t...f.T..@..'.Mz.F...{.?#..2.a....i...WA.\|..A..e.......:[.j5.f..;[....'....._E..f.gQ...{.c...).$..s<..o....Ec.Oc..0..S3...IbK.gb.1E....'.......Mp..YS+...K'..mA..F5$.~E.Z.Z.&.3CFI...mD.6b.7.......4......\D7.F.8....5C/.#..T.o../.....vhI<...nn../b..n..S.V)L.SP....:....j.66..@..1X.;..8..[o...B.R.$..>\.....u..0..M.]h..~...K].........O..hEs..D.24.....VI.!....d..P?.{..\|.K.{M..]ZB..%6...t:.@....Q..h(.+...TJ.:H.E...b.T...f_.........j..G..2...\|..4..[+jbd.$~.8#_..F...9Z.].@Ey(.....N.B......#........B....;..d.4[.."...."

Chrome Cache Entry: 398

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 399

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2304
Entropy (8bit):	7.626038296463054
Encrypted:	false
SSDEEP:	48:ZuuMRHUA3DpKX+4Epe5eYMnRpGxNYDTwsxD2esSILSGJvmkO:ZSRtDpKXJEpeTMnKy/w8B92Vmd
MD5:	6814B14222BFF2D882F811C571A57C6F
SHA1:	04D222B7F5B1E54F570233286FB057551F95AE53
SHA-256:	A76F0377A183E5D4336F954012B75E506595A6D36A127F118B2E564EDB3BAE86
SHA-512:	FEA5024D44F062DD356E87F59C93AABC91A1A86F31274C605D2BD2D08F8F5A3F047AB9F451D02C923E02FAF92F544BB80A46273ED3EC5974AAB42D5F02F1D9B9
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FpT1ZXTGXyk96vcr3fKHXtA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181129%2F500x500%2Fnets3_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fd7a4e9572597087adb989684c757629a308c76a
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.....................---.....................$$$..........................................................................................(((....................."""......%%%......,,,777............................................................000...&&&..................yyy........fffSSS999..................###YYYaaalll.........FFF..................@@@.........xxxuuu___UUU......VVV...rrrQQQ...LLL...{{{......**................%%%......eeeBBBnnn......MMM......!!!555>>><<<....................................OOO......ppp...)))......bbb...qqq.........,,,555&&&...^^^///......ddd...JJJ......RRRDDDggg......```......(((vvv...}}}......PPP...hhh...]]]............:::......HHH...CCC777...222...000............iiiGGGXXXjjj.............................ZZZ...zzz..._A.....YtRNS......-.....`!B.&.o...0{@l.I?..1cj5S.LE...O...h#...........~..x...p..Z..w>...9...........VIDATH...XSW....{....v..n.@BB ...I@F..)H.(S. 2d(2..'..g..T.Umik.}.e!D....r.

Chrome Cache Entry: 400

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	73
Entropy (8bit):	5.131136716206809
Encrypted:	false
SSDEEP:	3:OC0hNejBlJQ3i8i9gdRNdi6iktAoYf:OC0hNuBlJ9l9gd86ikyoYf
MD5:	71C9C633BA07DFECF4131A2955DBDDB9
SHA1:	A044BADB4E50792C5823C24567D25A65F682E04E
SHA-256:	C4F552904F7897092770D6DE471C9F95C473DAFCA1244A19C15FDEFDEE5F4CF9
SHA-512:	42FFFC8B48784B1D25B6BAB97F4FBCEDA688BB4588BFBD6F3D6C7E0A22C5D0985958CD906E79D48FD9A843831019290274055ED9901B335A7F41BF9ABF42AC80
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS&us_privacy=1YNN&gdpr=0&gdpr_consent=&gdpr_pd=
Preview:	TRC.getRTUS({"status":"OK","userid":"AKHXutl84PHhxfRSSpbFWE0J4hApAHek"});

Chrome Cache Entry: 401

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	331264
Entropy (8bit):	7.999474461293056
Encrypted:	true
SSDEEP:	6144:IXK3MncL35z3gjHrNC+vlKFuy8DFn4UH6s8ksIBs/kkAR8s/9d60WR:IXFsliLNfvkFgDF1CIBs/kkg8c9/WR
MD5:	631A622DB89B4D56C4C9CC7938516EA5
SHA1:	04A8031E8F90CD664713E6B5BB11970B9926CA40
SHA-256:	337612D2394929DA57F91EFA7A7D27E252A6886ECE0B00453726CD3D8A0CB85B
SHA-512:	DAF42272C3B6BEF5D22A8C72955D2A306C4339301641B902C60E41E01D3A91D6911EA66109FECE5C253D0BE84FEE991D32A0F339A7BCF917E499F2E7D532DD81
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment2.ts?akamai_token=exp=1709530992~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=7534bc794ac65c76a4c3cd4d86ac72de97dc36896cc1e4fb92e407fe51e1d398
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|Z.X.V....%..._..I......../.....G....-.+..h\8.F.6:z..>W.......)..9X.5.........I.h/D0\.=$>.Dj3.......a.!..v.\.......Ar....}T{r.1.$Ly.I..%\|8U...p...ltv..$^L.~.\.6.;..H..~...4...W.m...:...lp.ILy....2..bD.........e..c)G.G...GzQ....MY."_?......:...cS..k5...&...."O..U...fWu.]Pm..lc<OX_..zy.3.Z.....Hj....6.....smk..u8eb...:1..f. ..VE..!S...]..:m..UlCT.......}....[..V2.........`!.I.2..>.'..!.L...K.:..umZ<....f.x....bY>......).w.M.L:..W^.:H....<.y..N..O.m[......`D.y.C.......".Q....Jb.!vl.Ah...G#R.1h........p.]u..d.QI.+..].E._.!M{...y.?.j..B......2...g>."..l=0..p:........K{.D...Bh..9..u..~....8\|..

Chrome Cache Entry: 402

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1610
Entropy (8bit):	4.450000121721485
Encrypted:	false
SSDEEP:	48:KvNVfPDHA7jFAcfuskBf8FBelRVbJtmSoWYE+Nea:c+alfUBEbnXLYD
MD5:	906BCFA05AC8220646AF66FDF5AFD923
SHA1:	B843FFF08529CF9B24FE1737C8BD19BE16D4EF55
SHA-256:	C1780EBD4831E53AB4C3963F90D7036EA5E4F7A0A2B7ECC4697B930ED6AC3B64
SHA-512:	FC770D7414AF42EF92586C319B1447C0A8C35317B883BE009DCB493FC6595A5291828FF2CF96ED21005428862F8583EBF2A02D216161AFC7258F4EDE7D38B27A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/icon-envelope.svg
Preview:	<svg width="64" height="54" viewBox="0 0 64 54" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1_316)">.<path d="M33.7667 0.673263C32.7899 -0.224421 31.1747 -0.224421 30.1979 0.673263L0.407579 18.6455C0.154947 18.7987 0 19.0716 0 19.3663V51.2349C0 52.6884 1.18905 53.8724 2.65095 53.8724H61.312C62.7739 53.8724 63.963 52.6884 63.963 51.2349V19.3663C63.963 19.0716 63.808 18.7987 63.5554 18.6455L33.7667 0.673263ZM31.1461 2.06611C31.2051 2.03074 31.2573 1.98863 31.3061 1.94147C31.4863 1.76126 31.7255 1.66189 31.9798 1.66189C32.2341 1.66189 32.4733 1.76126 32.6535 1.94147C32.7023 1.98863 32.7562 2.03074 32.8135 2.06611L61.8274 19.5718L40.8101 32.0956C40.411 32.3347 40.2796 32.8501 40.5171 33.2509C40.6754 33.5154 40.9549 33.6619 41.2413 33.6619C41.3878 33.6619 41.536 33.6248 41.6707 33.544L62.2737 21.2661V51.1726L33.7718 32.1983C32.8657 31.4758 31.0872 31.4758 30.2417 32.1562L1.68084 51.1642V21.2661L22.2838 33.544C22.4185 33.6248 22.5667 33.6619 22.7133 33.6619C22.99

Chrome Cache Entry: 403

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x627, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	117906
Entropy (8bit):	7.998142288856869
Encrypted:	true
SSDEEP:	3072:vLSF+BBZtHB5wtEvO8cQVv6X9kOd01EXcHBOtlid:vLSFgBZtzIUz0ym01EXOEtlid
MD5:	8987B601123FE20C6F821FB4BCF4C22A
SHA1:	652CF53740816C5F31ED4B796FB71E8793E8E9E2
SHA-256:	C3E13A4B538906264EF3C91C30807D07045D36AC592EC69E83467F88F56E319F
SHA-512:	C9A71CF6A8AA51F2D83B7A7E8B14E827554CF97FEE2A9C9FA51ABA9DDC18675A8A73AFB090844753527C751877AB2279249547B75B309791143AA083C0475117
Malicious:	false
Reputation:	low
URL:	https://de9a11s35xj3d.cloudfront.net/8528a8ca9f4220ae15851111192c47cd.webp
Preview:	RIFF....WEBPVP8 ~....Q.....s.>m0.G$#"((.;....MvU.j{C.>.VW....k..A9\>bdzG.u..yDs...~..y.._`-.N........<...z"~......D..:..W......~y..U_.x..^s.Y....._.......z....c.......Q.._....h..z..z..\|E.a...........<.\|....}...........i.?.......?.B.s.....m<..k./A....zd...t......\|~....7._..........'.o..J_....T.."....RX(.9.63{._...C.#$...~...?...8.Bi?.j..c..D....3}4v...D.(.#....T..a.... j+6A......P...D=;..hsGw..j7.......1...O...X.xeZM.?.......".^......!p......N.X]...<t(a^..g....o..#>....e.G...#.d{.9 u.1..W.....J.['.sq.Y.....x....(.......{.x[l.@......M...;..g...O.Yp.,.Y.M.....>g.!h.=_[...,.l.....0....j......_..{......xY....57;.6Y6.0..4..a.GO.qI....<...e..U>..._.8.....8.CD.IP"...m.S...Y/..._L...........Q...9N%V......L.[...... .v:Z\yV..i...t....W.....IrT?...C.#......s.q.....i..e>...E.1.P.:...=.........Q.{....G+b<7..o].+..B..{oa..B..1%.A..M.....q..\|!{f5"!....J%.m..$..z.t..:..=.49h....t...d....".]..O...~.....6.8..RC..98.9..[lR.......#g...G..]}.b.`..

Chrome Cache Entry: 404

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.084397602825299
Encrypted:	false
SSDEEP:	3:YDjW/ZKMECHk0wrVYY:YJCE73
MD5:	DDBB520196A37231FF01B7E4EDC043D1
SHA1:	8EAC9A6736B92FF3B6AFA015C5AD72E72509A2C1
SHA-256:	4F14783ABA9A9A5E9EECAD542EAD940EF7B74A1993CB683BE7658425C0BA8B1E
SHA-512:	2DE69886C8A0B4CB457E1F85B657CC2F8D4B5210F5F520C153E95FEFA43CC7EFFA6F2CEB150A847D57194DB4510BE95908859E95672B9C13575139F4C4393373
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/site/features
Preview:	{"features":{"chatbot":{"enabled":true}},"evaluate":{"logString":""}}

Chrome Cache Entry: 405

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 406

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11982), with no line terminators
Category:	downloaded
Size (bytes):	11982
Entropy (8bit):	5.372108342522858
Encrypted:	false
SSDEEP:	192:cfNZOG+6X+rWDkfiU6Bam47AxdarfqnnM7r4UXN1dUUKKKmL2KPvoees2cLcKcZp:ibbkfiUEam3darfqnnMHrXNfUP1mLPP2
MD5:	2412A31A1965E3DC7B437756195BCE76
SHA1:	B6F2127A39DEE40F4DEC2613F2B6B7BEF7744710
SHA-256:	937740B146062922D24337A0E640FF01802096B108A5C74197BFB61EF8D5BE3A
SHA-512:	42D5D13EA63DF40C775D17256A66AA7C8D0AA29FE5E84B136448E5D1C1FAF1608B9DC19876250B01FF1A8EB548DC5122784BC8A51D17B2C03FC5D92DA0368792
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/plus-store.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.plusStore=function(t){"use strict";var e=function(){return(e=Object.assign\|\|function(t){for(var e,i=1,n=arguments.length;i<n;i++)for(var o in e=arguments[i])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function i(t,e,i,n){return new(i\|\|(i=Promise))((function(o,r){function s(t){try{c(n.next(t))}catch(t){r(t)}}function a(t){try{c(n.throw(t))}catch(t){r(t)}}function c(t){var e;t.done?o(t.value):(e=t.value,e instanceof i?e:new i((function(t){t(e)}))).then(s,a)}c((n=n.apply(t,e\|\|[])).next())}))}function n(t,e){var i,n,o,r,s={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return r={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(r[Symbol.iterator]=function(){return this}),r;function a(r){return function(a){return function(r){if(i)throw new TypeError("Generator is already executing.");for(;s;)try{if(i=1,n&&(o=2&r[0]?n.return:r[0]?n.throw\|\|((o=n.return)&&o.call(n),0):n.next

Chrome Cache Entry: 407

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (339)
Category:	dropped
Size (bytes):	5090
Entropy (8bit):	4.9361443188183065
Encrypted:	false
SSDEEP:	96:LlOKGaOtTcOnGaOxqO3GaOBOaGaOtOqGaOIOHGaOmO9GaOuCO4GaO6QO4GaO8O9Z:LGnGhGrGPGdGpGUmG80GvGQoG5GjGgGr
MD5:	ECDEEC1862EA8C1A1E829F8E74609CE2
SHA1:	CBD391CF98DCC2CD2F63AF446BAEB4F8C573BE0D
SHA-256:	54F04748BB99E58047E848EB483B221896613DAB5D9B2B007BEEA2348EB77CEF
SHA-512:	CB2A533643F1686E9446B980628A5DD2B9D9D6F608CE02A3DEC321B457BC903017964780E49BF2FB990F4D9EDE8255C4DE7866DD4B900E1DF29021033581F8A4
Malicious:	false
Reputation:	low
Preview:	WEBVTT..00:00.000 --> 00:05.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/0s/match/image.jpeg?akamai_token=exp=1709525911~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/0s/match/image.jpeg~hmac=49f4f3412dd4970f86de205cca29ca5a4925bdeaa933df41ef5ae95e67ab6987..00:05.000 --> 00:10.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/5s/match/image.jpeg?akamai_token=exp=1709525911~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/5s/match/image.jpeg~hmac=2e4811dd42a642ac7f945b3d1996db60cf998de13d9e3e28c81456dbb7498f83..00:10.000 --> 00:15.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/10s/match/image.jpeg?akamai_token=exp=1709525911~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/

Chrome Cache Entry: 408

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	159581
Entropy (8bit):	5.47421261332528
Encrypted:	false
SSDEEP:	3072:flpNCgZCIRWPAcPN3Mpcqc2uzDRyxXE0AJH:NPCIRWocl3MpdcnEy0cH
MD5:	D4437107AF61D80FD90F57A0808FA483
SHA1:	9E61CBA7C7F499197A2229B3431D8C76D7F52303
SHA-256:	4FA81A2BABD7AC6C723E36071474FDD0F043616D012053410A6AFAEC2D96513B
SHA-512:	AC6356DB085D25633D2750978AE9D4F633F697A3A1E2CBB76D6AF9E724EEC3458F2AFF11A432C60595763593B582978B0246F500E743C01820B2208B422A4547
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/lib/comscore-6.3.5-min.js
Preview:	!function(n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define([],n):("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).ns_=n()}(function(){return function o(u,s,a){function f(t,n){if(!s[t]){if(!u[t]){var e="function"==typeof require&&require;if(!n&&e)return e(t,!0);if(c)return c(t,!0);var i=new Error("Cannot find module '"+t+"'");throw i.code="MODULE_NOT_FOUND",i}var r=s[t]={exports:{}};u[t][0].call(r.exports,function(n){return f(u[t][1][n]\|\|n)},r,r.exports,o,u,s,a)}return s[t].exports}for(var c="function"==typeof require&&require,n=0;n<a.length;n++)f(a[n]);return f}({1:[function(n,t,e){var a=n(24),f=n(26),c=n(36);t.exports=function(t){var n=this,e=!1,i=-1,r=null;function o(n){i=n,t.t().set("plannedFlushTime",n+"")}function u(){t.flush(),o(-1),n.i()}function s(){r&&(c.clearTimeout(r),r=null)}a.extend(n,{start:function(){e=!0,!r&&0<t.getCacheFlushingInterval()&&null!

Chrome Cache Entry: 409

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (958)
Category:	downloaded
Size (bytes):	13114
Entropy (8bit):	6.029119842330019
Encrypted:	false
SSDEEP:	384:wSBGzQ/SGNG7zGcvGjGyUGdxGxGcBGgG3QGMMGf:wue
MD5:	2F84EFF6630C28842723B841E9085035
SHA1:	BBDAF31D3F40797A19CB7026CAC8E505135588F7
SHA-256:	EB1DA77FB27DF9EBBAC815F456446D7E0C7915106B24ADEC65B8E5CB03311AA5
SHA-512:	17DD1D4FD7F6DFA509835604E57048BF10FEEA05685A557E8DD2EF95069B9137432020461EE27B92C7E5F21E235674C5643F10994BE644B917C4EFA92C02F12D
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/6s/master.m3u8?fastly_token=NjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/7139b460-ef2c-4a3b-a845-c37a669ecaf4/6s/rendition.m3u8?fastly_token=NjVlNTVmNmVfZjY2MzRhY2FhOGFjMzg5NGEwMTA3NjQ0ODVjMTM4ZmYxNzVjN2ZlMDRjZGViMjM3MGVhZmNmNmVmMzM4MDk0Zg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ".#EXT-X-MEDIA:TYPE=

Chrome Cache Entry: 410

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6928), with no line terminators
Category:	downloaded
Size (bytes):	6928
Entropy (8bit):	5.148664224823871
Encrypted:	false
SSDEEP:	192:3eIuADK8v5xzWosWjYugPwNC96vTrWJcXux8jVi:34A+8nWofjYFPwo6vTrq0ueQ
MD5:	0F944C1DE0DC49C3BC3219D06247AECB
SHA1:	240976E15301D96A1E04931306118458EDA475B1
SHA-256:	2B3162B9D90EA855E1D140D94062ED56FB3B8D98193F1F37680F864320D481FC
SHA-512:	7A898E788820E30E86D8047EF15EC2F00B49329274D63D0C9C200DAFDE2774DF43D56E232F706D809454AD51C1BB0070D2460C653CEA4089ABF16D049F290D22
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-image-1.4.0.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-image"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(r[a])return r[a].exports;var o=r[a]={i:a,l:!1,exports:{}};return e[a].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,a){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/controller.js":function(e,t,r){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}fu

Chrome Cache Entry: 411

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1404
Entropy (8bit):	7.67850165316399
Encrypted:	false
SSDEEP:	24:ztFCvh6PTnW1ruQYs2tAY78gV07zMipHQ34Q5Y1zKx5Cid5kdCaxS/3:ztIp6PTW1r1fLgV0z1af8Kx5CU6u
MD5:	8E9F49D1E5A7F4193370BB3B1571436F
SHA1:	9CD58D6BC2A21BB0372FB6DE1631C9A1F3793F11
SHA-256:	C39EB466362E8BA58E526788E3DD4F6E33145BBA19D021B0C14472510A8CC9E9
SHA-512:	9A25A2F51391F69ED7FFECB4554F89A910EEB50028A14581D01E2FC1158F752321ADD2A071EFDF86F3E8F3165AAEC5F54D3A898343CCEF37473B71D270E6576A
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................................) .. )/'%'/9339GDG]]}...... . ...............................................................!A."1B.Q.2Sa.................................................!..A.1Q."#2aq...3BRr..............?...sw]-.s..+<.Chg.a._.<.....K...AZ>....\|.Xm..>.O....1q1Q..N..#...('d...L..\|.....^..o.{....p....C...$....#U.\|.B.l..iK......}WW...A...u....^....}..=4'..!.D.Q_i!....X..>..O..6.........#..[...+1.A...;......U.6.........\|...O).....r.%..a..\|lw.n.).I...s.D..j..[.......b..6._..deF.F.{.%..On....Oj.r..Y.x=>4.x......j.<5......G...c.....D'.Lk....@h.....O..z.....;..z....C..yb......PL...ek.$:.....(..&#..x.......R;T.P.[Y(...<0..k...[....^.H.....9Z.....\..-R.G....}.Bj.m..8.S.e....nc?.....TWJ..;..(uG..y..{e..Vd..j....to.#\.&mv.8...12...... ..Lu..Jv...7.DT....p.....@.\|.:7.T.PY.{..N.r.s`et..).h.-.wV.s..(....O...={,.<\1.p:..}..T.m.m\....q......r...

Chrome Cache Entry: 412

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2532
Entropy (8bit):	7.853709439739501
Encrypted:	false
SSDEEP:	48:YHnrCpFpmvXumB9BU6QTPyODrMOm6BuaJ8lkAk/:YHrCWglPyqrMOm6YaJKl8
MD5:	E416CED55EBB3D5700B8BA1DB47AF2C9
SHA1:	1894FDF6AFA40BA632171F600418A68375F83502
SHA-256:	D6237333BAC7639756FC1709DE1E3F23C31C6C022D548A4D99FE4539B69F87D6
SHA-512:	8C91AE51241CBB827AE99F22318BBD3F46054C99DE8DAD421FF2F2D34962C06E64E7E4F96320FB0F55964C3F1570755AA3902C4C343E3F996B737769D8355534
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...}................................lw}dpv........................................................................................ams..........................................................................".S.........#..'.S. 19..&.+4!2;."+..&.....$.8u.!7..9IP.?...3./8..#R`g.?G>MU)9A.A.. ).$-...Yho1AI.&Dgu\|..Y......Q..)2$5>'7@v..M\c./].1a.(L.R..OIW].:y.6qXgo.?......$......Ucj.-6...FT[AOV......}...G.^kq../....O.4DK....;~Ubh@PX.M.\in......Wel2BJ.......HW_DS[\|.....JY`....'0...anu...my.y...'H.1d.D.\kr.>..B..+S.#<;KR....E..%-...dqx....I.......FU]...LZa-=E........n\|....p}....~......N..F.....J..3h..-....,V....4j5FN...CQY............s.....jw.......;D...#4<....5m....C.q\|....+Mp..........x........u...&/jv{........'>....P..=c.......#2....+Q...ZgmQQ....EtRNS.E..%....^.......n....F..l.;.y.@.....W2b{.i.........../KJ7...M.....q...NIDAT.....\.w...?.t.j......]..\|..7..pI.....#"K 2e........Q....-n....uY.^oz..M...>...9.....O..o..In..

Chrome Cache Entry: 413

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 414

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4320x2001, components 3
Category:	dropped
Size (bytes):	220644
Entropy (8bit):	7.4922394465336195
Encrypted:	false
SSDEEP:	6144:0j5ZNX5UozYYw02cQaVC1+oSPmpK0Flzbj:c5XmOt2cQak1+oScfHj
MD5:	5A95D24B01BE9778D52D54EE6903AFDD
SHA1:	CC74AD3BD163440F226D8CA19029BB45F345A4C4
SHA-256:	A7B5CEEC52E126CD2C8EE231195E0A95E80210C388C4FCE85237E1F89E8B5E66
SHA-512:	110D37BEA235C6630FA752788C8388B765B7B9D4FA85CE07604117F2DDBB95DF569DFF7D773CAE2FB4A1F780EDCDF50085EB636A615C5E48EDC481B6DD70CAE9
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................ .....'... .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO...C.......&..&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO.............................................................................................................................................D........B......... ........P..Q@.(..@....E...@.. %@.. L.P...P.T...R.@......!.B., $R..)KT.A.*.....P...@..P...........P...............................................................................................................@........ ...@@.......... ...P......$.....P..... .@@@@. . ..P.T.....@......!.B., .)JR..M....JP.(..A......Q@ .. ........@...........................................................................................................D........P......$............E.-P.............@PH.... 2..B....-...J........B.. ".....)MU)A.Z......-...PB...P.......P.@...................................................................................................................@...%.....@B

Chrome Cache Entry: 415

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1693
Entropy (8bit):	7.182295722430782
Encrypted:	false
SSDEEP:	24:jYTt456GaT4Gq1zA+WGTZgNCaNqvd8D8rzqhmWAWCrH13d9X+/g/PNr:8e5aT4pbW+1qDemgfWOV3d9X+/iPNr
MD5:	02657A57715136E73DF932A1BAAB26E7
SHA1:	ABE661E09BBFF147CBC84763BFDE488CA66CEDF4
SHA-256:	48F43FCD4624CF3267E0860FAC6C83CD294ECD19CEFFAD964AEECCF901E101CD
SHA-512:	3A8036293466BEC2701831AD55814E74410AF9C5FBEA0F48D369E9916CBC81B270958829733B1BED1B15C397F34B9EA07F68D7AD4864DEE3D9B5E343ACCBFD78
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh7O7IoQNTNmxvnzos4Dk_Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20220917%2F500x500%2Fcavaliers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=62839313912a33febdf193b8cf596ba44463a379
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..Z..Z..Y..Z..Z..Y..Y..Y..Y..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Y..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Zq$<..Z..W..Yr%<.<B..Zs(=..Yw.?y2@v,>.fM.JF~:B.KFq%<..Z.RH.PH.}Sz4@..U.`L.{S.WI.lO.\K.QH..U.iN.nPt)=.YJ..V..X.[J.MGu+>..Y.]K..Z..T.uQ.sQ.gN..X..Y\|7A.rP{4@t(=..Xs'=.zS.FE.~T.bL.\|S.qPw/?.^K.aL.wRt=..Tr&=.@C..W..V.EE.lO.UI..V.GE..Uy1?..W.VI.kO.=C..X.>Cu>.pP.TI.hN.eM.ZJ..Y.LG.nO.HE.AD..X}9B.JF\O.:...wtRNS.................o/..!.`&.(..>+.E..c...~<..M.O}y.ft....d...2q....km.....7.....e..5U.......]AaKl.;.#....I..Z.Y..w..Wz...MIDAT....ecSg...'.....R...1.pw..;..#mRww.j..p.......I;.s].8..}m.V...jz..4!.....V..H3..5.Z..?.....n..0.V.....P.>......B.J.._gGv...o.o.d...-7......V.f.o.=U..

Chrome Cache Entry: 416

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (831), with no line terminators
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	5.621395104202739
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHSDWaBJo1DTFsWrZzpdBTiUMGT2IWSBWXTPVTASTA309bD:hMiRO9xDb/o9FLrZR8G9xqAYAk9bD
MD5:	3630B4FC5E6991330498C5509D4A6325
SHA1:	C75CC77062F85072459443DC77E2FCB9DEEF7F02
SHA-256:	E11433BD733F2508716E53AFAC1987AE9C2104B37CDFCFAB181F7B130F98D124
SHA-512:	CACEC02AD7F2CA5319C93EF5FA8EB2285373C6A3731F65BA6F04EA3E5FA1B1CDF33A002F79015C02BEC777B9A3E7833F2BA0B4027A7CFC14120CD15A90BE46F9
Malicious:	false
Reputation:	low
URL:	https://8867627.fls.doubleclick.net/activityi;dc_pre=CKWH356f2YQDFQ0SdgYdYtwNUw;src=8867627;type=yahoo;cat=afaolmal;ord=6208305308593;gdpr=0;gdpr_consent=tcempty;npa=0;u1=hashedguid;u9=ad-free-mail;u29=aol;ps=1;pcor=737013112;pscdl=noapi;gtm=45fe42t1z8860054492za201;gcs=G1--;gcd=13l3l3l3l5;dma=0;tcfd=10e44;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-NB4W2NQ%26cat%3Dad-free-mail%26u29%3Daol%26u9%3Dad-free-mail%26u59%3Dmbr_rusacqdsp00000691?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CKWH356f2YQDFQ0SdgYdYtwNUw;src=8867627;type=yahoo;cat=afaolmal;ord=6208305308593;gdpr=0;gdpr_consent=tcempty;npa=0;u1=hashedguid;u9=ad-free-mail;u29=aol;ps=1;pcor=737013112;pscdl=noapi;gtm=45fe42t1z8860054492za201;gcs=G1--;gcd=13l3l3l3l5;dma=0;tcfd=10e44;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-NB4W2NQ%26cat%3Dad-free-mail%26u29%3Daol%26u9%3Dad-free-mail%26u59%3Dmbr_rusacqdsp00000691"/></body></html>

Chrome Cache Entry: 417

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	105664
Entropy (8bit):	7.998319767211361
Encrypted:	true
SSDEEP:	3072:p7495IQdD1wqrbQPy7I+/vw++62zZciYDemsK+ki:51QdD1VbQKEYwx6ucNqmsK+7
MD5:	4020D454C7567964A0AA28E018662AD8
SHA1:	3C5D065F6E212D7B8B31C4EC774A7AF2B5F8D751
SHA-256:	F1D086F313CC7906355C78B7A4B904991C3B15820A4C9498DEE21E397DB97B54
SHA-512:	BF9F4471F76F893FB18F5984AAC0F7D93424B09AB4DE13A2141CE183B35EA8ED1D9B280E016F5F6D2CC40A6162AA4768001C0E3EC81AB1B5260A06873D990FFB
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment2.ts?akamai_token=exp=1709530988~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e8b40a2463d355aee79ce16d02f266fb895828cb22f6586733f56f035b643b4a
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI....I...:....0.........d.?V.2.a....'{a+.....<.......E.^.....o..k\d6...(..O....DxP....y..............f.T...F....F.......G.K/~&.0.`J..X.W.u..0sd.5h.o..3..!G[1.7....y...F.....R.78...#c...H.....T....U{v.fd.H.`]........`.kn:..E3Ec.[.......)z..............z..7..N.g.P.6,..x..)...[......qL......@/W..]..v]...}..w9...qq...`Q.....(.R.k6.s..W.@.G...E,...X.;..k..V.F..O.Tk..a...%..h..B....E/.T.D.y\.=.I.$.z^..K.....#..<O..f.c.Z.\U....x!.S.....Lo.n..n^).. .O#.\......j.....6..e._...a..&g.....T.....+j9.[.[..g.........{...6.]I.....G>qD.......pb..3*.2.eh.....AK..6..........b...4..?.......h.l.bB.....

Chrome Cache Entry: 418

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	16069
Entropy (8bit):	7.963712910703553
Encrypted:	false
SSDEEP:	384:YPO3vNbHQjPaBZ1eh6CaK8h/UMR+6puH1vPT0T:uAH4hj3QRYOuHRP+
MD5:	A9FA7B76F564084F40F7D86426BA579A
SHA1:	EC361E84122B70D4E52C1119C34C25E393C61811
SHA-256:	2045815BD829B8A19E11EC1FCBA3E1F36A1FB41CF33CDCDDE8F52DC94FC23D7E
SHA-512:	909CE90F8DF8698A7A0E44F917F609F6C660D3F9F4D0C1EE53E32B886A443CDC99BE7318EAD3E7241F279A3228D0F26FD25E326FA65DA1A90ACCAEF11BA8F66C
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/1m5s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/1m5s/match/image.jpeg*~hmac=2c2e256dac26ac65ac1aee1d15b0bb631202db9059897c082670b4195c0df7eb
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE..........."........................................K.........................!..1."AQ..Taq...#2.BRSU...3b.$&5DrCds......%4u.........................................................!..1AQa."Rq.......r..............?..........B.......Q..ML..x'k.n7.+l.vC#p....O.Hje.....V6c..D..{\ZK.2....&TH.D.2i.a=@.@...........5.2f..6W......J:v:>.Q.O...GK.:.g......B.d...0..4....7.H.k...n.K.P.C...G3.a..8;c.n.......m#1..I.'.....F.............PR.g........AR.i+`....6.'.-.?.D........F..Uu.(..P..d..0....s6..B..k.v...W{...>..".^...SQS..=LSHf...s...j{...J.#3..A....p..}a.7=.PI..5QT...ZO..[...i.z..V.Q..=...'.c$.5Y.X..U...-/....$.o..e.`9...Iq.x.h$..7v..r.t....!..~Wt?..L..v...Cz....2..\|B...O \|.:3...U..R.0;V26+#]<.(Z........c..r7C%..53....1.=U...h.....d.s.=.... n.-=F.>A.}e.2..O(.y...ao...-v...u.x.un.q.z}...G.........vv

Chrome Cache Entry: 419

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2510), with no line terminators
Category:	downloaded
Size (bytes):	2510
Entropy (8bit):	5.242682996099881
Encrypted:	false
SSDEEP:	48:ctPP5QNnKytD0EI1UWaz7ifwmfwDOArBIiakg0NRwJQ2N:ctPWs6dWaz7iImIDOArnakjAe2N
MD5:	6CEFAF323FEE4DAD1037AB5B6CC87C3B
SHA1:	BBDB432E8AF5560E702FFE09BE7C23687C35902C
SHA-256:	307A10D8C3D4498F6AFE747B3DE7173A6660D4FD9480FB924865B2F1ACDEAF8F
SHA-512:	F79783FF0E30A7364745C40B7D938475AFE8226A0C95AB5D55BB699E38CB82C0CABB45FF3959A1E7C8AEE0D626B177A216C31DEE2EB0C64314E08D0A443C0755
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/faq.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.faq=function(t){"use strict";function a(t,a){var e="function"==typeof Symbol&&t[Symbol.iterator];if(!e)return t;var n,o,i=e.call(t),r=[];try{for(;(void 0===a\|\|a-- >0)&&!(n=i.next()).done;)r.push(n.value)}catch(t){o={error:t}}finally{try{n&&!n.done&&(e=i.return)&&e.call(i)}finally{if(o)throw o.error}}return r}function e(t,a,e){if(e\|\|2===arguments.length)for(var n,o=0,i=a.length;o<i;o++)!n&&o in a\|\|(n\|\|(n=Array.prototype.slice.call(a,0,o)),n[o]=a[o]);return t.concat(n\|\|Array.prototype.slice.call(a))}var n;function o(){for(var n,o=[],i=0;i<arguments.length;i++)o[i]=arguments[i];t.store.debug&&(n=t.logger.tag("faq")).info.apply(n,e([],a(o),!1))}function i(a){t.dom.applyFunction("#".concat(a," .").concat(n.TOGGLE),(function(a){t.dom.getElement(a,".faq__question").setAttribute("aria-expanded","false")}))}return function(t){t.CONTAINER=".faq",t.LIST_ITEM=".faq__list__item",t.ANSWER=".faq__answer",t.QUESTION=".faq__question",t.TOGGLE="faq__list__item--colla

Chrome Cache Entry: 420

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2487)
Category:	downloaded
Size (bytes):	23094
Entropy (8bit):	5.49319712411738
Encrypted:	false
SSDEEP:	384:k5SYT18ljxDQ92dnZNaaYMSkT3yHI7YybBosxsM/TSOLmfmKzy4zl9WylRiRrAN4:+S81UxDQodnZNaThkT3yHI7toQ/TSOau
MD5:	C09B306B19B1F0FAF7E86C43181A9274
SHA1:	F937B42F7F9CE6A8B21AD5311B591A7F83DD0B8E
SHA-256:	8A33861CDC370B2DB8442132658B06069640881BC90F369FECA9B30C77E5F460
SHA-512:	6F7616126F5CE9821C1D178DFD9512BDACB0FF2515E5B5AEBA63C2EEF8B4165F2DB8015B9ABCD2AC03ADCAD33B577BCE92B176D58CC220E2480F728E423D630F
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240228/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};var ca=aa(610401301),ea=aa(188588736);var n;const fa=m.navigator;n=fa?fa.userAgentData\|\|null:null;function ha(a){return ca?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ca?!!n&&0<n.brands.length:!1}function ia(){return r()?ha("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ja(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!q("Android")\|\|ia();ia();q("Safari")&&(ia()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ha("Microsoft Edge"):q("Edg/"))\|\|r()&&ha("Opera")

Chrome Cache Entry: 421

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4314
Entropy (8bit):	7.486643886358984
Encrypted:	false
SSDEEP:	96:/nknmWIPuGc/ACHKH4SHxosNvthKOh09bngwaxYyKO:vknTGgqYSJhjnwaxY1O
MD5:	F0D2BA5C63AB03F3B53158F293F651C7
SHA1:	600E7400BC2DF013B93550486DB7889DCF9D2277
SHA-256:	D0ECAEA4F4B91A678F16B572DBE3C9DC7212D1437A97A31F84AE74C167D5A4DB
SHA-512:	9E58C6DFAC93CED5CA727AAC72D2D24F9A081D5215DE4A2EA4EB911625CCD787A526A79D24EB398862CB970AF10E8BD036F4876C1ED0EF4FEA618671D6C008A6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.......Cj....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmp:CreateDate="2017-06-09T15:02:42-07:00" xmp:ModifyDate="2018-04-18T11:44:37-07:00" xmp:MetadataDate="2018-04-18T11:44:37-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:4ec8550b-d37d-469c-af51-09b33be501a0" xmpMM:DocumentID="adobe:docid:photoshop:8b12166f-90af-ca4c-b9af-5168be9814ee"

Chrome Cache Entry: 422

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9818)
Category:	downloaded
Size (bytes):	9864
Entropy (8bit):	5.170776532654112
Encrypted:	false
SSDEEP:	192:31Ol9JCpEk5EnXhCpblMCk104efeivykhWy/AsRDK6uVj0zs6gxmtCyaty3A5vw4:314JCqrCxlMh0CiykhWyYCuQTfCJtaA9
MD5:	DAAF37E1ADC7CAF089362917DF288896
SHA1:	1531C969B40DD0F8279DEA46DC8211F9B6E4BCC4
SHA-256:	7F64A8B65B65F7887E9074D0C2FFB41710F45B1041BD3B3FBAD726EB6C7D0A3B
SHA-512:	ABB3D253848B441C1B52A95345E47FFE4B450B70585BA3EFD5C2D95D2CE755C0F5191EBDB64680F059FE9D89A5EAF507F8F4F4DA78ACC6F3A54553778A63CFC0
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/y_finance_markets.daaf37e1adc7caf0.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e={9356:function(e){function t(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}var n={rapidInit:"rapid:init"};e.exports={events:n,rapidReady:function(e){window.rapidInstance?e(window.rapidInstance):document.addEventListener(n.rapidInit,(function(){e(window.rapidInstance)}),{passive:!0,once:!0})},ylkStringToObj:function(){var e=["itc","cpos","pos"];return(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"").split(";").filter(Boolean).reduce((function(n,r){var o,i,a=(o=r.split(":"),i=2,function(e){if(Array.isArray(e))return e}(o)\|\|function(e,t){var n=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=n){var r,o,i,a,c=[],l=!0,s=!1;try{if(i=(n=n.call(e

Chrome Cache Entry: 423

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2178
Entropy (8bit):	7.285559075083721
Encrypted:	false
SSDEEP:	48:9HPwvRgXdYpWDOQc0o+HDIpkp99tCPUZLq:9HwE+ks0osIpw2ILq
MD5:	B435160BC4CCD46DB19623F36D954E5A
SHA1:	918702BF8465ED8A3A5D079012E11472C272D6EA
SHA-256:	2B1CA27B9AB1FDAB2B7959A2CFF5324B333B03D8F2617B2F1B4DEEDD73324F2A
SHA-512:	985F89D8752EB81CDF5BB2819F9C16D99C0F3DDBDB93712E8AE59E6E1206A36C14BDCBD6EBADBF436BC6E3E3C140AD95161D57913C8153440A80C28362E67178
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................................................................................................................................................................................................................................................................A..E..C..H.(S."O..B....6^.. M.Ek.9a.-W..K.*U.%Q.Xy.;c.......Nr.o..z...H.....n...A.\|...........F.>e.\}............Qt....2\........k.............c..Tw...t....Gl.._......./Y....}.....e..x.........g......Ah.......4]..r............J.Z{.............Lp....+V..........~........Vx..........Jn...Tv..a..v..u..Y{......f`iP....tRNS."..........r&f.h`.....z......v.^+...c..3M.H@..>.yJ....=n....... P.[.....k...U.....V.;....0...XD....6....:i\|...............F...\|.....IDAT.....\...............c..cvMEl...

Chrome Cache Entry: 424

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	18633
Entropy (8bit):	7.971711631040415
Encrypted:	false
SSDEEP:	384:TclWvCzufvUDFGFXdjjONtxu36MxtKRnHztQAZmHNZFLd:wlWqzkoGlglkDxtKRnTtQrjd
MD5:	F640AEBE153A94D3F89D995D692FE8B7
SHA1:	0CCC489D89FC1A1BAEEEAA1280E220AD6B8F2866
SHA-256:	9C01049609C48B6B959AA8B7F93BADE3DE09C7935F73E4C4E3337223C869C8D4
SHA-512:	30F54D15A1E7C08F7F4D0024652EDA2836D43527C0003551C17D94385D492232A069498A8D960345CBF5510F9FFC3C2098DB191270D4BF3609F76500486BB8F7
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|.............."..........4.................................................................:'JK.$tN.....@.g@.o..N.V..s....^....Ay.....V(>..`.!..1.EA{S.....3..[#`....w....Gp3...z.Q...z..z.9.M.b.GD.$X....%..%y:.sV.sV%..U....\.....NH...=..R.H.d..6..^.....rx..(...j;....#.......s...@b= o/.)H:.r......+..wT{...z&..QX...Aqi(].k.qi.\...Y.ZJ.....ij.[., .)...g....^[RN..#.[EH....G #\........G "9...%......}"9.K.t......d...ez...I%..Ahp.Q.A%...(...C..QI/....E.FAv"..V.E..g.3.s.]F[JN..h..R5.w3.y8........... r/.y.3y..p...+..HUj.?..?....<.......8.J..]..'.5I(.RH.'...\|H.).)...,.t...0...[...,d4.#..O...Z..ij(ZuE".W..(M.K.pK.(I..2$}..........^.x.Q...x..-...7.<Hq-..s.U...r.-UPE^.^..^'.....w...F>..pb....f)....t5........S.2...#....(K.(J..%..%F.K....t.k.o..V..rh,r:t.{.=7b..;..&,..l...E...qs4.b.cWQ...NUj.p...V..NE.D4n.K.......;.)`3..2

Chrome Cache Entry: 425

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2829
Entropy (8bit):	4.940740108008524
Encrypted:	false
SSDEEP:	48:/5eS4ZLJeS45XPTQHUaFYLA9CScXnGbV6LB9CScXnGbVtHtQFL0tvQHb2HtQFL0y:/yD6nuC6nu3wPawj
MD5:	597A5BA07CFBE0837EE1CC1067799195
SHA1:	BF631F369FD0A4DBBD41A6244C8ED69B57D29A83
SHA-256:	498BA102F3FE01BABDC3834D35620945ACFAB5D319C931D52BA86F2905BF9509
SHA-512:	DD7AC234E5DA65659431400DD3BA34F57A4B5F58E09870A0049D70A1EE7C4CFF5ED55EBB58F1ADCD5F3DE1961404B9A6E02A85F938E89A23D4E968B3DD51F1C1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/weather/small/26-cloudy.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M21.4939 8.01361C16.2904 8.16665 12.0052 12.2988 11.393 17.3493C9.70957 17.0432 7.87304 17.0432 5.88348 18.2675C3.89391 19.4919 2.51652 21.4814 2.05739 23.7771C1.90435 25.1545 2.05739 26.3788 2.51652 27.6032C2.97565 28.6745 4.04696 29.4397 5.27131 29.4397H21.953C27.9217 29.4397 32.8191 24.5423 32.6661 18.5736C32.513 12.6049 27.4626 7.70752 21.4939 8.01361Z" fill="url(#paint0_linear_104_526)"/>.<path d="M21.4939 8.01361C16.2904 8.16665 12.0052 12.2988 11.393 17.3493C9.70957 17.0432 7.87304 17.0432 5.88348 18.2675C3.89391 19.4919 2.51652 21.4814 2.05739 23.7771C1.90435 25.1545 2.05739 26.3788 2.51652 27.6032C2.97565 28.6745 4.04696 29.4397 5.27131 29.4397H21.953C27.9217 29.4397 32.8191 24.5423 32.6661 18.5736C32.513 12.6049 27.4626 7.70752 21.4939 8.01361Z" fill="#7DCBFF" fill-opacity="0.05"/>.<g opacity="0.4">.<path fill-rule="evenodd" clip-rule="evenodd" d="M26.1996 18.5932C17.8319

Chrome Cache Entry: 426

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1986)
Category:	downloaded
Size (bytes):	1987
Entropy (8bit):	5.036031732752797
Encrypted:	false
SSDEEP:	24:DK8kmVHoEhbfVoixIXoeA1n1RBswLWOXZhfeoO8VVaVhbG1W9O58Q5:DKuVfhJoixgbAJffWAZhth3aVhbZQ5V
MD5:	1667C6838FA9C9F05CF7F54C629636FA
SHA1:	78AE957F857EDB03B18EB0628C08A443C093BA2A
SHA-256:	07C168FAE508158B3D771726059605FB37A9128FB6B6DC02C6522FBB26131240
SHA-512:	86B4D110FC73041F7B77D560C9138FF6C89366E2A75ECC121FB681DCC857A4CB86EE09A7FE61FEC6C0C9798F8F657D1A227E104557B68C5926E50A041AA4DDC1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/exint/templates/left-corner-overlap/css/theme--ad-free-aol-mail.css
Preview:	@media screen and (min-width: 1024px){.exint{opacity:0;display:none;position:fixed;top:0;right:0;bottom:0;left:0;background-color:rgba(1,1,1,.7);z-index:100001;transition:opacity 250ms}.exint--is-visible{opacity:1}.exint--is-active{display:block}.exint__content{position:relative}.exint__content__container{position:absolute;top:0;right:0;bottom:0;left:0;visibility:visible;opacity:1;display:flex;justify-content:center;align-items:center}.exint__content--default{display:none;opacity:1;transform:scale(1);transition:.4s,opacity .4s}.exint__content--show{display:inline-block}.exint__content--hide{visibility:hidden;opacity:0;transform:scale(0.5);transition:.2s,opacity .2s,visibility 0s .2s}.exint__offer{position:relative;z-index:1}}@media screen and (max-width: 1024px){.exint__content{display:none}}.exint{font-family:"Open Sans","Helvetica Neue",Helvetica,Helvetica,Arial,sans-serif}.exint__close{position:absolute;top:0;right:0;width:42px;height:42px;opacity:.8;cursor:pointer;text-align:center

Chrome Cache Entry: 427

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23082)
Category:	downloaded
Size (bytes):	102016
Entropy (8bit):	5.476756987163504
Encrypted:	false
SSDEEP:	3072:mp770KuvRwA9o449h8ynGo/p0OReuwGpHBw2tAtY7QQ/RGCZ99fOtYqA6RfsYp10:aAB49h8ynGYuqpHBw2tAtY7QQ/RGo99d
MD5:	6366D883FBCBA3CDC20A4E1E9961A4B6
SHA1:	0F777BA9415F0DA1627357BA5EFE7AC6E0EF8A97
SHA-256:	8CB5035DA7C997F7C616A535E0EA995FEEA2539A9F4BBC03D60D8BF410160A2C
SHA-512:	29893200C395E6840A12BE8ACE55248642D40DA24B74DB3C536C5F8A0AB2A93AE177827F47C846FFB536A7A8505B8EF0F4A84205D57AD55706FCC31C4C5BCED6
Malicious:	false
Reputation:	low
URL:	https://www.aol.com/products/utilities/ad-free-mail?ncid=mbr_rusacqdsp00000691
Preview:	<!DOCTYPE html>.<html lang='en-US'>.<head>. OMP META TPL -->.<meta charset="UTF-8">.<title>Remove Banner Ads with Ad-Free AOL Mail \| AOL Products</title>.<meta content="Remove Banner Ads with Ad-Free AOL Mail \| AOL Products" property="og:title">.<meta name="description" content="Ad-Free AOL Webmail allows you to focus on the emails you want, not the ads you don.t. Upgrade to an ad-free experience today.">.<meta content="Ad-Free AOL Webmail allows you to focus on the emails you want, not the ads you don.t. Upgrade to an ad-free experience today." property="og:description">.<meta content="Ad-Free AOL Webmail allows you to focus on the emails you want, not the ads you don.t. Upgrade to an ad-free experience today." property="twitter:description">.<link rel="canonical" href="https://www.aol.com/products/utilities/ad-free-mail" />.<meta content="https://www.aol.com/products/utilities/ad-free-mail" property="og:url">.<link rel="alternate" hreflang="en-us" href="https://www.aol.com/

Chrome Cache Entry: 428

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1029
Entropy (8bit):	7.47756113111472
Encrypted:	false
SSDEEP:	24:wPCTR0ATxOubP/452dtpkZw/sBJyiTQL0iFYflenTU+Tt7ff:lCwXX452e3fyiTQL0lMUs5f
MD5:	45C2D91C62D658D2A623B6A15CF1D645
SHA1:	FCB919A99821D6542CED094315AB8F2B6DF9C66D
SHA-256:	EFFDF256B5FB2ABE877B541D9A3E2A8376B8BC85437B5E1CC0FDA5FCF631F5D1
SHA-512:	1590AA395EF7A6621A612343CE9EC5375E83085A7E5B0CF5D1A33E298623EEBE952FB0A73CBC104D2DB1965D002799A60BA2C9819013AD64280260E4D4741344
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T......................$.....$6"(""("60:/,/:0VD<<DVdTOTdylly............ . .............x....................................................."1a!AB.................................................!.1Q....aq............?..R........Hm.[p.=..D..H?n.....7...0}.Qs.....}y.nIkP...A..,.._..p.>..A...0.......{..45..i.C..0=.L.6.x.(.. .Q.E4.V.S\|...M.....Hkj(+..F;c....~....._..d]....BSc.X..u....nJ.....k.....,....K....<QTd...h3...sa..l.[#.MK-.....N.g.B..V......k.S>~.vth..2.1.6.....Rh-<3.&...UR4.\|...z..!h.F.L.v@.Y......y....9....Kr$.$.?.\|L...b.E.]Z.F....C...=OOQl..e..sS!..N..h......pA....H.\@..YFj.....{..Z....0,..n.^%!.Y....Hv...OGcf....._..<U}..O.#........`F..\|..X.pA.B[......Q...cX."x.&>.....2..$.k/....@.C...p....-9..).c....QN:...Jzg..Q..K.-GR!./...#.......=c}....O.R)xh.K.rtv..t...0w.."0..x...A..Zn...eV.......j..{q.5.....=..;.;...k......=%$..2.YW.M..G..6~...^.z..>?

Chrome Cache Entry: 429

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1073), with no line terminators
Category:	downloaded
Size (bytes):	1073
Entropy (8bit):	5.215679319524213
Encrypted:	false
SSDEEP:	24:cl0PBM646JO5QHLgrPenioMY1OnVHeSKVkhxyT6RObaQ2HUTz8Q2Zf:cl0P6cO5QrImCj/oN69Q2HEAQ2N
MD5:	FEF0F48DA15C5A04B02E3F67CB104401
SHA1:	59FB7BCBED10F951C52947EB5F2FE7D9EBE4237F
SHA-256:	A7E027D14F8EF931E866100F83B51D3AF698AAF2072B5781EDA63EBF77108CFF
SHA-512:	E5DD0D5AA8BC719497CDA7089C56956900A0412829255E299BC9D4639AA7285E7C75F1F29E826D8725A3362084542C774275DFCD5662B9B5A10C5D0293CF54D3
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/hero-split.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.heroSplit=function(t){"use strict";function r(t,r){var n="function"==typeof Symbol&&t[Symbol.iterator];if(!n)return t;var o,e,i=n.call(t),a=[];try{for(;(void 0===r\|\|r-- >0)&&!(o=i.next()).done;)a.push(o.value)}catch(t){e={error:t}}finally{try{o&&!o.done&&(n=i.return)&&n.call(i)}finally{if(e)throw e.error}}return a}function n(t,r,n){if(n\|\|2===arguments.length)for(var o,e=0,i=r.length;e<i;e++)!o&&e in r\|\|(o\|\|(o=Array.prototype.slice.call(r,0,e)),o[e]=r[e]);return t.concat(o\|\|Array.prototype.slice.call(r))}function o(){for(var o,e=[],i=0;i<arguments.length;i++)e[i]=arguments[i];t.store.debug&&(o=t.logger.tag("hero-split")).info.apply(o,n([],r(e),!1))}return t.store.once("PAGE_LOADED",(function(){o("Handling %s event","PAGE_LOADED");try{t.dom.applyFunction(".hero-split",(function(r){var n=r.parentElement.id;t.rapid.addRapid(n,!0)}))}catch(t){o(t)}})),void t.store.once("URL_DATA",(function(r){o("Handling %s content: %s","URL_DATA",r);try{t.dom.appendQuer

Chrome Cache Entry: 430

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=5&ns_st_sp=1&ns_st_sc=1&ns_st_psq=3&ns_st_asq=3&ns_st_sq=3&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=6766&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=6766&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=6766&ns_st_dap=0&ns_st_et=16165&ns_st_det=9190&ns_st_upc=6766&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=6766&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=6766&ns_st_dlpc=0&ns_st_lpa=6766&ns_st_dlpa=0&ns_st_pa=6766&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508434504&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=2&ns_st_dpc=0&ns_st_pp=2&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 431

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 432

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1329)
Category:	downloaded
Size (bytes):	1330
Entropy (8bit):	5.317256897499773
Encrypted:	false
SSDEEP:	24:ciOaqrsQ9yTLLT7LbSIOyKW5Q00mmF0oKWcxxRLilRGg1NGUXRUsI0fS5:zjqrQLzHdOy3QHXF3KWcxK1zDRUsm
MD5:	C555D6B72FC77A32A9AB83EC40A460F1
SHA1:	B409C45503578004EBC11FA231F9684F9444BED5
SHA-256:	733B60AA9C37D195BAD3FBE33DC38983607812DE9AA18EC074B889AB40459BC3
SHA-512:	BC568ECF89E9C0FBD749ED9E4FE05A20E508D3739D2E43949DD0B96724F2E867FCE4A4FD5AF8F398378084294A1F2626DCE9CB448F46146727170C14632307F3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cx/vzm/cs.js
Preview:	!function(){"use strict";var c=window,t=c.document;function n(t,n,e,r){if(!t\|\|!n\|\|"function"!=typeof c[t])return r();try{c[t](n,e,(function(c,t){r(c,t)}))}catch(c){r()}}c.COMSCORE={_version:"1.5.1",beacon:function(e){n("__uspapi","getDoNotSell",1,(function(r,o){n("__tcfapi","getTCData",2,(function(n,p){var s=JSON.parse(JSON.stringify(e\|\|{})),i=n&&n.gdprApplies\|\|!1,f=c.YAHOO&&c.YAHOO.comscore\|\|{},a=c.rapidInstance&&c.rapidInstance.getRapidAttribute;s.c1=s.c1\|\|"2",s.c2=s.c2\|\|f.c2\|\|"7241469",s.c5=s.c5\|\|a&&a("spaceid"),s.c7=s.c7\|\|t.location.href,s.c8=s.c8\|\|t.title\|\|"",s.c9=s.c9\|\|t.referrer\|\|"",s.c14=s.c14\|\|f.c14\|\|"-1",s.gdpr=i?1:0,s.gdpr_consent="",i?p&&n&&(s.gdpr_consent=n.tcString\|\|""):o&&r&&"boolean"==typeof r.doNotSell?s.cs_ucfr=r.doNotSell?0:1:s.cs_ucfr=0,s.cs_ucfr&&(s.cs_fpid=s.cs_fpid\|\|f.cs_fpid),s.cs_fpid&&(s.cs_fpdm=f.cs_fpdm\|\|null,s.cs_fpdt=f.cs_fpdt\|\|"01",s.cs_fpit=f.cs_fpit\|\|"c"),s.ns_c="UTF-8",s.ns__t=(new Date).getTime();var _=[];for(var d in s)if(s.hasOwnProperty(d)){var u=s

Chrome Cache Entry: 433

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2581
Entropy (8bit):	7.793011920293916
Encrypted:	false
SSDEEP:	48:38CF+IJIKHv4CgMROz6+Pj1Hm7wDlW/L7jQSoDf+YIsoAzHHb3t:MOzJIUV1Y507wDk/8SUMsvj73t
MD5:	6D934474B3E355893E0271151804839B
SHA1:	D1DEF776EA8DA227D261F0F1FBED93B164FD360F
SHA-256:	CE916EDD25F91A6D7B5D94FD1400095E2466953EE959A2BEDA613F8D814BA3D5
SHA-512:	2F6A2D3E247AC9B2621AF728C68457CA18CB8DC8649C5949A9A1F3FFF26A1140BCD37C9B2A352394861ADAEF1B3C121DB8B98271AC5AD4213C3148FAB8B7033D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...............................................................................................................................................H..!..!.72..........G.......i?..........{E.rB.......L6#OF....Y9......g.......vC.d=3YRv.-.......Z...62..W.51.41...H.Mfux.nE^.P.J:'.KG.zGU[..N..."01..S...1.k@B4.n....t.....I..$....uL....K?.ti...$.sC_]_,+.kU..Ic...1.x..h,,2r\.......Q.....6.L1>D...5;1.........c.........r...R7KI:m.Or}......w..]..j.w.L>\|....)8@.\|K...k.M.y]...XomN[a.40.~JyzIY,,.}..R.p...WQ:...@{f.........'pU..k..(.d{.P-zGs....P.rFh{U%.Z<JQT.v^in";:.%&.`<.2/..Yej.=;o-,3Y:.0.jK.D1xoo.....J.^<..n..SO.rC.my.P9.q4HIlSU.20.nnP.q.PP.aa.z^....z\.]^l82t.......e....q`..g........OO?2eZ=3.h...W.\|........[cqO..{.61.x..TVT..._bEc.q...v...../tRNS....M.)...3]..G..k.>...e...Sqm.....x......o.pR.p.....IDAT..}.u@.w.........v.v........ Ipw.....Z..].{....].n...E...=.yj.\.W.ohJ....-._gl..{.\|...!..Z....Vf........S...,{...7..e.....2u.kf..

Chrome Cache Entry: 434

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/videos/featured
Preview:	[]

Chrome Cache Entry: 435

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385)
Category:	downloaded
Size (bytes):	212215
Entropy (8bit):	5.4041439307693295
Encrypted:	false
SSDEEP:	3072:ulmhtmlG/yzPcZpIp7n9rwr8ruxPbfSA1bS3gWo5gj4Qu8:uIhtm8kPG+Z2quxjjQ3gWo5gj4r8
MD5:	98EFB16F75154408D3F2EACD88DAC1EC
SHA1:	1307DAD721288B41FC4018C4A4D0F9EA4767A976
SHA-256:	B2AA131B334742B75FE3DE815997B21D4783CEA50A210783C0E243FB7D9D6EAC
SHA-512:	09B78E6E18B2C505ABEB9F1F06093BBF32B9BE433B023F8245A94BE55D81DFAE218DFFC3CF70CB75A631EAAB9348910D3653B5347162F5EBCB507BDD3386823A
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.Ng=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Ng};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 436

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 1
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.375915290310341
Encrypted:	false
SSDEEP:	12:+mPGHQCUaDsfH30pbPBAmFjrvg4+8uXyC2wCPb3xKqloD042:5PN/0pbFhB+8d1PLxKqlC2
MD5:	10B71B02100238269F906F7773AD889D
SHA1:	87A1F91638FB593FCDA33B42E76F3323E88B5260
SHA-256:	943C325B24E822938FDD1CFC2B2E446A0477E77187E563E3333DB328BD5BC47E
SHA-512:	A5BC6AA710A8DAF9F350E381BE6EC010CBB09417B5593A14252E6952C6B337CD15938C25B3E0EFCB0C9CB820C675B538C0C47D4F5D0D16A9A905DFE0DA97CD61
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-04%2F761cfe70-deb2-11ed-8fff-6672c0d730ce&client=76f99bdb8f78cd44cc0b&signature=3e88644a0b664a16743aee5bc603aabc2307f5c2
Preview:	......JFIF.............C.......................................................&""&0-0>>T...... . .......=...................................................Ba.!1#2.........?....6=...nW5.om.L....>F^....n...$.L.2[..../yUC..N.).i..........[.....(yQE..^...A..Y.\|..o$Z!ep.V.....?.X......S}. .B.)9^F.....5O.R:..g./.=.`.1; .}...c.D.G.`vl3... -w..#..LG....E.k..g...3..i,Y.J.:.[e.M...2xM e...^j.t....k....a.3y..\..\.V.N.YD......{?..k...>.....&N.C......m."6.q_...L..B$:k.r.nv...A.1..1lfu......].)......C.!d.a...~!..-.G.b_....I.#.2M... ."...,....B.Lm....E..~.=#......./._.{w9..j.jb..=.E..m;...............wV0..!.U..mz.......8...C2L.....EU....%.........

Chrome Cache Entry: 437

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	806
Entropy (8bit):	7.2431722127533975
Encrypted:	false
SSDEEP:	12:h0m1/8WBMmFdpLaVvilLckb5KwIDw5VH9j8Cz7QXrwCRasT:h0mB8WBPTWvix9ID89j8CgrysT
MD5:	B4515D9EC12C634F4B40ABEE83809012
SHA1:	BF4EE410E48E74356E3F726AA1EEEFA205AB33D2
SHA-256:	406E5791D2781B0332613158B00B0FFA18B9E8C799BF5EFF9D0A61F8BB8062BC
SHA-512:	91570E5567DD0B929C67A962495CF3C5C1539E14F5E2B9B837031E9E0D0C1252FCC151A9C6949704C106DB5A730B80BB73C0669DFEB7362C655004EC346DD05C
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................&....&,%#%,5//5C?CWWu...............................!..!..)1(%(1)I9339ITGCGTf[[f.z.......... . .............v...................................................1q."2AQar..!3................................................!..Q............?...K..$.R.+B.li...S..~....;..f...z.....7................K.^&Z..B.N.t..yT+.!./8.m..p.]...r@.'U.$..1.......).m..+o........7..:.V..U.h7...<.c.vH...@sG.....-%.ax..'.P.&..../.....{.t._...3\|s+./.L\|[........C@m;.....&.4B?l.L.0....9o.....w[..d._.k..w..c....P...T.Z........z.r[D....\....Mb.C........-V.\Q.o..$q.R...>..S@u...BsaD\..9..}...N.K.C.OKl.qVIYm.7..5..^...by..#...W._B.\..W.....k..X>_.....^D.....M.ofI"..J.i..U.4.U...o..........8K.=...".s..,..q...i..j..Q.V..[Zf[,..[.O.9.o....

Chrome Cache Entry: 438

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383), with no line terminators
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.756855465532132
Encrypted:	false
SSDEEP:	96:VfzQ5P6MWToT+Zp6L5dJe9JIoajU5CDeo:V7G6M5T+19TYN
MD5:	B6ECF40386A94DCF6F104B00D7C7F814
SHA1:	0BEAB6085B433FD0538AD46E97DA27FC8229D80D
SHA-256:	623E67256353332B24A2074D8816ABD4362594A04AA07CFEBFC346A190BC710D
SHA-512:	60DAF3C4D353FE547CA62CA9D3542BC4FE42E2F1CCF485E96EAD6A744C0FC4226F53BB4E81964BF4AAB2157780E30077AA9D3C7954CD42A033DBFE081AF95DED
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.3.9/evplayer.css
Preview:	.evp-main,.evp-player{position:relative;width:100%;height:100%;outline:none}.evp-main .evp-docked-meta{position:relative;opacity:0;visibility:hidden;display:none;height:68px;font-size:16px;color:#121717;background:#fff;line-height:20px;padding-top:16px;left:0;right:0;box-shadow:0 2px 8px 0 rgba(0,0,0,0.5)}.evp-main .evp-docked-meta .evp-docked-title{position:relative;margin:0 16px 5px 16px;max-height:40px;overflow:hidden;text-overflow:ellipsis;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical}.evp-main .evp-docked-close-button{position:absolute;top:10px;right:8px;display:none;background-image:url("data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMjQiIGhlaWdodD0iMjQiIHZpZXdCb3g9IjAgMCAyNCAyNCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48dGl0bGU+YnV0dG9uLWNsb3NlPC90aXRsZT48ZGVmcz48ZmlsdGVyIHg9Ii01MCUiIHk9Ii01MCUiIHdpZHRoPSIyMDAlIiBoZWlnaHQ9IjIwMCUiIGZpbHRlclVuaXRzPSJvYmplY3RCb3VuZGluZ0JveCIgaWQ9ImEiPjxmZU9mZnNldCBkeD0iMSIgZHk9IjEiIGluPSJTb3VyY2VBbHBoYSIgcmVzdWx0PSJzaGFkb3

Chrome Cache Entry: 439

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1415
Entropy (8bit):	4.912573907292441
Encrypted:	false
SSDEEP:	24:2d1NFLaZ6geaxM2qqwR2WhkGOwaeQp4eElBesUWzRhsc8PwO/TTMEz5XC:cHlSnwAWOp4rlg4zAPwOfMEFXC
MD5:	3FEEB979FCC6F979D125973CD551E33B
SHA1:	3A195B726A687CD729AAF0E8EDB2733978D59CE7
SHA-256:	7C519F87AADAA1A1A706D44A5ACB10AACF73AA548C9420C4B3BE28F0FF6636FD
SHA-512:	5DEAB9B537A70D90113BCD00FA8915309573CDEFEBC3DD74D87E3AF54C401EA4770390A2446AD69E6F7B9BFD9158C867FFFE7EF6AF3E271180E19438CDB2993D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/cross.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="18px" height="18px" viewBox="0 0 18 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>x</title>. <g id="Design" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Desktop-T1" transform="translate(-1027.000000, -251.000000)" fill="#828A93" fill-rule="nonzero">. <g id="exit-intent" transform="translate(375.000000, 231.000000)">. <g id="x" transform="translate(652.000000, 20.000000)">. <path d="M9,7.18473244 L2.18828618,0.373019192 C1.69585764,-0.119409303 0.879429128,-0.123266445 0.378000592,0.378162048 C-0.125999373,0.883447683 -0.124713659,1.68959041 0.374143449,2.18844748 L7.18457157,9.00016073 L0.374143449,15.8105882 C-0.119570802,16.3043024 -0.12214223,17.1194452 0.378000592,17.6208737 C0.88328627,18.1261593 1.69071479,18.1248736 2.18828618,17.6260165 L9,10.8143033 L15.8117138,17.6260165 C16.3041424,1

Chrome Cache Entry: 440

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4188
Entropy (8bit):	4.008208576286222
Encrypted:	false
SSDEEP:	96:gVFFNBS/iHy7AqDbqB1VFFNBS/iHy7AqDbqBl:sRS/0ylnq3RS/0ylnqv
MD5:	A245C3EEF95AC561D99DADB82BD47618
SHA1:	1DFE58FD590696B0A0F3B3E068FE3800853AFE8F
SHA-256:	04E3A2AAF1311F86673ED6CCCFBCA5D21D02DF4444E080A79A1329C25351453C
SHA-512:	B71CF1BEFB02D42BCDEE72D9785B6D1F990D75635F4369B91CF2BF52814F9B646FF42C3C876B7D02C0C425FC7858EBB71AA8BCADD61110DA8F1F9747DA6BFA81
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/icon-profile-male.svg
Preview:	<svg width="65" height="58" viewBox="0 0 65 58" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1_327)">.<path d="M0.671976 57.7471C1.15586 57.8681 1.65059 57.5882 1.77698 57.1079C3.6367 50.1692 11.1948 48.3708 15.7123 47.2947C16.8443 47.0257 17.7381 46.8126 18.3195 46.5617C23.4653 44.3282 25.1427 40.7351 25.6446 38.1135C25.706 37.7975 25.5923 37.4725 25.3467 37.2594C22.6673 34.9465 20.4067 31.4744 18.9803 27.4806C18.9406 27.3668 18.8774 27.2621 18.7943 27.1718C16.9075 25.1207 15.8242 22.9522 15.8242 21.2243C15.8242 20.215 16.2052 19.5379 17.0628 19.0269C17.3246 18.8699 17.4889 18.5936 17.5016 18.2903C17.8952 9.08917 24.4475 1.85069 32.4804 1.80194C32.4895 1.80194 32.6646 1.81458 32.6736 1.81458C40.7481 1.92653 47.2571 9.32208 47.49 18.6496C47.4973 18.9078 47.6128 19.1497 47.8114 19.3158C48.3766 19.7943 48.6402 20.401 48.6402 21.2243C48.6402 22.6706 47.8692 24.449 46.4717 26.2293C46.4049 26.3142 46.3543 26.4117 46.32 26.5146C44.8756 31.0935 42.2828 35.1361 39.2

Chrome Cache Entry: 441

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	293
Entropy (8bit):	6.4750551588457315
Encrypted:	false
SSDEEP:	6:6v/lhPfUOlSJSSSSaffEX2iIHUk7aZ9mnuWIAJfZ9PXglt532ffcranZCtjp:6v/7/lSJSSSSafP3VK9mnuWh3gp32fzO
MD5:	FB63BB3AD5A7073858B9E60838B00C27
SHA1:	0D97131EB6E06430E5F3814A167FC1CD8221634E
SHA-256:	2BF78EFEABCC4E59EE927E997D3F4F465CBE08C127DC12CF9F10B4E1EAA6FAD2
SHA-512:	D8B6E3CBBC0A7FC2536980F6D524F9DEC169AA50182CE88AA5AC31B8595DAADAB0B24B57E9008B2717227E6260BB28FF38FF54A6F9A2AD3EEACDF534F799E40D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...NPLTEGpL......a.........................................l.....x..;..1.."..E..I..C..B1......tRNS.........1...T...\|IDAT..e....1......t..Q>`..........e..... ..X"../.........d.t.G.MEK.:.......X/fexx.j.....w.pH..J...5...O!I..v.6O.......e..........IEND.B`.

Chrome Cache Entry: 442

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1910
Entropy (8bit):	7.835257861899819
Encrypted:	false
SSDEEP:	48:tVpSeKE89KTrO9lk+R5uYpcxZMoPfHJGwM9ObngwmwGsyc:tXSjL9KTrClv5lslX0WntNyc
MD5:	B0AC2B682AF25611FEDC4D0983AAC530
SHA1:	F729DB994A323D70123FB632777113FB241E9668
SHA-256:	4DDE3D99490ABF969CFB7A046A058FFD48D3D831F12424154ABB20ED86E776A0
SHA-512:	4E5951185958526176847F44D0C820E314EA4DD7D87FB4C074D760E25E397396C50788E715CAC8B41BB68F57DC84B085EAECBB5438EE10029BC2D98401ADB598
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FhVlB1Dqn1zQNINKtkSF6Sg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191016%2F500x500%2Fwarriors_wbg.png&client=76f99bdb8f78cd44cc0b&signature=45837ce2b02ee90dac3330f0112247c56c9df4f9
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.B..B..A..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B...'+J..C.pne./..(3N.~v_+I..0...,Q^s[cn.~X.=9Q~..F=S\|IYw&G.tpc..U%F..:.5.0#E...F!D..@..(./wrb$F...)L[u.6.;I...E..E..N.2..X..S"D...N.C..5.A.=.8..TDWy,J...)..D.7Ybo..+..L7P~..L.4..M..GR^s..P..J..F.2?T{..B5O..w^cgk..E..Sdhj.{Z.,.A.9..I.6.1.B...K.-.;M[u-K...Dhji./..HK[v..'.>`fl.:..S.9..Ofij..(kkh..I..O..Cafl.y\ysa..P}u`..Egii6O...V_em.?..T..Gjkh.AP]tCVy{t`.>.}Y.0.6llg.5..R.7.-'H.qod[cn..Q.v_ZboXap.x]..'V`qEXx.30L.@Uznmf..J..Tspd.3xrb..R.z[..B.\|Y..K..V<R}/K.tpd..N\t..1L.:Q}.\|ZvrbWapGXx)I..<..W..D..Vmlg>T{JZv..W..GS^r.B.y....tRNS.E..!.........m....N.....d(....IDATH..._SW..#.....s.HB&.MB..f@.({.7.P@6..J.(..N.V;hmk...A.7..L..>......s....}......tuswttwse.83..i{.'Pb...._'...&..f...@&.....}..I.........UJ9..X..$./....a.%X~..H..bG&.6..`y..`.......C....r`.4?L....+"........C..x..(`D..@o.9....\|P*.F.J.:...{c.;H....V.y../V6..

Chrome Cache Entry: 443

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 444

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	6.793708552960668
Encrypted:	false
SSDEEP:	6:6v/lhPMMPXXOjNkXfHP32QjNe8QJcipblk61W8vN6qsVIZp:6v/77XeGvP3j48B2bl1NNa4
MD5:	4E69B4BD1929E36297EC905E04213F7A
SHA1:	04F5DF92FEFF48187FA2BD6E4CD31D4262BF65C4
SHA-256:	303A32E284957FC90520D4677308472019CF6D4CA3698B475231AD3171AAFDD3
SHA-512:	38C742B7BFD7337A9193EF204562D981B928CF8C4BC44761824840D216115F1983C0E5ECB2633F7315D1AAAC08832CF4FA7376F2417EC82866236A98CF45AFF2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/favicon/favicon-32x32.png
Preview:	.PNG........IHDR... ... ......Tg....-PLTELiq/..1../..1..&../...........K..~.....g............tRNS...;..Ro.....IDAT(.c``QL..!...V.4$..........P.R..P....P........7. .....+!... .Y..@b.5.@fE.....5.`....e......\...S....&.k{uFe..Z.@Vyyy.T.k@......3.W..2...Aly........Z.mi..e/K...Q.0..#.0".#1".=9.......=m....IEND.B`.

Chrome Cache Entry: 445

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	4.994787172741404
Encrypted:	false
SSDEEP:	3:yLRmcpZ6CdPtpOq94IhXVHws6Tac3mDDpKfFsLGD/DNKv:yL/pZ6CVCq9JVHwJW1iFqt
MD5:	CA243B22264DCA7A4A899C51CC2DC963
SHA1:	CF47310BBB10F981E5735CBCB6196F688782A625
SHA-256:	95FB5A5390AFDA7B7734B303C9F724039FDA305313CE9517AA5F7A544A208AF0
SHA-512:	704E626A74A47B560B3316788B46F7CAF94E1E831B9290551C52DBF4D1E8DD8B72BACBBF6164EAA393BD97DABA0C351881B2F9D83A92F3BAAC49322BF9B5040B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/nn/lib/metro/g/myy/advertisement_0.0.19.js
Preview:	document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */.

Chrome Cache Entry: 446

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 447

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (372)
Category:	downloaded
Size (bytes):	7668
Entropy (8bit):	4.818916405648157
Encrypted:	false
SSDEEP:	192:Uu9KYoiEAroQywuVYeCvGgPVoddpswcj2jA9qSt+xw:F9KjYe6do2jg2
MD5:	0AA710A63CEE632B2B8987C8E7715720
SHA1:	BEC570DE3EFB25EF892B1B7BF6930EAC57400671
SHA-256:	6BFBCBFE62A182C77A84F9BB31CD15199C5A6999DD00737F4EE1045258FF5872
SHA-512:	17D6013B3BA7F5242DC1E9F037DFD7E789681BEFC417DAAF7732C92D57C1A582CED2CE49726EFC334A2612EC6E76E28A5C228F1B3823D4C33C66FB4195DD3C50
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ucreative.php?cv=1
Preview:	function isSet(val) {. switch (typeof val) {. case "string":. return val !== undefined && val !== "" && val !== null;. case "object":. return val !== null;. case "number":. case "boolean":. return true;. default:. return false;. }.}..function isJSONSupported() {. return !!(window.JSON &&. (window.JSON.parse && typeof JSON.parse === "function") &&. (window.JSON.stringify && typeof JSON.stringify === "function"));.}..//------------------------------------------CODE------------------------------------------.function isForceSafeFrameEnabled() {. return testData["fs"] === "1".}..function decodeFSC(input) {. // Replace non-url compatible chars with base64 standard chars. input = input. .replace(/-/g, '+'). .replace(/_/g, '/');. return input;.}..let timesData = {uCreativeLoadStart: Date.now()};.let isDebuggingLogFired = false;..function onLoadHandler() {. timesData["dfpIf

Chrome Cache Entry: 448

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	424512
Entropy (8bit):	7.999613476679157
Encrypted:	true
SSDEEP:	12288:fjJA9Y+7G94CSwQQwJCCxGpDj+iiikdwc:lAbsvQhClVil
MD5:	591549021B20C030318CB3F83BBA0D61
SHA1:	F0FF19FDD65A11AE4E4CBB541277FBB35CBE4CAA
SHA-256:	002FF02443D8F005347D159DC93C34B18AA5BF7E4F12289CA048E8A85331F335
SHA-512:	722485E2F152D6114AD0F34CA4A40EDA2F3D19D7C411970ED7947C9A45B36D94CA1E37EC034A38943CE29D8351030CB35AC8B7FF94566D0DB71C8FB0CAF272B8
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment5.ts?akamai_token=exp=1709530992~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=7534bc794ac65c76a4c3cd4d86ac72de97dc36896cc1e4fb92e407fe51e1d398
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|.x%..Q....9$i^....\|'.._.i../.s.Z.U.T&.f8.....K..@....Oj-..R.......HG..._.,..d.W.Z.UX..d.m9...X....[h.:l....)z.;.%d.Dtl...M..H..(Z...2F#j...L..m$.Q....=.@.?)Rq.....RCT.+F..#Z....i.W.'?.........2........K.^...u;.3...a./E^..:ki.`:").D.L....e....sxx.0O.9..&m.C..J..%]....:.o$.6.oH.vr..P.<..W..B.1....Z.....8....\.....k.\u.%5E....l...F...g.;_@..e.u....#.o..1....E.;.r....l... ....6...,......F.F..n........=9R[.Nz.U...b.2\|...{j.,....t....ZqQ...Dg..P.a...U.24..5c..3.M..J.3..T.....Pt.(..2\|...O'..b.Q.....0.E....<@.0B....n.O..<....?....."......@.....wr..9g.D:j...`v.VJC/U..\....'.d5nZ...G..w..+.DS0

Chrome Cache Entry: 449

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://ads.stickyadstv.com/user-registering?dataProviderId=1025&userId=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB&gdpr_consent=&us_privacy=&gdpr=&gpp=DBAA&gpp_sid=-1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 450

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1878
Entropy (8bit):	7.600634030077224
Encrypted:	false
SSDEEP:	48:D0XBmvq4wVvL61MnMiValdJ8nVYJHZvU8qTddQuS:mrxVvNMFlz8nVYRq8qcF
MD5:	1AF738852894064E68E3C5A45C88F036
SHA1:	DE6D10F1FCDA7CD37297C75933106CAE94E89874
SHA-256:	6196711A2DB5F39DF66F740B27310E6FB71BDB80D22E7D352C0FAE1D436DDF27
SHA-512:	184E9280278CC5792C95B5F3427A0EFFAA949918BADDB6FA76B896523341E5648A2D651453D2579EC31711AD69BD979E1471C86BE88A1F7A3A9D77CDCA094918
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fu.pqfa2q7DS.luzuhXi7JQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230905%2F500px%2Flakers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=b5102b8c22200b7c733d98e776f08546f58e5154
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................'...1.o.....'..2.o.mD...H.g..'....,..&.gG.;.FS.w@..(..'...:j3[....fG....0.+.MQ...r...).-...\5..%S.c....4./.qC8.l.uB.JRN.e.VMw@V.8c-]....`J.,....~.....!...H......y.sQ......".i..$...B.i....7..={CU. ...[&`yAU....]J.o..jF.#.rB..(....6.z..cH.......`..j....t..m..\|G..&.u)...........YL.{?.e.. ..{....#@.j`+^...K.f..?."r;Xe@..TN....QO..<....%.1W"a.........g.L!....{8.c...g...<.v7.s..v...tU..%......x;..T....3...0.g!..De0\...t1...^S;..t......o6h2\.x[....m:.....0nP..`.\|r..L...ca\...`9.@.z........\|...^S..a.c1jQ.j....D.i?.y.....}.mE..x_mJ.R).oL....za,...xre]D.?!....6tRNS...D.J.......N.;..5..2....Q^............zd..XW/#...=....IDAT....eT.f.......u.[w.{I.$.....(.....E..).u...-..6www.N;oF.;..(.{z/....r.....6e.~..h.o..M.....8...[.o@.._v5..x.

Chrome Cache Entry: 451

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17142), with no line terminators
Category:	downloaded
Size (bytes):	17142
Entropy (8bit):	5.337943196306117
Encrypted:	false
SSDEEP:	384:wFnF2kI1cJXsyopSEXFMQTcelbyl4J00Jfk7zoeEHoToUAuWQ19eZ3Zn9wTrTcTU:wFF2kI1cNsyo8EXFMQTPIlu00J87zoer
MD5:	96F195B010CDEB89CF3F75EC3B994243
SHA1:	7B6526DF93FF5B31436BF0D04AC177C729C5DA39
SHA-256:	6AF7B09C7736CC2722602CC733F5CB03479CAFFA597B320A13FAFF8481FF226E
SHA-512:	2098702E0D3255ACF075E398EF7D2CEC0499925AC21932D45E1B821ED2D49A7AE51B29D943277D5EF2705071EB76F2A12EBA80FF1C6E0D784B8CBE4EF0720B75
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/os/yaft/yaft-0.3.29.min.js
Preview:	"undefined"!=typeof window&&function(p,f){"use strict";if(void 0===p.YAFT){var v,T,n,o,a=!1,S=!1,i=!1,h=!1,w=!0,A=(new Date).getTime(),r=!1,e=f.documentElement,F={usePrefixRegex:!0,useNormalizeCoverage:!0,canShowVisualReport:!0,canShowPerfBar:!1,useNativeStartRender:!0,useNativeStartRenderMeaningful:!1,maxWaitTime:3e3,modules:[],adModules:[],modulesExclude:[],modulesAft2Container:[],customReportModules:[],includeOnlyAft2:!1,punishAdsOnNoShow:!1,plugins:[],whiteListedContainerElements:["div","section","ul","ol","li","header","img","a","video","figure","span","picture"],customStartRender:!1,preProcess:!1,getAccurateFirstPaint:!0,fpsMinSampleCount:15,fpsMissLimit:18,preferDataModNameOverId:!1},C=0,P=0,E=0,N=[],R={},y={},Y=0,d={},b=0,s=0,M=0,u=0,l=0,c=!1,g=[];(v=V())&&v.timing&&(A=v.timing.navigationStart,v.now=v.now\|\|v.webkitNow\|\|v.msNow\|\|v.mozNow\|\|void 0,v.now&&(void 0===v.getEntriesByType&&void 0===v.webkitGetEntriesByType\|\|void 0===v.getEntriesByName&&void 0===v.webkitGetEntriesByName\|

Chrome Cache Entry: 452

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 453

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1451
Entropy (8bit):	7.646476073880468
Encrypted:	false
SSDEEP:	24:wP1PaTH/uvIAbuDYToW03F4q9uUQPr12EUAkK+cvXVGJMN3/dG:zuvIfx3F4qUXz1p//N3VG
MD5:	89D3ECCC7FA224AA00717AEF439265B8
SHA1:	8AB9A3AB2D0C67178E4682A8D7297946CAB61DB2
SHA-256:	928D88EB2F3AF032F5B29828E655B3E740E38F8D876D49CD283111DB95481DCB
SHA-512:	37A742DAF547EBA0258AC0E9AB087F8DD8E7444B5DE8211174BE3CBBCB0560A1DF152B9B0BCA552C61EB221EA69A963FD731ED50946125A7AB201FB322DE3C3E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . .................................................................1A!".q..#R..................................................!.1A."Qq2a..R.............?...T:..5...R[9S... C.{c.j.2.^..T.JTm8..~....Q.~..RE..T..n.r....<..aF..w..4.V..,...?K.i.Gl...%-4Q.....,.s...+Kp...$.w;G........e...#...G<O.\|.J.e.......,....bZ....*.o... .G;O..8nz_...H....Y....:.,...cI........i.&3.._.....GL.C\...$...fQ.x#...u{.~%... .o....0............f......P.?.HA......}...m.gu..n.....(35Y.R.H.^..<.....^LV.n9..H_.E...) .%}..E.D..-F.U EDWQ.......~p2.......;.%......1.z..'...........2...f.<d.[.p..I.^J...[.. ;.$.U..7.W.0N.....Aq.....Yi.<d.[a`......v..M..7....c...G^..>!...^..h.5.4.Um1.d.r.X..N.H.....nR.t..~.. .D....f..1..]C...{;]....ll_...dw.....l...`..J::K...oQ`.UXl...i....s...........L.i...{h...:.x........2....T\|B.... ..l.o;

Chrome Cache Entry: 454

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.21704049178157
Encrypted:	false
SSDEEP:	3:CUdwltxlSle:Jle
MD5:	6C72E040039C5A29D2710A6E6F331C13
SHA1:	77A2919F56AFB1510DAC650D9682E50CB4866793
SHA-256:	9C41BA408EFAF3A7A36099370BC814E38B0AFD42229FA9E0E6040740620C85C0
SHA-512:	6A1A840CED2AB51B100B6D781D52CBB2453125986682428B2E44CF5C180971B90811D629CF22AA56944FC0F4F51B484B1655FC7AF5C2E908AEC337F95AC7572D
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/ddm/trackimp/test
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 455

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	177641
Entropy (8bit):	5.1734791060601175
Encrypted:	false
SSDEEP:	1536:QqvHMnn7/CNPZvVVnk4vSefi+b4xWJYoH+KfAScCSwqZzqNOCce:tPAnEFtfj1fNLVNOA
MD5:	C214E816ACC73CFB191DAB31B496A463
SHA1:	92BE759FBAFABB076567B1A3A3E8F5495BCF4524
SHA-256:	DE082977763DF054A872DD0459109327739703E3C5C2775E6F62686C9EAEEAE3
SHA-512:	FA919EDC0C6D35641AA16228FA2B1FA1B5397767CFEEE8412F3967CE950DFF70EE5AD42BB9827563BC4FFD65E00DBCD069A071AA3A38D201A78C61590F341653
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/wafer-core.c214e816acc73cfb.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}(self,(function(){return e={653:function(e){var t;"undefined"!=typeof self&&self,t=function(){return function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:o})},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="https://s.yimg.com/aaq/wf/",n(n.s=0)}({"../../node_modules/core-js/es/array/from.js":function(e,t,n){"use strict";n("../../node_modules/core-js/modules/es.string.iterator.js"),n("../../node_modules/core-js/modules/es.array.from.js");var o=n("../..

Chrome Cache Entry: 456

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1164), with CRLF line terminators
Category:	downloaded
Size (bytes):	8224
Entropy (8bit):	5.16401806803136
Encrypted:	false
SSDEEP:	192:84YAUQK6IJ0w0KoUhMxmS+giMsSGxPWShjB:8TZxnSQMaPWShjB
MD5:	4DEDC9BEAFA42622963589FB600493B8
SHA1:	C28BAD71C76EEA259D6777DAA668857A2C7AA40E
SHA-256:	7705B47F54A3F1A38C9E3616359CC61EAF76658103D6238A280010D38815C738
SHA-512:	F1164BB2CE61FAC327A93293108DF24CF6387A80269008AFCBAA0F58A676F7A4EC771B89426E2D07FC24B8EA03A8C9FF558B314A3D5C3B51DF530E8644C6244A
Malicious:	false
Reputation:	low
URL:	https://aolserv.pages.dev/robots.txtIP:
Preview:	<!DOCTYPE html>..<html id="Stencil" class="no-js grid light-theme "> <head> <meta charset="utf-8"> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no"/> <meta name="format-detection" content="telephone=no"> <meta name="referrer" content="strict-origin-when-cross-origin"> <title>AOL</title> <meta name="description" content="AOL"/> <link rel="icon" type="image/png" href="https://s.yimg.com/wm/login/aol-favicon.png"> <link rel="shortcut icon" type="image/png" href="https://s.yimg.com/wm/login/aol-favicon.png"> <meta name="google-site-verification" content="yOTFyUBPTnXtuk2cPpqfv7ZvZ960JgqsV8FomN3n7Y0"/> <link rel="apple-touch-icon" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png"> <link rel="apple-touch-icon-precomposed" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png"> <link href="https://s.yimg.com/wm/mbr/3689655c0d5d523f0d4ae53b598de350d766716a/aol-main.css" rel="stylesheet" type="text/css"><script src="https://code.j

Chrome Cache Entry: 457

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11736
Entropy (8bit):	4.683072216384526
Encrypted:	false
SSDEEP:	192:K+UcmpO7BVAP+tcmpOMZ+ocmpOwuCfB5uYqDoLt+LcmpOYBwEw:tmpO1mmpORmpODPojmpO8w
MD5:	D40C073CA9A5A6000EBF640FCC0A63A9
SHA1:	5FFD966D0A648F9A64FBC32D0809345E88C4EA25
SHA-256:	46C2776774C7B07992CC40A22C5FE0A56BE0A97156336B7B34630973999EEECD
SHA-512:	92670464A131F64B7AF6DFD2659D324EA3D49778F98D1F0D3DB8053D95F4C0BDD2F8DE62D9F5CEB40560F11B51645627AFB486A2A011E1E5234035A156719ABC
Malicious:	false
Reputation:	low
Preview:	{"cpsProductList":[{"sku":"help-central-new-aol-mail","name":"AOL Mail","type":"simple","price":"0.0000","urlSku":"new-aol-mail","showChat":false,"attributes":{"offer_id":null,"svu_product_id":null,"trial_period":null,"obi_product_id":null,"price":"0.0000","myaccount_promo_sku_list":null,"name":"AOL Mail","ls_treatment_name":null,"sku":"help-central-new-aol-mail","status":"1","ls_treatment_short_desc":null,"ls_treatment_sales_pitch":null,"ls_treatment_type":null,"ls_treatment_promo_code":null,"ls_treatment_price_off":null,"help_prod_popular_articles":"overview-of-new-aol-mail,manage-conversations-in-new-aol-mail,search-for-messages-in-new-aol-mail,change-your-sending-name-in-new-aol-mail,account-management-managing-your-aol-password","help_prod_cta1":"Check Your Mail","help_prod_cta1_url":"https://mail.aol.com/","help_prod_cta2":"Try the AOL App","help_prod_cta2_url":"https://aolapps.aol.com/","help_prod_footer_image":null,"help_prod_header_img":null,"help_prod_link1":null,"help_prod_l

Chrome Cache Entry: 458

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1480
Entropy (8bit):	7.630212275449081
Encrypted:	false
SSDEEP:	24:wP1Patdhl8mkeSUzQJI96EmEadRmkol+IvJ+BBAOFRpfdY2gKqEy8zRrRfV:Nx8e5AaDIM+I92XdXgKqX8zDV
MD5:	79AAB87C4D862190541FA781B46DD8AE
SHA1:	E08F1DE9384DFE823C2249C14FF50565F8E253CA
SHA-256:	10A659F38BAD59D2996EC05FA23B2B07FD25DF5833B50B1ACB20B2912566E368
SHA-512:	0528832CD4799FD00AEB74666397CC0B4A93FCEC0BC3B78947ADCF956E16069ABD6A69BC8C9B1FA145E85B1C82BA8A7D767D373A0DD62DAD6C1DCEC3951439DC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . .............y................................................a..1A.!".2.................................................!..1A.aq"...............?.uu..)....k..y..%....a.....m.X.Z:Q.N8iXz.C...}..J)..%...<.J}..CA..S...k.U[..i$%G....i.C......Ha.yU...'U.#..e.2].4...~/....9.7:.i.UR:...B........F3).K.!....\|.Lvk-..IJ...\|+......=...g.........O..A.za.i..6[m........Z&>...ubv&.].....z.......4W.{v.....9.Z...R......C;.b.4.mm.n.X.0.....FS......y}&.j..+..rX..H.A.."..(..b...v.zq[.+...R@/2....4.R$.6.! \|j.....t$e.D.(....(Q...fdQ.....O.#FN.iXHZ)..............$..yPu...n.H,..5...<...Q...Q..6....]v...8.7.t...rw.N....8.s...W.S&..,rU.4.../..9RO<..u....y.....zJ..<.?.<..:...)..M."hYG......#.'-N.d.....z..C..Y[.......2.O..:.K'v.8..o].[@...n.....H.y^..\|...F.......k..G..c#.7wTo..?d.T.....Ojz.^S.....lsAP%......T.....

Chrome Cache Entry: 459

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HwT:QT
MD5:	344EB8D19F5C0A3435EF32FD9601F1FB
SHA1:	E082EB1D89D91CC1A25A1D510268E576109DA07E
SHA-256:	B44289B54959639FCA6A742F7CC2E2A5AF9C6E7B73C1B3E25227CA9790F3A587
SHA-512:	EB9F1CD4A566192160371F4B182EE00180F6912333FFB79C537BD80635A6AFE6379FBE7BB74043D635BA65C9F4F956D9E97E516E24E516F2591192A36F866EAE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkMUWkV477X7hIFDc5BTHo=?alt=proto
Preview:	CgkKBw3OQUx6GgA=

Chrome Cache Entry: 460

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	105664
Entropy (8bit):	7.998338119549073
Encrypted:	true
SSDEEP:	1536:/R2mcdw5WqfMJc1o2EQwt/09TkJ+szTS9g2/UhM2cHSXTJR8yzEYAEf0Km+1BhYg:5odw+coQw+5o+u29ByXTdz8dvEhYyFaq
MD5:	D61B3CA5B993933DB8D8822BF9B417E1
SHA1:	4DF230CC6DCFB963C74CE168EFEC580DEF7320E7
SHA-256:	74DDEC103AA1484315510E80BA24439799DD386719E006EABAE2CEE00958B509
SHA-512:	923951DABDF74A0663ED5FB14B761E5FC1096B9B3F315CD8421664FFDC0E8A79F0FEAF4BB5965E6E62E1A58A8BECA3B1B11CA7C85B0CE6D3522069A0CE14C314
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI.....\|^Y~..D.....v........z.l'.G..Cc...P.{......lg$...:P .~.fl..,U.W......s}...bU..[.]......c....r.z$FQmm...p..5@.`XH.(.</gO...j.qqE...9b.Q....6k..xo.........{..f#i.".e(..Q./.EX<.O..@.t.@ v4,.!Z...w.c....Yw@.v/L.4b..3...?. J..W...YjuF.mR.{..n.`n.]@..+.'..f..g\(....0.\|B....a...0..(...a..xf..a.?..;KLKnQ.cC=.hQ6&..W..m..JC.d.."..E....hOM\nx>...b....S..u,D.Tl.`.C>m.Jx.[}......3..n...w.W......T...$q..i=I...../...S.."..//.eL.$.L.&w.].-...A..8t..Y..UK..3...>yZ.'.[4.o._.A@E....s7..7Y.X..Z.1...:..EN....9..%[V#.-.3..M...;.{.W'.'..9.....HX,....q\,h.....i..........]..O.4.uQ."...j9..T...;...R....F...t)6.....

Chrome Cache Entry: 461

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	696
Entropy (8bit):	7.02087122394447
Encrypted:	false
SSDEEP:	12:6jQtFfsfRTa8/PGUIm80c5JB7Waz4r56PeXoA0ym9JvugZ6Y/y:ztFSRTa0PLk0MO6PIgymVgY/y
MD5:	240376984777DE46CE8374CD30907A1A
SHA1:	1343CDC7EF752B5FB8106593CA3E45C03B9FD9A0
SHA-256:	7656BE19277678E73A7C32CAF753E2F7F922B7A2E9D0ADF3B6A6F1BDB227DEC7
SHA-512:	88BFF616D0AD674CA40F6E186039ADDD08282035A40CD9354060D872E81DAAE3A74CE234DC9480F69A9DC21C28321667F87F0F9C603C70579F30EF3B4AB33114
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=2a26e46583bfd12678b081b69fb7cca425c39052
Preview:	......JFIF.......................................................... .... %...%-))-969KKd.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......... . .............q................................................!1."Aa...Q.............................................!.A"1..Q............?..."......bTn@<...rq[eD4N.j....)..:.)...'..m.}..L....ln..5.Y8...._.S.T.A$.2.....T..)k..q....r.n.J..g......2.."..f.e$..UAUF...E....SI.ki...8'.C ..1.\|...F...2d.x5.Z.......3.3z<..J..+.2..n\.r@."...3..x..Y...j.dt. "..fQ....w....4.3.U.v....\|n.OQ/.b%.".*...uR.{...N...p...dz..6V ..}.q.,..Zo..p........x>...U.a.t.,I"..,..z8D....I.-.WG... !..."....O.......].q.v...0SS.N...K.....<.."...

Chrome Cache Entry: 462

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Secret Key
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	4.0
Encrypted:	false
SSDEEP:	3:Ja4Fzf:Pp
MD5:	6626573EF18846D45690B362A392D01F
SHA1:	AC7FA98D1C6706542ACD4BAED3D44C7C6FE15878
SHA-256:	44355EE5A31EE119F735B7F72FF8073B742A2CAEA0ECBC91D44D5C567D6557CC
SHA-512:	998A82AE67C61ECB95F399B7C1BFED342A00B00D779444FAE905B40CB24E3F8403271782EE947145325BE1E16F8DC97DF241329153849A4EBE3A13DB276B1C52
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNmNfYzAzYTBmOTQ2YzE3YjcyNmM0ZGNjNmI2Mzc1NDc4ZGE4YmZlODY5M2JmM2EyZjYyZGVkYTMwNmQ3NjEwMDg4OQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ
Preview:	...T...../.I7...

Chrome Cache Entry: 463

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	154378
Entropy (8bit):	5.875834340080193
Encrypted:	false
SSDEEP:	1536:aOGNzmzrM7rJUzs4vmK0HiWdZzf7jjNoVjAek+YYRt63l:aJkHqzDjjNovk+uV
MD5:	C3151870AF568D8F2BD622AF97194320
SHA1:	AC5278B999A70FC1FC316B582BD9F5A47DE28889
SHA-256:	463E463AF0E4E775CC6FA1081784A898260BAE63734593231AEA87F364F86966
SHA-512:	3E39126ECAAA33DCAC2BDF70750DC616D7459DCD3D433DEAD579B020C321BFEA0E6AE40302023B2E618EBBACDCCEDB29AECDCD75AAC1D1A8556FE4583CC7A30E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/f10d509c/d3decajspqn3ue.js
Preview:	(new function(){var c=['BMf2AwDHDgu=','C2v0','we1mshr0CfjLCxvLC3q=','CNvU','yxbPvxnLCNnJCMLWDa==','DxnLCKfJDgL2yxrPB24=','ruXftuvovf9ot0rf','D2vIA2L0qxvKAw9ezwnVzgvKqNL0zunVDw50','C3lrGq==','Dgv4Dc9ODg1S','C3rHy2S=','lcbUBY1LDMfSoIa=','y29UC29Szq==','BM9Kzu5HBwu=','zMv0y2G=','Aw50zxj2zw50Aw9U','iL0UCNvUkhT3BMq6D2LUzg93lhnQCZO=','C29Tzq==','rLjbtuu=','yMLKuMvXq291BNq=','y29UzMLNlNnLzwr0ywCUy29Tl3n0yw5KyxjKlwLMCMfTzs9PBMrLEc52mq==','CNvUvgfYz2v0Aw5Nqvbo','qxvKAw9cDwzMzxjtB3vYy2voB2rL','rKjmuG==','q09j','qvjfqsbcuIbdt0WGru1cruqGsfiGteLosYbqqvjbtsbtt1vsq0uGvfjbq0SGv0jsifnuwuXfifrjveXf','C2vSzG==','C2HPzNq=','v1nytYaVia==','B2jZzxj2zq==','kgmPienSzwfUlMLVieLUyY4SidiWmJiUiefSBcbsAwDODhmGuMvZzxj2zwq=','y2zJB21Wyxq=','Bwv0yq==','yMXVyJO=','y2HPBgrfBgvTzw50q291BNq=','jMnOzwnRzwq9','v2LUzg93lMnSAwnR','jNf1B3q7','C3jJ','CgfYzw50','ugfNzq==','qurtveSY','zNjVBq==','rg9JDw1LBNq=','Ahr0Chm6','lMrVy3vTzw50la==','C3DY','Bs5OyI55ywHVBY5UzxqVCNrIl3LOyG==','ksbTzxnZywDLCW==','ksKUCNvUka==','Dg9mB3DLCKnHC2

Chrome Cache Entry: 464

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 1
Category:	downloaded
Size (bytes):	684
Entropy (8bit):	7.336584721340679
Encrypted:	false
SSDEEP:	12:+mPGHQCUR7sFdlnYd8uv2Y2iv8CGUCniQvOwjBwaxJ0u6LNIp6XJK:5PjwFd+d8G2t89CnzvOwVwwJ16CUo
MD5:	C83D881A3D5CE5C56127203830586F67
SHA1:	2FC04F9BBBBDC18663289E49005D4B4608575C0C
SHA-256:	1394ACF9E7CC9AEED87B4AD855E65094FD1A1E465E657A0AB0E3D387C635C9C3
SHA-512:	71B6BEDABC9CAF92D0A60B16D2E99D3A830719F01062448482DEE95130177EA7024D838C7233C8EE713AE3E2E39002CD2DAA024ADDA65F5DA8E249181E2A932B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fdce58b70-6994-11ec-bbce-f76baafa31ca&client=76f99bdb8f78cd44cc0b&signature=8b20bbd0531958d16c29ca2e9e8e661d182b0bdb
Preview:	......JFIF.............C.......................................................&""&0-0>>T...... . .......=....................................................Ba"#1!2........?........n[..6..w..3...u..2..%..).\.9.=.T.8e....h=.C..z...yO".....z.-.-.3 .G..-...&...I.Y..1..6.u.c..\|Y..........._z..B....5v..r....C...Q..pGx{...kf.N.6.z4u.....;..a.....m.]K..R1.7....@.;8..!.i.G..Wa...v..0.\A..BT..\.u.....&......`..Y..t.6..5.R8..z.......L(... .Ts....V.k.1U.C:.5:...!...w2...p.A..PU-K..k.1..L...F..A...7......<........:fak..4......h....$.~<x...2-3>..L..c.q.1...k...=..i..1.=%...d\y9.w=.T....7..h.....{...x.".9..-..Q.-....A..-.......I.&G....7..u.c..\|...~..y.y....

Chrome Cache Entry: 465

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	32139
Entropy (8bit):	5.164546534957773
Encrypted:	false
SSDEEP:	384:vgghICI+Y4Li50jPa1HV6s+3r6J/3OnSqlUxccdzU9lpOlzF0wCLuo3GxeI:vRICI+YNCji18HqJdzUJKFCCFeI
MD5:	C1E8FD1478C920D2B1F4D04046F3EFE4
SHA1:	68E0C1FE0AF3BBC9489E9504999B625DF12E6B26
SHA-256:	D89EB4B6A5024BB27DA6DA6017A827BC55EC95786BB7B4E7A94233D4D0FCC6BA
SHA-512:	32AAE83722680EBFD36DECABAABE718196C67151037D336FC49C43D2CF4F13233A55D17F1FE3B1E4D3E161E53CFE7F643091B64914298D87B915D9C39E8D1D71
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/articles
Preview:	{"featured_articles":[{"modified_date":"Feb 21, 2024","created_by":"0051N00000636FlQAI","title":"Reset or change your password","summary":"Your password gives you access to every AOL service you use. Learn how to reset your password if you forget it, and how to change your password.","content":"<p>Your password gives you access to every AOL service you use. If you've forgotten your password, you can reset it to get back in to your AOL account. It's also a good idea to update your password regularly and to make sure it's unique from other passwords you use.</p>\n\n<p>To manage and recover your account if you forget your password or username, make sure you have access to the recovery phone number or alternate email address you've added to your AOL account.</p>\n\n<h3>Reset a forgotten password</h3>\n\n<p>Use Sign-in Helper, AOL's password reset and account recovery tool, to get back in to your account.</p>\n\n<ol><li><a href=\"https://login.aol.com/forgot\" target=\"_

Chrome Cache Entry: 466

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30967)
Category:	downloaded
Size (bytes):	104248
Entropy (8bit):	5.474929457591932
Encrypted:	false
SSDEEP:	1536:tYagKkecz5KA3Rwcoct0xqK3jnLkV9YHBTdDeigsFBqPYXxxh8ITTOt+:B3uMc1tRK3Hg9YHB/gsFYQ2QN
MD5:	BAA03D905793A8F5DC2AD7A8606E11F1
SHA1:	D90B9D8D0D80CFA8791FE509C13434573E631BE0
SHA-256:	DECC3A196EA1BC3F8B09BE68541DC09C8CEEFCD39CE29F02D67504FA6954E2EC
SHA-512:	8787E76A92CBFAE1D48E1D0BEED6562C799D0249AD0476D29160EC93DCB01943D76FE849601B746770467AFD2CD050E0370C3BA9933FCE9ABF7B7F2013AE2F22
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 467

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 468

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2146
Entropy (8bit):	7.803986549167334
Encrypted:	false
SSDEEP:	48:U1A13L4D2n5fwLL6xMZrks16fRlKoEcqNQEAYsGtt:UyVLe2BQOMZ16TKlfrH
MD5:	424A00FBCF4278432F8F17C89DA589E8
SHA1:	4687755912B09E7CE10D9873D14F5B72D4EAA200
SHA-256:	E52BA3A3F6A3B8B2DB18BB024182544F9513A947F83D102D8D1BB7459BEBF16B
SHA-512:	2E9F2CB8CFB12D1B30F094E0024C610886E9233DC6C6239D34E363A375BC610CC09FC29FA63FDAAC0CED2DC5FF761C54E80DAAD81B5EE18EE6186E74E2CCB52F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FbCgWmLw50ojl92ZP0Q7KlQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181219%2F500x500%2Fheat_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=56444c2e5ec70e256d0295d87b9d4b83ec6307a8
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL~.......................................................................................................................................................................................................................................................................n.+Wci..-..$;.&......@.'N[bN.(H.'s.+..%Tafgrx{.,8.&y.+w.+...f.>.'".$.%..-F.'6.&^.)..-R.(..$mx\|..-V.)Q^d....."K.(..,...~.,2.&..,....q.Yfl......{..).%..-B.'..,X.)..$...E.'..#(.%`.)k....p{........."..t.+&.%\.1...d.2c....j.i.^jp[gm.....#....-:.*cou....o%y.....jN^ +5GRZ........$L$8[.)...{`or}.......[hn8:E...]":......o.0.......dqSc......u..q..utg.n0...z!wX.I2CAFO.!-j4Kg@SZ;L}hu...h1H^.-kjrNV^..%.t..o@U.-x^lc:N_kqi`kE9F..#WYN=8 H./...sLQ?M..&4CKWO6.f.^J!WF .].,.!....r3eP&...~c1.......YtRNS..s.E.........l..L.@........]j..<b}4..0....$.H..,..9..{.X........../.u.............^.....IDAT.....X.x......F......g]w.}..c...c..H...."......y}.uw.m0<.........l.~x<_~%..

Chrome Cache Entry: 469

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	4666
Entropy (8bit):	4.489400204548682
Encrypted:	false
SSDEEP:	96:hbM+RPQYsG793NxljH9fm7xICqlkmWZ/zRaC:O+RIzG7ubqlkmMzRaC
MD5:	DE1DB3DD39A059F223C44465C4E89F5C
SHA1:	C842A42963255C19CD6C725E3DC3E3E38E7E0239
SHA-256:	FCB741999C405A690D5EE930244D11D5AA65730321305305765B1F3C499BE489
SHA-512:	DF5BBC2A8691B8215324B217596D5B26EDF9B6C87D1505B85AFDAB80CC7C62792B966CDDA6EDD3E54FB71BD80EA42F274DF1F5B13A41D4A4BFE30C705FD7A741
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/module-adblocker-detector/vendor/adblockerdetector.umd.js?_=1709508425918
Preview:	(function(s, t) {. typeof exports == 'object' && typeof module < 'u'. ? t(exports). : typeof define == 'function' && define.amd. ? define(['exports'], t). : ((s = typeof globalThis < 'u' ? globalThis : s \|\| self), t((s.ABD = {})));.})(this, function(s) {. 'use strict';. var w = Object.defineProperty;. var E = (s, t, c) =>. t in s. ? w(s, t, { enumerable: !0, configurable: !0, writable: !0, value: c }). : (s[t] = c);. var y = (s, t, c) => (E(s, typeof t != 'symbol' ? t + '' : t, c), c);. class t {. static addMsg(n) {. this.msgs = [...this.msgs, n];. }. }. y(t, 'msgs', []);. const c = () => {. var n;. const e =. (n = document.body) == null ? void 0 : n.getAttribute('bis_register');. if (!e) return !1;. try {. const [r] = JSON.parse(atob(e)) ?? [],. { adblockerStatus: a } = r;. return Object.keys(a).some(o => a[o] === 'enabled'). ? (t.addMsg('Urban Ads Blocker enabled'), !0). :

Chrome Cache Entry: 470

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1032), with no line terminators
Category:	downloaded
Size (bytes):	1032
Entropy (8bit):	5.255579988986506
Encrypted:	false
SSDEEP:	24:ciLVBM64H55GtDJadT2CYR7+fkhGA1NUOiN5LN4r5LFf:coV6H5YtD01YM9y+TNX6/
MD5:	B7B5C7E57110D5C10ECB91C643BAE081
SHA1:	59916425B34BE532AB5C3097EE1BF4A21427E0A9
SHA-256:	25181CEBBD0FE5E870071E9C1DD3E2EC915A704E80F562301857B2E6EDDE994E
SHA-512:	4949822672D4A806D589F5FD8EA3608E9DAAF2D684840865CC5CFFC26822E4ECC3B334E8CC0809F8163D717BE0D053CE0112CCB043A197CCC6B6794B4AE64FBB
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/list-grid.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.listGrid=function(r){"use strict";function t(r,t){var n="function"==typeof Symbol&&r[Symbol.iterator];if(!n)return r;var i,o,e=n.call(r),l=[];try{for(;(void 0===t\|\|t-- >0)&&!(i=e.next()).done;)l.push(i.value)}catch(r){o={error:r}}finally{try{i&&!i.done&&(n=e.return)&&n.call(e)}finally{if(o)throw o.error}}return l}function n(r,t,n){if(n\|\|2===arguments.length)for(var i,o=0,e=t.length;o<e;o++)!i&&o in t\|\|(i\|\|(i=Array.prototype.slice.call(t,0,o)),i[o]=t[o]);return r.concat(i\|\|Array.prototype.slice.call(t))}function i(){for(var i,o=[],e=0;e<arguments.length;e++)o[e]=arguments[e];r.store.debug&&(i=r.logger.tag("list-grid")).info.apply(i,n([],t(o),!1))}return r.store.once("PAGE_LOADED",(function(){i("Handling %s event","PAGE_LOADED");try{r.rapid.initializeViewabilityTracking("#blurbs-list","blurbs-list")}catch(r){i(r)}})),void r.store.on("URL_DATA",(function(t){i("Handling %s content: %s","URL_DATA",t);try{r.dom.appendQueryParams(".list-grid a","href",t)}c

Chrome Cache Entry: 471

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3
Category:	dropped
Size (bytes):	34936
Entropy (8bit):	7.980502102436656
Encrypted:	false
SSDEEP:	384:Iwp8FMqNpAy0evU6KfGf3TQvrT1J7LpX9sMhCk2af00jNkBocHxg6f/kwRpeZrqg:PqN26Kefj4rTnBtDfXlJQocTuqh2MjuF
MD5:	B897C5425047A66F43134C6976885F72
SHA1:	3C6A0D1046DBE916FF2588F4F13D67A06117E3F4
SHA-256:	4AA855561EC7C929BE5802D0F060DE35162FA8194D4C8595F6F7D27D6D3E67E4
SHA-512:	73B7DBB5E195E4EAF330D5A35D43E2534F9B1D2810787E4566797182A2D712D2D123825767F0447C1C8C03FE1B704391B7240E5B146D0264183FFE91602EA154
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................................!...!.1&""&18/-/8D==DVQVpp.......................................!...!.1&""&18/-/8D==DVQVpp......... .."..........6...................................................................1...W5...z.3x.Z..,&..1......o...r..~..Jy..)t'[y...-.I._..o....j8.vu..sG.f..FIn8Oc\|.......Kk...+.......N.:...k.+.f2J)...9$..C@..!s..6...e...P..."Z.....[..F...K./z.$o.eM.:.1.\|....{N&.[.'..s...Yi1.w].y'_.z......A..U.rh.....NK\..O..OE...D.G...keta.N...]....JO..U:K.F.[.U..=S.U..!F.........$.E"......g...]2t..(.{....DN..?l..T........K...l...6XF.]..<..sM....r.eL+-w.............f...b.U.......m.....ogAa.Z...^{2.....=..s;\....}.X.p....E......%..........u2..Q..;..:.3..%.o7[%..Dn.........].g..g^^,.GZ.-......B...Z.UYp.P...h...I.,._A.....(_".l.FCq7T.w.C..J.X...*pE.......5.m(......;J.:9W/.;...k.k(...yee.W..oo9..Z.Er...:......oYut^.....7..U..%-.........#M....k1..l.Q....d.,AG....m..mh.P.n.j.d.:.n.qS..vfLW5.UG5.R..

Chrome Cache Entry: 472

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 782 x 313, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16340
Entropy (8bit):	7.836920581525234
Encrypted:	false
SSDEEP:	384:npV+CRmBsI0zkDxcF1ewq12cz+/SOLp09ilF09y7X0xXmYvk:B8ykq1eH12czVOLp09iPGyT0lm3
MD5:	F9E0F24B60732CD95150A37FB003B871
SHA1:	1F2D68CC8D4EF8EF9E0159B8A5D450A466595546
SHA-256:	F3E22262B472EE52E51E9F053856DAF9A3F7CE59DD66D51F201F1EE7FAAF5690
SHA-512:	64B0AE7AD0B84B0FC39EB90C11045AA5D920A1F5BD059ED599FC15ADBDC2AF73F2251F0D28A4508B8F09E040684966FC6112AE4DDC749DB2B83D4EA2BD3EB8BF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/assets/images/ns/aol-logo-black-v.0.0.2.png
Preview:	.PNG........IHDR.......9.....9.wq....sRGB.........iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <xmp:CreatorTool>Adobe ImageReady</xmp:CreatorTool>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.)..=..=.IDATx....F..5g......#.N..#0'.A.H.@..H....LG 8.s".&..`...Mks.K...~z...Fwu.S.t......@...... ...@...... ...@...... ....%....J-.).... ..1....{.5.?..I....Oz&c.H..G.O.{.~../... ...@.....g....z.1<...Q&..@...... ....H..@K.K-.W..?.t.:.%H..@.......%@.PV._......8......... ...t%@..T..\..wc...4X.@... ...@....I..'........!...!...@...X....r.....{@..e........ ...@........nZ.v.L...o.8. ...@....@O.$.=.%...E?...sxN.m.@...... p.....@...........:.BtA...... .....8..../.,.r.y.

Chrome Cache Entry: 473

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	97
Entropy (8bit):	4.739944837421636
Encrypted:	false
SSDEEP:	3:+GNJRE80R/VkNZQMTHxCixwLeRE80RzV:+GjRE805VkN3THxLtRE80lV
MD5:	2B95D3E96A63D31CB9E542A5A3D91199
SHA1:	54DE404A4E8EE872F375FDE59942F54451195492
SHA-256:	81CAA58FDFEF7AFA86BFB6EB1E89EE66264DAB777F0B9E3A7D7CFAE48A3F2FF4
SHA-512:	747FAE6EB9C52A6F1E786ED5AF0685DFCE3EBA115620DDE301DB541241ADB1CBFE42E5D88F7262E730FBE5CC6B565313047F5F59CA313A457B02EA499EE5A6E0
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/anchor-target.css
Preview:	.anchor-target{top:-100px;position:relative}@media(min-width: 870px){.anchor-target{top:-140px}}.

Chrome Cache Entry: 474

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (953), with no line terminators
Category:	downloaded
Size (bytes):	953
Entropy (8bit):	5.575605244859336
Encrypted:	false
SSDEEP:	24:hMiRO9pEIEojKF6GFmXVZR8G9xqAYAk9bD:NO8IEr6MguG94AYAw
MD5:	822D57C24EDE1AD1654B920B180A25F5
SHA1:	9EA5BADF196E5CB83251F532361A3C4B9300776D
SHA-256:	1B2500DCF56341FBD2755D5016C646657483651328F7CFC718DE33A7CE8379AC
SHA-512:	FBA957BCC82DA2C0DB44A7B96869AB9CB6EDCDA41AD7EC9757E8CA8D74D7532AF2C12CEB00F66E2DCF34C6B8C933468C87CE2D62AF44C5713EA359E51A7FF68A
Malicious:	false
Reputation:	low
URL:	https://13144298.fls.doubleclick.net/activityi;dc_pre=CIjD8p6f2YQDFQHDwgQdWMAMmg;src=13144298;type=aol;cat=afaolmal;ord=7618860228691;gdpr=0;gdpr_consent=tcempty;npa=0;u1=hashedguid;u2=usertype;u3=TestControl;u4=undefined;u9=ad-free-mail;u25=undefined;u26=undefined;u29=aol;u30=undefined;u55=undefined;u59=mbr_rusacqdsp00000691;ps=1;pcor=1935452063;pscdl=noapi;gtm=45fe42t1z8860054492za201;gcs=G1--;gcd=13l3l3l3l5;dma=0;tcfd=10e44;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-NB4W2NQ%26cat%3Dad-free-mail%26u29%3Daol%26u9%3Dad-free-mail%26u59%3Dmbr_rusacqdsp00000691?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIjD8p6f2YQDFQHDwgQdWMAMmg;src=13144298;type=aol;cat=afaolmal;ord=7618860228691;gdpr=0;gdpr_consent=tcempty;npa=0;u1=hashedguid;u2=usertype;u3=TestControl;u4=undefined;u9=ad-free-mail;u25=undefined;u26=undefined;u29=aol;u30=undefined;u55=undefined;u59=mbr_rusacqdsp00000691;ps=1;pcor=1935452063;pscdl=noapi;gtm=45fe42t1z8860054492za201;gcs=G1--;gcd=13l3l3l3l5;dma=0;tcfd=10e44;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-NB4W2NQ%26cat%3Dad-free-mail%26u29%3Daol%26u9%3Dad-free-mail%26u59%3Dmbr_rusacqdsp00000691"/></body></html>

Chrome Cache Entry: 475

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x1200, components 3
Category:	downloaded
Size (bytes):	42303
Entropy (8bit):	7.7414731535057415
Encrypted:	false
SSDEEP:	768:SZ5nrIZoO9MgYaNNa1GP1Ts+C3ecfgr9o/0TQy846/N6Nd:Ecz9MgYaNNZ1Twea5/YWN6Nd
MD5:	A90EE7647C57C37AC0E88B21D3A0F5CB
SHA1:	FE1F1568B74FE5C2B00B1F332081B3C69F8A3677
SHA-256:	34FED21BA54731144090A317D066BD074B4C3FEF3E665F12162AC12C6953753D
SHA-512:	AD75003672A09285B762488AF1A684BA223FA95A887F3EEC5FFA5453E2A6E22579E591694FAA020EBA52DA2FCEDF2DABA1266CCB9F0E1525EA8155BF8969F0A4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aa/aol/aolHelp/lastpass/lastpass_300x600%20new-lca-4274-2x.jpg
Preview:	......JFIF.............C...........................$ &%# #"(-90(*6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================........X......................................................................................y...........................>5...l................................<`.............................2...............................\...........................b.`.0...........................Z..s.............................]..x...........................1k.e.............................-v.................................<`.............................2..............7..eo.0>zs.............Z..s...............3{.o..>R:r...................2.............?.NN....\|L.g..9...........b.`.0............z.W..lG.my..kr..oG..J.\|.9..............2...........$.e.^..3..>.. .......}I.\|..Y..........b.`.0...........k...I.8....._KN....<...............]..x.............g.1.R.....%/l..!.>5\|............Z..s................d........~..)..@....

Chrome Cache Entry: 476

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	75555
Entropy (8bit):	5.255655191794635
Encrypted:	false
SSDEEP:	768:JYCEETMJABY2fx4ZpCkClld+3ztQfV+0ih4O3CpqB+JMZuc+yECMEgCFsR7CsChI:aCEEAW+2fFyts1OypqTC4Qf
MD5:	FC4E0D588A56CF65AA0091DF49183917
SHA1:	B63AF4B0B12BC5E4437C27D17ADFA96C335E30E5
SHA-256:	F41CE0B55299B028C0B6C4AF990B0C065C1270078C09CF93B5CED0087F2E53A6
SHA-512:	E802BF4948924B9C793AD0BC503041B51DC165D7FB27D6FE31373A448C93FCF6690E7EC8479B13D2DF528A7FA4A3AA06193F873AF4EDE1E793E6A70F852C35D8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.fc4e0d588a56cf65.js
Preview:	/! For license information please see aol_header.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e={496:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){if(null==e)throw new TypeError("assign requires that input parameter not be null or undefined");for(var r in t=t\|\|{})t.hasOwnProperty(r)&&(e[r]=t[r]);return e},e.exports=t.default},2150:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){return(0,o.default)({},e)};var n,o=(n=r(496))&&n.__esModule?n:{default:n};e.exports=t.default},383:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){var t=new Date(e.getTime()),o=Math.ceil(t.getTimezoneOffset());t.setSeconds(0,0);var i

Chrome Cache Entry: 477

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	696
Entropy (8bit):	7.02087122394447
Encrypted:	false
SSDEEP:	12:6jQtFfsfRTa8/PGUIm80c5JB7Waz4r56PeXoA0ym9JvugZ6Y/y:ztFSRTa0PLk0MO6PIgymVgY/y
MD5:	240376984777DE46CE8374CD30907A1A
SHA1:	1343CDC7EF752B5FB8106593CA3E45C03B9FD9A0
SHA-256:	7656BE19277678E73A7C32CAF753E2F7F922B7A2E9D0ADF3B6A6F1BDB227DEC7
SHA-512:	88BFF616D0AD674CA40F6E186039ADDD08282035A40CD9354060D872E81DAAE3A74CE234DC9480F69A9DC21C28321667F87F0F9C603C70579F30EF3B4AB33114
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......... . .............q................................................!1."Aa...Q.............................................!.A"1..Q............?..."......bTn@<...rq[eD4N.j....)..:.)...'..m.}..L....ln..5.Y8...._.S.T.A$.2.....T..)k..q....r.n.J..g......2.."..f.e$..UAUF...E....SI.ki...8'.C ..1.\|...F...2d.x5.Z.......3.3z<..J..+.2..n\.r@."...3..x..Y...j.dt. "..fQ....w....4.3.U.v....\|n.OQ/.b%.".*...uR.{...N...p...dz..6V ..}.q.,..Zo..p........x>...U.a.t.,I"..,..z8D....I.-.WG... !..."....O.......].q.v...0SS.N...K.....<.."...

Chrome Cache Entry: 478

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47093)
Category:	downloaded
Size (bytes):	543076
Entropy (8bit):	5.651042180176589
Encrypted:	false
SSDEEP:	6144:5L+rmufvXa/JOJvElOvgJOeANvcDHFrMXSh72rbvivL8wioMuyY4rvmL8VR:Qrmu3a/n3HB17cbvivL8wio14CoVR
MD5:	F0150DDB11B28A50B802E6C6D6F56A16
SHA1:	A7A29A82A494F5F2BDA38C35FF8ECE5EA4983676
SHA-256:	75BAA1E9130EA6AFB53BF815165764FB34C141CCD6C9666699C1F1A650EB60B0
SHA-512:	F5DE82120967F7D85B3500853D5E9FC64169EB457958558744AC5C488399632D1991E5B2413173C841312461E4056780DD4A27A028F8E86B0C7D56982ADC6D85
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/3689655c0d5d523f0d4ae53b598de350d766716a/aol-main.css
Preview:	/! Pure v0.5.0 Copyright 2014 Yahoo! Inc. All rights reserved. Licensed under the BSD License. https://github.com/yui/pure/blob/master/LICENSE.md /./! normalize.css v1.1.3 \| MIT License \| git.io/normalize Copyright (c) Nicolas Gallagher and Jonathan Neal /./! normalize.css v1.1.3 \| MIT License \| git.io/normalize /.article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block;display:inline;zoom:1}audio:not([controls]){display:none;height:0}[hidden]{display:none}html{font-size:100%;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}html,button,input,select,textarea{font-family:sans-serif}body{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}h2{font-size:1.5em;margin:.83em 0}h3{font-size:1.17em;margin:1em 0}h4{font-size:1em;margin:1.33em 0}h5{font-size:.83em;margin:1.67em 0}h6{font-size:.67em;margin:2.33em 0}abbr[title]{border-bottom:1px dotted}b,stron

Chrome Cache Entry: 479

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	dropped
Size (bytes):	6637
Entropy (8bit):	5.2353753030032495
Encrypted:	false
SSDEEP:	96:Of/O+kL6/8vX3OZeBOZe7KOZeuOZe7KOZeDOZe7KOZegOZe7KOZe1OZe7KOZeCOt:w46/GXcX0y0Z0M0z0O0V0o0v0K0koRy
MD5:	4B96D010FA608D65E81248B3814BBE09
SHA1:	53F6B6279B9891380271BDCA204518B2B156CF79
SHA-256:	982708397CE34B77806F9CAA455134885E8D149ED2984C325A5352A6C7990FE9
SHA-512:	267CB4871005EF062C00B369B086FC17FD141D475010D3AD580492C8E6060EF9F45324B54BAA9E185609F092F5182C1CC7230741B0D97B59CBB2608F845E3454
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmN2FfNDkxMzQxZDM3YWRkYjZiMmUwZjMzY2RiNDI3ZjI3NDk2NzUyMWE0MzVkZGJhMTdhMjliODI3M2UwYzVjODBjMA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ",IV=0x78e53fc16aa71fed0b0a09b4730a08d3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 480

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	downloaded
Size (bytes):	6637
Entropy (8bit):	5.226188479200537
Encrypted:	false
SSDEEP:	96:Of/O+zs/8vXCOE3IOE3ROE3/OE3ROE3yOE3ROE35OE3ROE3cOE3ROE3jOE3ROE3n:wls/GXh
MD5:	38A15F7238C7F1B1AADB05A23DA57062
SHA1:	C009EDAF32E605902D75B254ECB4B985D6C3C412
SHA-256:	8F4994C18E2E0B21CDBE8D7375725A707D8C58188A1E23018EF13499B0A7DE5C
SHA-512:	283BAD3522D1C9D16B490F24459D75C700C3F64ABE43E1BFAF9362C00AD6817E4131833AFE10992834EFE83090EFCBC5B2703FB4DE3E7B50A1EA19275752685D
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/6s/rendition.m3u8?fastly_token=NjVlNTVmNmVfMjExYmUzODAyYzk1ODc2YzlmN2U2MTNlMzE3OWZlODEyZGQzZDQzNDhhNWRlNDJmMzllMDE4MTI1ZTU1NTEyOA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNzBfMzczNzJiY2Y5OTgwNzIyYmFhMjJjMjE2ZmIzZjJiMTdkNzQyNjBkNTk1YzM1Yjk2MTUyOWU3ZWIzZTQ1ZDhmNA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ",IV=0x78e53fc16aa71fed0b0a09b4730a08d3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 481

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	102656
Entropy (8bit):	7.998269399255391
Encrypted:	true
SSDEEP:	1536:L1/LBoAB+S3slrDeZ8IHiPsx850bFSWYBPlu26glVskqdIQgwQwc9dGaGbU:BDBsQslmCqkWYBPXZzjBlwciaGI
MD5:	F132807C4EE46BA6AD65ED99A520F5B4
SHA1:	E7BA7B9FC2C0E65D38C5CA003C25E3FE0161F8A4
SHA-256:	969A1C22797DBFA55610D2DD7C84C730E6A73785A1672C8CC2BF829EC0E79062
SHA-512:	7572F35D946BADEEAA7AE77061042FBCAD8DB0BA6B213FA5A4BF91754D58827DEA8006EBDF321EDFD7BDE4799E1020CB65E4A18DD44B04E5ECE7D6FE473B3EBF
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment5.ts?akamai_token=exp=1709530988~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e8b40a2463d355aee79ce16d02f266fb895828cb22f6586733f56f035b643b4a
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI......o.&..>.V4....e....%<.Lu..:...hk.K..:..u..,.\...o:M.(^...fi......l....W}...t.I...g..(..`J.N.5..Z.&V..krA3C&......f,.......d/5...h....sb.2j..@.....Ep..".>:h. A.P}>...]..Y.`zK."....u2.....K......$.]...........t..i.....7.!.%.f.-.9&.....E%.........':O.}...%..V.7..p>< .b;..(\.w+B..s.....:,.}.K.<..>]s......m.T......;.q....I.H.U5e.{..C.....j.y.....L.(.R..\.K...A.?lG(.jD..i4.Y<s.l.D(....N)}.0.{..+e...)..C..&......5...L^.........C.+`...gg.P..($6.hZ.B!...ct..R.#.g........~....O.Q...3...Ai..\|..@......D<.fh.t.TqV.cV..F.~.nn..3....x5..4...K.5.......PG2.....\|z.[.1.L.j..a....m..jld7..`........4....l..Q.

Chrome Cache Entry: 482

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11664), with no line terminators
Category:	downloaded
Size (bytes):	11664
Entropy (8bit):	5.381271660127164
Encrypted:	false
SSDEEP:	192:D3wz3autqzStaqw0YUCTgtrSJEoE/nF76lydknLcAYM/Vj+rhE+UnLWcFL1oywIx:7aquOVqw0YUCTgt4EoE/nF76+kLP/Vj3
MD5:	9A6E0EE43AC725F462BC70485B852C68
SHA1:	C8C9603DCEB387DAE34428FC341EB8ADE4FF735B
SHA-256:	483D5161348DAC98C5F69D9930F7CD3BAEAD5F776AD560CA300054B7EB786518
SHA-512:	DC6118FADC2FEFEBDDDA737ECFDD67D559D1D93AF97668FD674A660B0A88D9BF836DF877D1374073940DA70CC7BDDCD8C6ECA046048136F5D60EBA426FD6CF25
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/exint/exint.js
Preview:	!function(t){"use strict";var e,n=function(){return(n=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var a in e=arguments[n])Object.prototype.hasOwnProperty.call(e,a)&&(t[a]=e[a]);return t}).apply(this,arguments)};function o(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator];if(!n)return t;var o,a,i=n.call(t),r=[];try{for(;(void 0===e\|\|e-- >0)&&!(o=i.next()).done;)r.push(o.value)}catch(t){a={error:t}}finally{try{o&&!o.done&&(n=i.return)&&n.call(i)}finally{if(a)throw a.error}}return r}function a(t,e,n){if(n\|\|2===arguments.length)for(var o,a=0,i=e.length;a<i;a++)!o&&a in e\|\|(o\|\|(o=Array.prototype.slice.call(e,0,a)),o[a]=e[a]);return t.concat(o\|\|Array.prototype.slice.call(e))}!function(t){t.DEV="dev",t.QA="qa",t.QA5="qa5",t.STAGE="stage",t.PROD="prod"}(e\|\|(e={}));var i,r=function(t,e,n){void 0===n&&(n=!1);var o,a,i=n?u(t,e):t;try{for(var r in e)if(o=e,a=r,Object.prototype.hasOwnProperty.call(o,a)){var l=new RegExp("{{"+r+"}}","g");i=i.replace(l,e[r])}}catch(

Chrome Cache Entry: 483

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 833x100, components 3
Category:	downloaded
Size (bytes):	12180
Entropy (8bit):	7.92777465185594
Encrypted:	false
SSDEEP:	192:nb6aGfM81hziTWAvvyGWmpyAnp8pzwggG1GXTxbkxCfaNoI4/Dx4aRXvCq4kUr0:b6aKzyHyGWmpyKpOzwgg9XwCf2oJVxvh
MD5:	74F7C49C7421783A21F05158E9DE7CD7
SHA1:	5F272F843905CCB87567A2CA8BAD77EE98A192B2
SHA-256:	948F7600959032D3CFC84F3D644ECA1C26547D28CBB7CCC15A7ACB70CFC974D4
SHA-512:	A6276B18690BD98634ED2F465F2A31FA159367C19C9C842F2A9F1CD3574714967E35F2C8435DBC1224ACC3ED7BABF15C1B50981BF2A1EBA8C2227148C7F9E322
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg
Preview:	.....!Adobe.d....................................................................................................................................................................d.A..".........................................................................................0.. P5@`..2346.p.17.........................."#!2B3.RCS4. 1b..cs..$..0Qr...@.Aa....TP..tp.q...5...%.....................2...!".r.Pb. `1AQq.a.B..#Ss.R..............................................................#..a%Mq......w.g..e..[.g..F......dm&...6..6P.r}c..l.=Lm.Lf..-O..vV..6...&.mlm$..3k..c....`e.}.P...6.P......+...Z....Z....Z....Z....Z...T.....R.3]^..s..#.xjM....B....Zt!....2..h.H.........r5...,q3...8....k..=...;.osaa.........F-.....bLn.c.u...IB..` .gb..`5.....`s..E...%.d-...qo...........)`....56j':L>]...?5.Dv..7.WJQ(........g<....S.c...N........XS..}.W.V...V...].).\].....T\|z/...y_...y[.V.'nX.{.)..v\....jS.g..3......la.bq..7s.0>-\.\%34.V.\.s.._.)Y.....3wX.8._.........V.^c..,.....S.......

Chrome Cache Entry: 484

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2346
Entropy (8bit):	4.03268128956525
Encrypted:	false
SSDEEP:	48:/3Ruld0ijBKHrTqCyOb7EbCO+Tp7pfaKDFP4ToOE/4:5XEgTHyO/EWph9D94kA
MD5:	93FE207C1B9A8C0B94BD6672C011A260
SHA1:	ECA9FC588B9A32F8A965EBA84C956FF36DAB9FD5
SHA-256:	CD34431EB9DFC5CA38EDE89350BE366B641310FC6929CDDEDE93442EDB93C74A
SHA-512:	EDB068CA4F04078FDFD10D4C77DF21B1B1B773533BA72E4C972EA2FAAB708AFF8634A3878C4ACCD5B5A3AF17F222B0204D7EB9A8A9ACAD0DC531E2B6822A0B99
Malicious:	false
Reputation:	low
Preview:	<svg width="33" height="11" viewBox="0 0 33 11" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M0.462 8.302C1.36733 7.59267 2.10933 6.98133 2.688 6.468C3.26667 5.95467 3.752 5.42733 4.144 4.886C4.536 4.33533 4.732 3.81267 4.732 3.318C4.732 3.01933 4.662 2.786 4.522 2.618C4.39133 2.45 4.19533 2.366 3.934 2.366C3.66333 2.366 3.45333 2.48267 3.304 2.716C3.15467 2.94 3.08467 3.27133 3.094 3.71H0.434C0.462 2.87933 0.644 2.19333 0.98 1.652C1.316 1.10133 1.75467 0.699999 2.296 0.447999C2.83733 0.186666 3.43933 0.0559993 4.102 0.0559993C5.25 0.0559993 6.104 0.340666 6.664 0.909999C7.224 1.47933 7.504 2.21667 7.504 3.122C7.504 4.09267 7.17733 5.00267 6.524 5.852C5.88 6.70133 5.07267 7.462 4.102 8.134H7.602V10.36H0.462V8.302ZM7.8167 5.236C7.8167 3.63067 8.14337 2.366 8.7967 1.442C9.45004 0.517999 10.4767 0.0559993 11.8767 0.0559993C13.2767 0.0559993 14.3034 0.517999 14.9567 1.442C15.6194 2.366 15.9507 3.63067 15.9507 5.236C15.9507 6.86 15.624 8.134 14.9707 9.058C14.3174 9.982 13.286

Chrome Cache Entry: 485

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	11598
Entropy (8bit):	7.955372967113303
Encrypted:	false
SSDEEP:	192:/8KZKPR/H7IhxWkNpoVQmZTCMxuRdkn7feK/m58Qll:/8tZP7wxFTSTCMxIdm3euQH
MD5:	5B97CADA95C2D86DE0E78D3767E91753
SHA1:	AB67D872A806D2E2F2E2E9B972AE80B4F89A694F
SHA-256:	BBA19150ED232FD1BB79AD896EC786972E4833782E10D1BC5C670C8151B28BDF
SHA-512:	24753685938F2FF151BC972C6ABDA82814877B6615619241328DFF75EBBCCF79A42F0BC380F508DEEC184610DECDC74B7C5AC8B3CF44D6B31DF9A2D6068615FF
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4..................................................................8(o.$..K..GO..&..Y........}.,..[...0...JY...scM..>.......y....J.....Av.%..._WwwW..hp..k..,.9....y.j..l.{..q..g...k...p,.?,...-C.b?...?..w...6..n.Zw...Y.KO../f2Mc"..[....j...g..k.......I9.Yw.WmK...8..p.> fs.i.>.=....cK...'..5...X.........3..^...HGy.L2..[X.L.2..=..~..W..@..Ab.vb.w.;...t59.....f.Zm.k.PI..o.Bp8...V...y..(...E`....:.x...1.k....P..j.\.........!ZT..m..;o..vD...y.P..y3Kt..8.....r.P.t...-.F.._..^.+....v."?.J....m...T.4...i.v......nB...lO:.j...5..1.].z.>[^GA....M....1..Q=S...P........>...N.Pc.8....g.x.s........&#..4..>X&.......c.....aj0q.5.....-..].!...c.!TA.h..}.}..P.H..0AI.4%.F]...@KO.5...-..b.c...L.)..hF..s.O5..U.A'.!U.9...q....$\.Y.z..:....i.}!~.y.iH..t.....nWw...........`...Y.}....R.L._<...

Chrome Cache Entry: 486

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2532
Entropy (8bit):	7.853709439739501
Encrypted:	false
SSDEEP:	48:YHnrCpFpmvXumB9BU6QTPyODrMOm6BuaJ8lkAk/:YHrCWglPyqrMOm6YaJKl8
MD5:	E416CED55EBB3D5700B8BA1DB47AF2C9
SHA1:	1894FDF6AFA40BA632171F600418A68375F83502
SHA-256:	D6237333BAC7639756FC1709DE1E3F23C31C6C022D548A4D99FE4539B69F87D6
SHA-512:	8C91AE51241CBB827AE99F22318BBD3F46054C99DE8DAD421FF2F2D34962C06E64E7E4F96320FB0F55964C3F1570755AA3902C4C343E3F996B737769D8355534
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...}................................lw}dpv........................................................................................ams..........................................................................".S.........#..'.S. 19..&.+4!2;."+..&.....$.8u.!7..9IP.?...3./8..#R`g.?G>MU)9A.A.. ).$-...Yho1AI.&Dgu\|..Y......Q..)2$5>'7@v..M\c./].1a.(L.R..OIW].:y.6qXgo.?......$......Ucj.-6...FT[AOV......}...G.^kq../....O.4DK....;~Ubh@PX.M.\in......Wel2BJ.......HW_DS[\|.....JY`....'0...anu...my.y...'H.1d.D.\kr.>..B..+S.#<;KR....E..%-...dqx....I.......FU]...LZa-=E........n\|....p}....~......N..F.....J..3h..-....,V....4j5FN...CQY............s.....jw.......;D...#4<....5m....C.q\|....+Mp..........x........u...&/jv{........'>....P..=c.......#2....+Q...ZgmQQ....EtRNS.E..%....^.......n....F..l.;.y.@.....W2b{.i.........../KJ7...M.....q...NIDAT.....\.w...?.t.j......]..\|..7..pI.....#"K 2e........Q....-n....uY.^oz..M...>...9.....O..o..In..

Chrome Cache Entry: 487

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6824), with no line terminators
Category:	downloaded
Size (bytes):	6824
Entropy (8bit):	5.422474605704767
Encrypted:	false
SSDEEP:	192:caqPOLTlI4cTCh/butiTdMo9ti3uBhHynL7AHAVusiUz:jrb/bt5jtiOhMUouNUz
MD5:	563D600EC7123456264B2FAF8FF90610
SHA1:	CF5E20955134BC068EDA12C136187D84915E888C
SHA-256:	621A209428208DF46465D5BC42A0B8E1C3DBA8C452A0C8D4C3B438A7DE585886
SHA-512:	3AD0616E42C03368D16532836A1F387540DB236A40C76CF669D10D5D8823C81D54C132DA23F69D08089B4A0EEFADEEF7C7CD6C225ABFF7ABAD1120A304DD3821
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/adobe-target.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.adobeTarget=function(t){"use strict";var n=function(){return(n=Object.assign\|\|function(t){for(var n,e=1,o=arguments.length;e<o;e++)for(var r in n=arguments[e])Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r]);return t}).apply(this,arguments)};function e(t,n,e,o){return new(e\|\|(e=Promise))((function(r,i){function a(t){try{u(o.next(t))}catch(t){i(t)}}function c(t){try{u(o.throw(t))}catch(t){i(t)}}function u(t){var n;t.done?r(t.value):(n=t.value,n instanceof e?n:new e((function(t){t(n)}))).then(a,c)}u((o=o.apply(t,n\|\|[])).next())}))}function o(t,n){var e,o,r,i,a={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function c(i){return function(c){return function(i){if(e)throw new TypeError("Generator is already executing.");for(;a;)try{if(e=1,o&&(r=2&i[0]?o.return:i[0]?o.throw\|\|((r=o.return)&&r.call(o),0):o.ne

Chrome Cache Entry: 488

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2059
Entropy (8bit):	7.581698543898619
Encrypted:	false
SSDEEP:	48:pD88uHMlvFgi7nk2VcGsG8XR5NqaQSJ6IoaBHWf7p:V88nF57kZGvue7p
MD5:	6CAC3D75FD69EB47E5CAC3BB799B4948
SHA1:	867FFE73329D6BDF0205279FBCF4E2243389B025
SHA-256:	0389B1EE4BA2538864F5A9064AABD80CBD703D6DC6786B05CA135C66EB3C6680
SHA-512:	B9625FABADF84EF96B56857C19F376109E20288169FB9FBB35EEC7554008AE1DD481B902FE79BB9DE8461367648861519C10CDB307BDF16C61473662F8C217BE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpLprqprqprqprqprqprqpqqprqprqprqprqprqprqprqprqprqprqorrprqprqprqprqprqprqprqprqprqprqprqprpprqpqpprqprqoqporoprqprqnppprqprqprqprqprqprqprqprqprqmoooqqnppprqprqprqoqpprqprqprqprqprqprqprqprqprqprqprqkmnprqprqprqprqprqprqmooprqprqprq]v...?..B..@..A..@..AWn.4BoZr.prq..?[s.04OBFY(-K.;g..F$.Y."LJ^.%/Z..D7Es\u./<h0=i..A..C%0[Qg.\t.H[.Tk.6bmoo9Hv!Tbdi.'Q..E.!J9Iw59R..C%)IWZdNc.#'H..GkmnVm.TWb )S3AmOd..$N.$FikmK_.RUa"&G..BOR_)5`Xp.;Ky=AVYq.X[d..HRh.Pf.Wn.FY.@Q.CU.Si.2?l[t.5Cp. I>N}Si.Ma.&1\5Dr.#M.&O,0M-9eLa.AR.?P.@Q.CV...Bjmn-1M<LzXo. %G9<T..C]_gkno7;S`ci.#E<M{!+U.'PEX.fhlAEX2@mIL\&+JUXc<@U26P\^fVYc.!DEW.37PBS.oqpYq.Mb.7FsFIZ1>k8Gt0=j/3OH\.4Bn.LTj..."8Gu,7d?O~dfk',J.2N9=T;>UK_..$M#-XPS`lno..@La.CT.(3_.O....z-..?..~>MxQB7yqeL`.%.Y",V..eaN5..+kz.kr.$#=..g..A[s........NtRNS....'......j......H.\=.zE...4..........^...2........".q._D..&...b:...8....M#...lIDAT.....\|.....w.zt...]..S....X1..cccEl4..Iww..n...[........?}.....i9..aT.1...P..+.T8.6...

Chrome Cache Entry: 489

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	201920
Entropy (8bit):	7.999143414466546
Encrypted:	true
SSDEEP:	3072:1ybEPMu1B6VJ0I7R5ltF5qgnxFuKuC0bTyWOcLy50qo/7SgTMtrPBg3GKfjCXk8I:1TFuHldy+EuApqo+btruNfj+jM
MD5:	80BB6EB1BD83A1741461B24C97E04182
SHA1:	4181E543043AE60BACA2D2B2EBDF68A3C52E6B65
SHA-256:	382FA70B7B580930C1EE8F41A259D3B5460CA6BC33C16C73041B591365AF9AAE
SHA-512:	09A46CBE058D80443863D0BF9DD259A55DD4AE086BB9E8282E4C3B5281CFA98ED18D026A75FF840EFFB8D17F30CB3E89EE44A37C8C2879CB2CE9E70CE8F0CC5F
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|..`...../9..j..wUw..q.&8..w.......c13.S..qA R...........-..."..#..PPF......L..%.!..P.T.........npp..f0......E..#..S..".X.........^....2..`.Tz..4.m.j..\7......u~...T.....1a.M.:P....c.n........{...N_51?I..5.....b~A.....m#.9...ky.+..Zv...fn5.l2.ub.}...?ek{.v.uqE.F..Jm..o..%..3.8\U@.<.HP"....;...ma...y..c~.gK.?4..7v..u..3.....gom<1.o..t.......eO.......`+....5..1.H..]....%.t..D.d..MbG.i.{..3..6^...#.pA....c...U....q6L.....R..b.....,{.m...g...N.e..AD......O6..vk...I......2U]...R{*........-b....._....X2..JP..^.9g.d....\..G..(...K......vwR....].{2.d....@.6H.. ;.xjA.y.....IX..Y.A.PS..]x.o.YBW'.YK....

Chrome Cache Entry: 490

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 491

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6415
Entropy (8bit):	5.8904535942040415
Encrypted:	false
SSDEEP:	96:/o8wpUZTC3u7HXC3u7HCVBEVjypa8DJe8RP5EAFHULWEous5C3u73Y:A8wpIC+LXC+LeOca0k8LEAFHYoueC+k
MD5:	AE9980237FFD402484D91B6797E6B06E
SHA1:	DED63BD3D782F0879C2609189245E287A16BA16E
SHA-256:	26CEB2F00DA2CC600809976F7D9D06478BAC18326D52175AC42AC5D878D45886
SHA-512:	324EA48E54A74156F967BE64E9A812291AF16BA11171C248536F24BD618AA6DC63318A6FDBAD6FA10582CC16C1518C93F2E69AE8356891DB650A372A02612F04
Malicious:	false
Reputation:	low
Preview:	{"query":{"results":{"mediaObj":[{"id":"3caca4ca-191c-3933-bab5-595ca1d1495a","meta":{"attribution":"","description":"A winter storm is slamming California, with parts of the Sierra Nevadas getting more than a meter of snow. A busy interstate has been shut down in places for more than a day.","title":"Winter storm wreaks havoc across Sierra Nevadas","genre":"","embed_rights":false,"duration":68,"url":"https://www.yahoo.com/news/winter-storm-wreaks-havoc-across-084101934.html","thumbnail":"https://s.yimg.com/uu/api/res/1.2/PVU5gM.eKAfa6cKZLZNPDg--~B/Zmk9c3RyaW07aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_videos_177/755b42ce7295132b4d278d6cd57b891f","create_date":"2024-03-03T09:20:14Z","provider":{"provider_id":"cnn_videos_177","provider_video_id":"https://www.cnn.com/videos/weather/2024/03/03/exp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn","name":"CNN","url":"https://www.cnn.com/","logourl":"","publisher_id":"e695711f-6d67-39f2-a2b7-8aa69bdc8df

Chrome Cache Entry: 492

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.158910906366989
Encrypted:	false
SSDEEP:	3:U3KTDWuvMiLLUHc6n:HnNLgHP
MD5:	871EAA0EAD96AB6E2ECFF262A6F3577A
SHA1:	D7A8721D6FF7CC5C444CD39733B1B60222090A39
SHA-256:	566CC1D59F8457DE6A57A3F8F1854870B1D2C1F6737C56B0FAC7BAFCD36492DC
SHA-512:	469047A46B501AEC27B37C6B1CE0F82AAD1788C96962C4A28EB2BB9229A106AD3320722962130949431B5BCC378DE957683BC71E65DF5057D2AD39F3F6221FF2
Malicious:	false
Reputation:	low
URL:	"https://bam.nr-data.net/1/NRJS-28dd4dd46c9904028da?a=6979107&sa=1&v=1167.2a4546b&t=Unnamed%20Transaction&rst=19220&ref=https://help.aol.com/&be=2974&fe=18606&dc=8095&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1709508422918,%22n%22:0,%22f%22:4,%22dn%22:121,%22dne%22:230,%22c%22:230,%22s%22:234,%22ce%22:508,%22rq%22:534,%22rp%22:762,%22rpe%22:935,%22dl%22:798,%22di%22:8095,%22ds%22:8095,%22de%22:8149,%22dc%22:18606,%22l%22:18606,%22le%22:18626%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken"
Preview:	NREUM.setToken({'stn':1,'err':1,'ins':1,'spa':1,'sr':1})

Chrome Cache Entry: 493

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	10990
Entropy (8bit):	7.952633059433893
Encrypted:	false
SSDEEP:	192:gLXnZGKxRKKyi2Q2UPm+85aEOwkJQIw7XUUt5s+vzva6ArUD9zqn+:g7oKxRdyne785ZOwkJQIO1fz7vt0S9zP
MD5:	F6FED589AD1AB02970DDDA415D24899A
SHA1:	0A746373882A375A17622262D169B4693CA0BA3D
SHA-256:	E33BBDECCA9A0ED7F82E42B35E4AD9C25268312BBDB1B47AF9124CABEF678A6E
SHA-512:	83D8AE71D3DA3282427D148E4931ECA7FFD7589E5106769028508DD194A6257CA0F1ACA5A442A657145736EC64338AA1455BB1559B842548594B9DC1BA922CFF
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/55s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/55s/match/image.jpeg*~hmac=c445700760c6e8fdda85516f8bcd55a3151a3843cb279870a440435c3f0c222d
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE...........".......................................I.........................!..1..A..."QUa.2Tq..3S....#&BR$6Cbr%45Ddt..u.................................1........................1.!AQRaq.."#....3r.................?..!<#.-..B.4!...D..D.B..Bh...&. .. ......PV..B......B.....a.B..M ...i&.a4.a@.NL$.!..A4P.!.s..\.:.Wl...Ut...;....d......n...}.zN._,.XG..A...l...B..[d...t..]..4..Z.1.8.d....2..6I;.a.F....7$.lR.n.~.#.A...Gx....m[i..&\|..679..\.w..WG....ML.t..(.F2yY-q../...J-.l........^....2J... d....d.............5.:...gd.....z..(..~.'. ..X`.R...f.I.4~.F.. ..7.G.],.z.....8.5.M..w$...=...Qm.....v.?x.C.,...+%.t......i..rO..cl..H.SJZ...t.....u.F..e(..~.)...85..O@..S.D.u..Lt.C.L....FA;..z.....%...g....y.(:L...-....'.. .Tp..a.a.Z..XW.P-.+IH...$..!...P.!@!.A\....<.kp.I..a4...4!..@B..&..0......&..

Chrome Cache Entry: 494

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16545)
Category:	downloaded
Size (bytes):	26028
Entropy (8bit):	5.122368948706005
Encrypted:	false
SSDEEP:	768:34hvl2qRhHiuIMaU2AO2fTt14Bo9kmosGJuCslcq+PE/S0AjGMyxlYyskgNO3NEb:DTYkmpluPEa0AipxlBT8
MD5:	C167CC2C7C7EC850A0A7092688FF129D
SHA1:	7D4E39EECA3CE2AE523CD0888C53EEAD24369CA6
SHA-256:	A11EA647F95A0F0AFED52714B759929C5C8CBFD789A4F1B6B55D7D75A46433E3
SHA-512:	AB3C82EADC889D0112DD80B9C19345FDD5654BD6726789D743DF940A40813638F1F4EE93F6D32A495C9CD9CAA1CC095C3FC83C407331A935D7126E75574BBFC0
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-bc-playlist-ui/5.1.1/videojs-bc-playlist-ui.min.js
Preview:	/! @name @brightcove/videojs-bc-playlist-ui @version 5.1.1 @license UNLICENSED /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("video.js"),require("@brightcove/loscore")):"function"==typeof define&&define.amd?define(["video.js","@brightcove/loscore"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).videojsBcPlaylistUi=e(t.videojs,t.videojs.bc_)}(this,(function(t,e){"use strict";function s(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var i=s(t),n=s(e);let l=t=>{const e=t.playlist.autoadvance_;e.timeout&&t.clearTimeout(e.timeout),e.trigger&&t.off("ended",e.trigger),e.timeout=null,e.trigger=null};const a=(t,e)=>{var s;(l(t),"number"==typeof(s=e)&&!isNaN(s)&&s>=0&&s<1/0)?(t.playlist.autoadvance_.delay=e,t.playlist.autoadvance_.trigger=function(){const s=()=>a(t,e);t.one("play",s),t.playlist.autoadvance_.timeout=t.setTimeout((()=>{l(t),t.off("play",s),t.playlist.next()}),1e3*e)},t.one("ended",t.playlist.autoadvance_.tr

Chrome Cache Entry: 495

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1889
Entropy (8bit):	7.695402676147266
Encrypted:	false
SSDEEP:	48:+xngVD5VX52u6iNKClFIOygHPnGWHOw018K:y25/twAI6PGWHO5
MD5:	04350280A37B2459937905A48569A857
SHA1:	7C1EAFAC8B52A4AB2262EF2E3F5E07F22CC350F8
SHA-256:	2A906AE89967F079BA6DDE71AA26DD05D89A913D3BD75F082800DC98319D9DD5
SHA-512:	EC7375CD29A8E4D4D303754B75C78CA855E0414DC65A26844BAF88724E0A4670EE0DFC4EC719629865B4D56A70E305AF42C54FFAE13394A62F56C6D618090CB5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.....................................................................................................................................eqvoz.......\|..`lr..............................p{............................................................._kq...............~..............................lw\|..........................................................................................u.......".....KX_+<C..$6FO.!..'..#..&.(1. (\|..:KSWfn....$,"4<.&..2S`f&6>."+..'`ov(9A...->G..$.....1BKRai...EU\K[b8GN./7O_g7FM!3;.......,4hw~...]ls.....>MT 2:ky.....08cou?NUUbh.......0@H......+<Cet{7HO...[iop{.]io...grxr..BPWdrz.........09JZbFV^<LTHX`9IR...}........Udl4DKp~....APWgu}...m{.-=D{........z.....5FN...apx...t.....y..BRZ.+3$5>N\bkv\|HV]...t~.t.....jx.7s......tRNS....Y..9...TB..X.ry7.(L./E1...%................$...<.a....P...]mx.`..4....W......s.."..,..^.J....wl.......O...t.....q.....,......IDAT.....t...../i..w.!.a+0(+.......

Chrome Cache Entry: 496

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.223368771981933
Encrypted:	false
SSDEEP:	3:U3KTDW3MiLLUHc6n:H6NLgHP
MD5:	F1347FB5A48AA938D383EEA39A3C09A7
SHA1:	441EF0CB23AD23ED8515438065429315594D375F
SHA-256:	978CB457B9642722B602AB2F8442966B720F56959197ED53553128B628876C99
SHA-512:	2C8C493017F971C48C55B82D51BF76CC76C849C53B2E5DC20B1A743CFA12AFA822668247230B04A613036B632C5EC5805F31C8300711278FF2D53BD56E7C89E0
Malicious:	false
Reputation:	low
URL:	"https://bam.nr-data.net/1/NRBR-ab125fdc9220e811103?a=658130534&sa=1&v=1208.49599aa&t=Unnamed%20Transaction&rst=40573&ck=1&ref=https://www.aol.com/&be=2695&fe=39485&dc=7144&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1709508386967,%22n%22:0,%22f%22:3,%22dn%22:42,%22dne%22:123,%22c%22:123,%22s%22:125,%22ce%22:363,%22rq%22:364,%22rp%22:868,%22rpe%22:1471,%22dl%22:1059,%22di%22:7143,%22ds%22:7143,%22de%22:7174,%22dc%22:39485,%22l%22:39485,%22le%22:39491%7D,%22navigation%22:%7B%7D%7D&fp=2897&fcp=2897&jsonp=NREUM.setToken"
Preview:	NREUM.setToken({'stn':0,'err':1,'ins':1,'spa':1,'sr':1})

Chrome Cache Entry: 497

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	984
Entropy (8bit):	5.37207944848264
Encrypted:	false
SSDEEP:	12:6v/7EZoDl/f8XvBNo/IqlBLhAjIPmzpY+hoN3xv:+sBqlFhrM2Nhv
MD5:	9A4101980859C21B2FFA8ADCD6788916
SHA1:	3CF976142C2B94E4DD0EEBB45175F22B89C44FFA
SHA-256:	C95AF6C2ED68F2D843490B6D84CA16D0ADD89C698D2FF27E10D0B1D7F0A9CF3B
SHA-512:	03102CDA14C10CB88DB6BFB2860D6C2453239D77FA1B8D21C11938DCBD90B06595DFEA7EDB38BD41C1363D053EB0B1C6E52FFCDE030225BEAD4C05AC479DE772
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fs1b.xLIhAHSp5WYuo1r1mQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20231120%2F500x500%2Fjazz_wbg.png&client=76f99bdb8f78cd44cc0b&signature=36a5d8fe3c3121052fc12b91fcf57994a0b7f32c
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................................................tRNS....t..@.......,.E.=W.....h.Z.$..9..S3uN.....c....J.P/y.2CfUiF.5.D..A1....&\|.....\...b..d..s.Y.)...#......0.n..8.wM.{.zg.K..+..r.'...\|IDAT....US.A.....@./....#N...=...SyLO..H..h.V.P.R'.V\.^......E....S....c..;.o.......e.....P.xg...?../....).iS...Dc=mu..g....pk....h......s.0.VG...W....2......&.......D.........y=...&.........\|.....d...IyU.s....>..5...Z.....'..N.M..r....r`.S..)k.{..J-.WY.J0.......:..%x..KK....W..........@..$...}.&.....u7v..L.u.\|...e.c..kz>.J...&.j.Te.L.2&...*..v..m[..=.....8.....IEND.B`.

Chrome Cache Entry: 498

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1123478
Entropy (8bit):	5.49316830880204
Encrypted:	false
SSDEEP:	12288:SsWM/YrkCAhX3hNnEW7rBPPdZgNELtYaKVNGY+baSI+HN6rj7qZ95jtZYXnl:7WPtAhXznEE3ZgNIObQY+brntsj7qbM
MD5:	F52CF74DF8AED9A1FDEA56EB493F4F06
SHA1:	251FEB868A73305B47D889DB0590DDB28AB7A31B
SHA-256:	B1B69126902BE4D29D6506312471C95A2CE1A7FE10D409B5B90AC913E6E1D73A
SHA-512:	05FA6FEB91D69D716E1A42916027F84789F168A66FFF7A16E5B3A661375FF78F2B94A131E3EA58546141915052A72E67A0F32019B6809D6F2E1906765787FC8D
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/6415665815001/8tDK7OitG_default/index.min.js
Preview:	(function(t,i){if(typeof define==="function"&&define.amd){define("bc",[],function(){var e=i.apply(this,arguments);t.videojs.log.warn("DEPRECATION: Using the default named RequireJS module in the Brightcove Player is deprecated. See: https://support.brightcove.com/requirejs-and-brightcove-player#Future_implementation");return e})}else if(typeof exports==="object"){module.exports=i()}else{t.bc=i(t)}})(this,function(e){var t='.vjs-svg-icon{display:inline-block;background-repeat:no-repeat;background-position:center;fill:currentColor;height:1.8em;width:1.8em}.vjs-svg-icon:before{content:none!important}.vjs-control:focus .vjs-svg-icon,.vjs-svg-icon:hover{filter:drop-shadow(0 0 .25em #fff)}.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.video-js .vjs-modal-dialog,.vjs-button>.vjs-icon-placeholder:before,.vjs-modal-dialog .vjs-modal-dialog-content{position:absolute;top:0;left:0;width:100%;height:100%}.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.vjs-button>.vjs-icon

Chrome Cache Entry: 499

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2513)
Category:	downloaded
Size (bytes):	398986
Entropy (8bit):	5.53107031287411
Encrypted:	false
SSDEEP:	6144:YrUbJ4/OHbQD9dXUx+m17JIsKNB3gR+LUQH3d3D:yOHw6+m1VZK7gR+LhXdT
MD5:	5CCEACC3449C555C93819897596A3685
SHA1:	014E8E19C48F1A7337BD01FE105BFE388B990F6B
SHA-256:	85065CE1E51D04FF846A1E49456A367A768569C8A1F421F24DA17603E45ED2E5
SHA-512:	9E1CAFA09B78B85578183961DA6C86EB994A55C21D035C6EDDB4568F0245DA2A59F283E98515D1135E72BB325B48EF5D79C610F4572235A31EB922EB67EC91D4
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/sdkloader/ima3.js
Preview:	// Copyright 2011 Google Inc. All Rights Reserved..(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_sy

Chrome Cache Entry: 500

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31051)
Category:	downloaded
Size (bytes):	31162
Entropy (8bit):	5.152946832845909
Encrypted:	false
SSDEEP:	384:5mCzVibnt0rpuGWeQZfsZWDGYK8evKCw5KWKGce3AtHvoyoT6+2G4AcLNteihVgp:5mCzantoxBCgUpj4vXeihVyhD
MD5:	41C2233C6591D1E1F54E3B7C1AF8F209
SHA1:	9D649F7F3EB0E8A324D37E51EBD8874F6CF01955
SHA-256:	72A05CFE781DAC37AA4375905FB083A553BC58A9D6D047B9A9B76F349A01888A
SHA-512:	097810E719084A7AB5605603404F72A79E40EA467F9492DE2B30EF960592B75D8412EBD9E9C8CA3617EBE99B54FBCD5B35F1FD356009B8AE9B0BC39498017D52
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/vendor-glide.41c2233c6591d1e1.js
Preview:	/! For license information please see vendor-glide.js.LICENSE.txt /.(self.webpackChunkCAAS_AOLCOM=self.webpackChunkCAAS_AOLCOM\|\|[]).push([[3414],{4134:function(t){function e(t,e,n){if(e&&!Array.isArray(e)&&"number"==typeof e.length){var r=e.length;return i(e,void 0!==n&&n<r?n:r)}return t(e,n)}function n(t){return function(t){if(Array.isArray(t))return i(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|function(t,e){if(t){if("string"==typeof t)return i(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Object"===n&&t.constructor&&(n=t.constructor.name),"Map"===n\|\|"Set"===n?Array.from(t):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?i(t,e):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function i(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(va

Chrome Cache Entry: 502

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.496574330097901
Encrypted:	false
SSDEEP:	3:C/2A3njBWk9JyiA:C/nXjB7A
MD5:	1B177A4068E01AC77B85B091C87251BD
SHA1:	EA7A08A7C139D4A7512B6BAAB5AAC4A3E288B255
SHA-256:	F77F47058428A1C21DAD5A75AC13FBFDEB9858947218FEE2112FDED5972A0B5D
SHA-512:	6E6D693775AA9C94540D0CA0549C98446048189D49A3716895F62C3EFE3893F0B28FEDACDCD46394782B7972D0B981E87EA291E76EF2490258FCABA2A0906D92
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId
Preview:	window.advBidxc.mnetRtusId({"status":"Unknown","userid":""});

Chrome Cache Entry: 503

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59752)
Category:	downloaded
Size (bytes):	358773
Entropy (8bit):	5.506460826521276
Encrypted:	false
SSDEEP:	3072:q2BufEoRluZLonE87MHC/XlPfB2HbcwMAlLzQsHbDlnD5VglgBNIdo84I:3klkLnOXlPCVLzQs7DlnD5VOINId/z
MD5:	CCDA61AE4B12643D239837FAE2B7261D
SHA1:	F072A3276948691B84E4E1B9910EAB98FD2CDB6D
SHA-256:	6A0DD3C1EA1683F67DC8832D39564E2059DE1BD092FE30FDC09A307BA0E50D23
SHA-512:	B0F513D959A5580FD1391849EFB16B6D50A65B6AE1ADDA0A21143FA943D1D81B56480FDA7B4459A1D1A9614C1EBAF25EA8EB9CA460A2AF514B1EC188A4DAEA19
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NB4W2NQ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"180",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"cat"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"namespace","vtp_name":"u29"},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"ProductName","vtp_name":"u9"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"hashedguid","vtp_name":"u1"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"PriceOffer","vtp_name":"u10"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"orderID","vtp_name":"u35"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"orderType","vtp_name":"u47"},{"function":"__r"},{"function":"__u","vtp_enableM

Chrome Cache Entry: 504

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	17762
Entropy (8bit):	7.9750760764874595
Encrypted:	false
SSDEEP:	384:6zSa3Sbiy28GdGriiRJZr5x1jLysVe2vvPfJF72MpML1mKbhL:+deAGrdHe2vvPzpMrx
MD5:	E261E96AAA43432A9B52BA249FC0B0A6
SHA1:	4EB97150306C4F608A495BD1201C03D357070BE7
SHA-256:	96CBE2C69F184EED8526AAD4CE7239628D495EBC4B1F1C8285A4235367CB2CEE
SHA-512:	8109FDF5171E8E4E3734094D6CC36161A16CC05889CFB91C7258A34A91E3F21E2AB173F324D1C8744177A95C1542A8BF71C846FECE5231F68D14C872D45E73D9
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F134e3c2d76e50e2077e2333085803fe5&client=76f99bdb8f78cd44cc0b&signature=1a4991d023817a51a24a317737b8d7a9a50e740c
Preview:	......JFIF...........................................%......%!(!.!(!;/))/;E:7:ESJJSici................................%......%!(!.!(!;/))/;E:7:ESJJSici.........,...."..........3................................................................}.{>W.....{.=.xH...]n.h.a.Z.Uh.w..sn.a....H.P.TK?.hu.......k.s...9....~..Y..Eu............M.]..k.I..z$.............P....+u.CdF.....C.LEg...j..l.h8....OL...j;.Y.C...q.q..4....t..4.37\#%\|9.e04n.N.B..0.O0...6.p....\|.}.:...l3..].Q4^{...h.Vp..flkN<Ylm............: .Z.T..1...9Q.j#.G....`5.~...[.Y3.z.J.....,dy...Q....).......b5...~v..u..,k....d....Q...\pb....u..?.......;Y#..9..%..l._m..Vx5.5...]d.C...j.qI...$.cj...Ow!>.H.}].....,.9.Q..8F.....uv,.}..Fm.e\|.V}....M..g....J.hIPj!F.bd.$..M.Xj,...k...U.Oo-g... .@B.......U...\|.=....0.n......zm.O%.M",.(..~..,.KF...IG....G...h../L.......4.T..A.6.b[..2.4n.+..^.v...3.......4..A..A......U..3.....,.&.@b...<.sd..OD.;.(.l...o).....{.l....F.X.w...$^...D...zhk;O&4..wp....!.a].w<

Chrome Cache Entry: 505

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFRDNTVVTlYtMUItMTNSSA==&google_push=&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 506

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=133&external_user_id=VrYooxROk2iWhZayXuk_OT1S2cFU4tRdIMkcva8DRMA&pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZeUHNEt3uSYAABBfAETINAAA%26015&tc=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 507

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 508

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEOUXsq40wyL1RuRxz9UqLQE&google_cver=1&gpp=DBAA&gpp_sid=-1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 509

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	198912
Entropy (8bit):	7.998915273219039
Encrypted:	true
SSDEEP:	6144:tEYRTs0xjVSkkrIf0Jdvb40d7+8elWuXLz:tExwjVSkkr4idvb4Dyu7z
MD5:	40D9A5937AF186DA3E0A3080FE200045
SHA1:	F19224AC65237726118A5C3D382DDFE77D1AA15E
SHA-256:	47DD60D66E54B6C3FC2307B4264C34A3A4A943EEAD6680F9D3F62FB07A682C2E
SHA-512:	2E2222E93232957CECB3B83F45ECD7FAA33083D9AC9F9E433279A7D3E43A69C8C2758C2EF60322F34FE1ADE8399524200D4B8F8F87952B17739690B3BF1A8027
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment3.ts?akamai_token=exp=1709530992~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=7534bc794ac65c76a4c3cd4d86ac72de97dc36896cc1e4fb92e407fe51e1d398
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|......!f...h....F?....T?....bV.H.m.W...R.\|8\...^.f.... ...\.....e6..........g"...Tzf-JY}.<&D.r..Ar...K..h..d..;.z...&.U.....'.5..WR.B.../...T.5...D..4....S<.#..0lR9a...r.............Vm.N..1N..5.2.}.t..%..^q..-"@.......e.`..r..H.$w..5^XG.....=.......j....S0...V)...m...Fn.G...._.&...A..u....yxh......a.@.9.....{....nzu].W#...#3...j...-j.... Q..6.ah...1. \h.....'.B....^......1...Ibk..=.X.0m.O..ud..f..a.T5...eL...Z`.P.2.......C..)...e..(]D6..".~..S.....Rre...s.H.%w$=.@..zi......a..`...=u.4.I..p..D....=.[#..H.~......0.Y[.8.,.V....r,f..ok..S.-[.W\|p.@\|.....J@..@......QZ~...H.r$.,.a.\.mV-.c.F...

Chrome Cache Entry: 510

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=0&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 511

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	47074
Entropy (8bit):	5.97638996400018
Encrypted:	false
SSDEEP:	768:RQ+9Kh+Clpxixm7yhemwuaSyqCH8CxtWNTUVgOUVCzlx5+lL3mY/RomRz4II+dme:Z7mGNoViC5x5+lL33Rwe
MD5:	88501736DCDF8070710E9325E9E41218
SHA1:	33AA2F621BBE7061BAF1921B640875DE542885E0
SHA-256:	B31217A98F5AC23BA8F6AD55EF3AC25020474C3F66A72D117E43098736E69365
SHA-512:	0F38B411509A3983DB74A3330AD3AB9268410C32315DE60EC6DFB7052FC5550DD35942A5151DBE651608C46C49E2D8CA222205ED2AA580C46D1E240CFB25218E
Malicious:	false
Reputation:	low
Preview:	{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_as_top_right_c":["html",1,null,null,1,600,300,0,0,null,null,1,1,null,[138433014580],[6298088822],[5307966191],[3200313979],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGskO8XT6hnUSJtKl-xx9bJIqJGQZyBHKUeCB_r2G6iUtPW8hzKditD1ruTBIRTVWOayipiG4DagPvVHgvpjbky1uVlZOBjA6tRl_Adr-5PO7enDwzwoQx5fdHw","CKCwsaCf2YQDFVEOTwgd2MIMdA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script src="https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js"></script><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240228" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb~"]">(function(){'use

Chrome Cache Entry: 512

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1502
Entropy (8bit):	7.566460815417501
Encrypted:	false
SSDEEP:	24:5TcamJ53/ySSzoUdAVZcihIAlDHhswnUXDm4KYCYAKeFgFZj0dSm6XQ/WVNQAEXc:Ncam33/azoUdSZH+MtDUTm4aKucV5QeJ
MD5:	C6DB42F786C5549BC2BBF3588F87D728
SHA1:	6AB08F5629BEDB310CF0055AAFBD1DF79FA2AE5F
SHA-256:	BE3086D30719F2410C220C32B308696A6F475BCA119E25CEA52306204442E85D
SHA-512:	ACEFF688C7ACE14C442418AE4188B0E037D42463BF26D44A2BEA158DFF8F37E9DF2B0D015FE933641AD611A2CDC64C8FD3CFFC295599563D58B7080E7CD1B873
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.{Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z.~Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Zmm[]c[..Zkk[..Zvr[..Z..ZX`[..Zae[..Z..Zkk[..Z..Zom[..Z..Z..Z..Z..Z..Z..Z.x[..Z.}Z..ZS][T][.+\..ZNZ[.,\.1\.;\.6\....?kQ\[.{[.2\...-F\2I[tq[$A\..Z#@\'Kt\|v[P[[.:\..Z.3\5K[.=\0H[D\8M[.-\..ZGf.X`[`e[jj[T][...Aa.]c["?\FU[p"J. F...5W~......U^[pn[..Z..ZKX[ET[/G[./\.0\6L[kk[..Z7L[1I[_d[.=\1T{.4cV_[ >\...,F\..Z'C\>P[[b[.Cmn..q..u........{u[...@R[w..:N[)D\..Z.?b..ZHV[kro#EhYa[bZX~w[...GU[..Z\|..e1O.Qy..ji....Z..%FisKR./_+E\....ZbFTs..d&O0S{org&EdA&Q...F%Q...Mk.....E.1a..ZD^.c}..)X.7]...bt.....2b4V{Yu....\l..:h.}[.....Z8Wy...h..x...=h>]~Pm....>Ytml[@ZtT^[H2S......G1S...!...=tRNS..6....S.$}.B..h..(z..\|..yD2M....v.p.F..p.1....?e:..G.......eD.....IDAT....eS.Q....R.....e<w{.Ej......nP....n.n...5...0.~.s....)Cc.s....Mks.cCt!.=]}.`......+.33........`#}]=...~..........[......b..B...C...n...9....9....u...E..v..wXa.{.+1.m!.e.u.i..S..Z..5U.....^. `.&m...}..

Chrome Cache Entry: 513

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 514

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15264)
Category:	downloaded
Size (bytes):	15697
Entropy (8bit):	5.53729719471769
Encrypted:	false
SSDEEP:	384:uQTCfjv99mW+911+Fl0YD0Dew/X2q5ulRIUeT:uQTCfGZ1+Fj9w/XuuT
MD5:	E2202E6ED6EF52CEC2C4A875C99225BA
SHA1:	FD48D3157CFA6B6E6FEC3E50787E357AA3288C88
SHA-256:	F2CFBD195DFF011843F93E2D32979F6F07926211CBF3EDDDC3B708B0BB04C8A2
SHA-512:	4E2AEFD87D89F4D5C00CFCAC8EE2D7748F84979BE9E66272475A621A19BA8FC884737DF604B3B7344FE4EB0C1154819880BC3769E25798BB4ABDDEF76EDC9B4F
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/assets/js/vendor/rapidworker-1.2.js
Preview:	/* @preserve. * $Id: rawdeflate.js,v 0.3 2009/03/01 19:05:05 dankogai Exp dankogai $. . Original:. * http://www.onicos.com/staff/iz/amuse/javascript/expert/deflate.txt. /./ @preserve. * Copyright (C) 1999 Masanao Izumo <iz@onicos.co.jp>. * Version: 1.0.1. * LastModified: Dec 25 1999. /./. @preserve This code contains an altered version of the original source and is not meant to misrepresent the original software.. */.function base64(r){if("undefined"!=typeof btoa)return btoa(r);for(var t,e,n,f,o,i,a,l="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=[],s=0;r.length>s;)t=r.charCodeAt(s++),e=r.charCodeAt(s++),n=r.charCodeAt(s++),f=t>>2,o=(3&t)<<4\|e>>4,i=(15&e)<<2\|n>>6,a=63&n,isNaN(e)?i=a=64:isNaN(n)&&(a=64),u.push(l.charAt(f)+l.charAt(o)+l.charAt(i)+l.charAt(a));return u.join("")}function lzw_encode(r){for(var t,e={},n=(r+"").split(""),f=[],o=n[0],i=256,a=n.length,l=1;a>l;l++)t=n[l],null!=e[o+t]?o+=t:(f.push(o.length>1?e[o]:o.charCodeAt(0)),e[o+t]=i,i++,o

Chrome Cache Entry: 515

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	13240
Entropy (8bit):	7.957327441997066
Encrypted:	false
SSDEEP:	384:ToZesEOzfKnnJLvLNuUbRdooDG2aAnxYUWhx+yc:UfLzSJjZtVdooD2+6M
MD5:	813851D8420C823669E69379A2C5B8B4
SHA1:	EC8FDFD0764B31AE6104E67E50F5FB6538932B7F
SHA-256:	63E228ED70AD12C65BAF20ADCADD5FFDC6FBFAB8840B751ADA5C70FEB17E585A
SHA-512:	861E51D968F131565D302E0B8A7DE2BE2421074690874865FD8EB8AE1BA79373B0C371DB2C2085E5D937313880509330F80B0BC710B7462CE7ED561E7C708706
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/45s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/45s/match/image.jpeg*~hmac=d40fca5637017125b7c185ceaa35d9a4a9457dfe96b9780723ab579282b5f96a
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE..........."........................................M.........................!.1..."AQ.2Uaq.......BS..#3CERT.$&6bs.'4Drt..%cdu................................/.......................!1.Q.ARq."a.....r.................?.h.$.W..R.i(eP.....I.4.,YS...(Z...-J.= ..Q..x.&I...(u!..Mz..(.K)..8i.I..%v..YA.S...EQ...RJrB`]#..A..(........S..H.j.sPL....S.VT.Tn).L(.Jo4.KZH.\....."....V...}....{....a\|.t.......3.rN..g..;G;Ii.3\|.Q+V.....K..`.I%..$.....6.8..eC.i..z.7W.v..........rh.ta.....k.t..g...>.N...u..........t.f.]L.4..Z.1.8.T....GMK.$......Frs...F6*.6......u.?x....54T-.e>........nt..3...4qY.m....H..5...Z..=..M.X.~.%. ..Q.X.K.$..)[9..I....$;.....;....\..hsX..0...-:.;7l.\|..6w[............S4RH!...$m~....?.>Jie......a."m-{..rs..\|.F.:....u.?x.C..VE....:MRu...4...'.rR1.F.$m..-y..>... ...}^..uT?......5.

Chrome Cache Entry: 516

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2059
Entropy (8bit):	7.581698543898619
Encrypted:	false
SSDEEP:	48:pD88uHMlvFgi7nk2VcGsG8XR5NqaQSJ6IoaBHWf7p:V88nF57kZGvue7p
MD5:	6CAC3D75FD69EB47E5CAC3BB799B4948
SHA1:	867FFE73329D6BDF0205279FBCF4E2243389B025
SHA-256:	0389B1EE4BA2538864F5A9064AABD80CBD703D6DC6786B05CA135C66EB3C6680
SHA-512:	B9625FABADF84EF96B56857C19F376109E20288169FB9FBB35EEC7554008AE1DD481B902FE79BB9DE8461367648861519C10CDB307BDF16C61473662F8C217BE
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh6tcrfyHgrC03ICBoahgsA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fgrizzlies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=8366ef9893f0d8b51d992acf051eec22695c38fe
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpLprqprqprqprqprqprqpqqprqprqprqprqprqprqprqprqprqprqorrprqprqprqprqprqprqprqprqprqprqprqprpprqpqpprqprqoqporoprqprqnppprqprqprqprqprqprqprqprqprqmoooqqnppprqprqprqoqpprqprqprqprqprqprqprqprqprqprqprqkmnprqprqprqprqprqprqmooprqprqprq]v...?..B..@..A..@..AWn.4BoZr.prq..?[s.04OBFY(-K.;g..F$.Y."LJ^.%/Z..D7Es\u./<h0=i..A..C%0[Qg.\t.H[.Tk.6bmoo9Hv!Tbdi.'Q..E.!J9Iw59R..C%)IWZdNc.#'H..GkmnVm.TWb )S3AmOd..$N.$FikmK_.RUa"&G..BOR_)5`Xp.;Ky=AVYq.X[d..HRh.Pf.Wn.FY.@Q.CU.Si.2?l[t.5Cp. I>N}Si.Ma.&1\5Dr.#M.&O,0M-9eLa.AR.?P.@Q.CV...Bjmn-1M<LzXo. %G9<T..C]_gkno7;S`ci.#E<M{!+U.'PEX.fhlAEX2@mIL\&+JUXc<@U26P\^fVYc.!DEW.37PBS.oqpYq.Mb.7FsFIZ1>k8Gt0=j/3OH\.4Bn.LTj..."8Gu,7d?O~dfk',J.2N9=T;>UK_..$M#-XPS`lno..@La.CT.(3_.O....z-..?..~>MxQB7yqeL`.%.Y",V..eaN5..+kz.kr.$#=..g..A[s........NtRNS....'......j......H.\=.zE...4..........^...2........".q._D..&...b:...8....M#...lIDAT.....\|.....w.zt...]..S....X1..cccEl4..Iww..n...[........?}.....i9..aT.1...P..+.T8.6...

Chrome Cache Entry: 517

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65432)
Category:	downloaded
Size (bytes):	878128
Entropy (8bit):	5.341008959209455
Encrypted:	false
SSDEEP:	24576:y3s958FI1yMbkDc7b7yuww1iubkaYcNWV/dWnFOqvIplzohhcgZS9jhyz9yeL0ZI:os9OFI1yMbkDc7b7yuww1iubkaYcNWV+
MD5:	678C536A2D099400E6F115FA2C83E403
SHA1:	DF7EFFA567BDD9B7931589BCA27AC5DC602AC28A
SHA-256:	F44398B3CF4B2C678CDF37471E7CA1E26186316CA044DF9111BE168D36B4DD34
SHA-512:	000FD5F4E41DC4721F3030338C4E75C879FE17D581D97E85247F94B7EAE285D87D30F99DDF32709A673A16B03EF83A0318D94DF64C7EA32635EE53640468D94A
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/impl.20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35.js
Preview:	/! 20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35 /..!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.sharedObjects.loadedPixels=e.TRC.sharedObjects.loadedPixels\|\|{}}(window),function(){var win,doc;((e,t,r)=>{const i="trc_modal_hidden",o="trc_modal_mask",n="trc_modal_dialog",a="trc_close_modal",s=t.createElement("div"),l=t.createElement("div");let c,d="";function p(){u(l,i),u(s,i),r.dom.off(t,"keyup",m),r.dom.off(t,"click",g),r.dom.off(t.getElementById(a),"click",g),r.dom.off(e,"message",b)}function h(){u(l,o),u(l,i),u(s,n),u(s,i),_.appendChild(l),_.appendChild(s),t.body.appendChild(R),y(d),c=!0}const u=function(e,t){if(e.classList)return e.classList.add(t);r.dom.removeClass(e,t),e.className+=` ${t}`},m=e=>{const t=e.which\|\|e.keyCode;27===t&&p()},g=e=>{const t=e.target\|\|e.srcElement;t!==l&&t.id!==a\|\|(r.dom.stopEvent(e),p())},b=e=>{/htt

Chrome Cache Entry: 519

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	847
Entropy (8bit):	4.80772256869591
Encrypted:	false
SSDEEP:	24:vMlCARgZzvB9hkSvWwiWhxbNd7P7tF3PBPJ4AyZ:vMlpRczZ9hkSewiWh9Hr3PBy3
MD5:	2566F30C3D04937BE5C314B0A6AB35E1
SHA1:	F68D55B17C07877BF7C3F08EE1017D6A7748B291
SHA-256:	308273C266590A60DF8F55B828E1C93D6111356F9DC95F73B1EC85BD2AAFE895
SHA-512:	D5454FBE68875295F2380A415F29F988CD1B9C69631DCD6B81369901F2FCF43FBD6FD1DB68F3F687CC633BEBF634BA9BCAF52A6DE9BCBC299103285E646ACB7A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/exint/templates/left-corner-overlap/index.html
Preview:	<button class="exint__close" aria-label="Close {{title}} modal dialog"></button>.<div class="exint__offer"><img class="exint__offer__bg" srcset="{{bg_img}}, {{bg_img2x}} 2x" src="{{bg_img}}" alt="" />. <div class="exint__copy"><img class="exint__logo" src="{{logo}}" alt="{{logo_alt_txt}}" />. <h2 class="exint__title" id="exint__title">{{title}}</h2>{{#subtitle}}. <div class="exint__subtitle" id="exint__subtitle">{{subtitle}}</div>{{/subtitle}}. <p class="exint__desc" id="exint__desc">{{desc}}</p><a class="button exint__url {{btn_theme_classes}}" href="{{cta_url}}" data-ylk="elm:btn;ll1:{{sku}};ll2:yhoo;sec:exitintenpopup;itc:0"><span>{{cta_label}}</span></a>. <div class="exint__disclaimer" id="exint__disclaimer">{{disclaimer}}</div>. {{#links}}<a class="exint__link" href="{{url}}">{{label}}</a>{{/links}}. </div>.</div>

Chrome Cache Entry: 520

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2424
Entropy (8bit):	7.686691405441984
Encrypted:	false
SSDEEP:	48:A+LjdWMoZuMaPjluoOKrElS4PcKWrm2A6uktMfWtLwxBt/jx+BBahv3iC:A+3dWJZuMaPJuoqS4s/tKWKxLNmcJSC
MD5:	7332FBBF0729991568B70F28354AA9E6
SHA1:	3F64F465595039670E7DAA49AD899B1C3DBCC113
SHA-256:	5F3B0CFC8D982FA62C0298417843F0457549E72865C476689F6C9513344304F8
SHA-512:	55C2A349114E9534AEA0FDBAAF7F342B11A8A13A8507637F2C306041DEA32584CCA1F59E7F4AE20BF70211D3888A04434E6AB1566034FE16C5D51F9378D8B042
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL................................................................................................................................................................................................................k...L....n..u..l..m..v.....x.b...............z.......)........+.....F.......B..1..4...s....>.....d..Q.....................H..-........t...q..~.Y...p.~.....@kT.........r.C.....#..<..L....w..z..J..]..p..O........3..q................V.............'...{........M..W.....`......t....6............!~.Y..9.............\|......^..f...8f@...\|..=i....t...O.../..l..u...\........o..........;.......?........`..3b..........R....Mv.%W.t....v..........M&......l...^.......k..Sz.)Z.Ry.......l..~........'Y.e.p...Gq.......v......"U...Hq......q..[.....DtRNS.................K.{......y..@>.$I.....t.i'.o.U.e......E......O..P/.:_....IDATH..w\.G...."X.....Uk]........1....,.a..l.!K.....D%,...........]..P...{...ww..{.(j...`.N..N3.

Chrome Cache Entry: 521

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1059
Entropy (8bit):	7.519320190040557
Encrypted:	false
SSDEEP:	24:ztFEA7O0XlfR05QSc8RzXjpcDovRd23aA17lmJJSD0+T/z:ztCAt5elcCXjpcsJ0laj+T/z
MD5:	CF5119C058F932076546D867A49182DB
SHA1:	7F505B9DE930DAD93DF8B51EFFCA768888A85B2C
SHA-256:	A7EF42B26CAA749AA2C08CD2D7FC0371EA99E70164E27ECFD3779CA41E905B8D
SHA-512:	34111E5E51B0120E9874449A4D29A3157FDA5853E58AA9C28CBF28B17E5F48FD084761DABFB10E60EB7E5A90BC10EA8A72CB242ACAD093DED3357721AB56B8C3
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................."......".$...$.6&&6>424>LDDL_Z_\|\|....... . .............z....................................................!1A"2Qq................................................!.."1A...a2Qq............?.-...e.. e..D.....0......v\|W.?Y..i..2.H...89.q..X......Ny......[.'S1bN.\|nx..vaE;.8..J..r....\.....}.=...1...}.....e..b?XB....OT.g.:._....Q..Zw;.-..T..L.b$.O..X....M.NI......_!......f...y.$...&.S......#.Lv........Z..q.F...>..ua......S.R..WBG8%..nI=[==q.....G...K[..#....E.~.l.N..F..;.s.Z.O....yI.q..W.E..m...".<.y....S..9/..F......p.\...sP.......n}.v...h..(R.../63.OO4P...).h..X.UR.@.ns.,Y.$.+.dS..n~w.;.V9.?n.6.'H..w2.`z.C....I\|..r?.I..S...;O.......x.o.G{><A.......?t>..E...d..w.K.I...2.j.W.+.)f.)S.R.G..:.$2J.=..,...+....=.n...U.....$.!.&t........S.y/.>./H..2b...?pd.Ko....Urc...=h@ .....h%UedH#...{17fdm.....v..#U.J..+.*x...7...7mQT..

Chrome Cache Entry: 522

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	10363
Entropy (8bit):	7.9504332333281935
Encrypted:	false
SSDEEP:	192:6gF6e+6RlwsQ7dPJZocmQIef6hImdMiusqlFxq1zC+903BtuUCp1F4FTW8sCINPD:67rjjPJZvmYih7dMKqJ+Wv3Cp1FcsNAe
MD5:	2F41F436487237CB242C6A932A6C49B8
SHA1:	950C6759F40A752570AA4BC7593F8C990579FAFE
SHA-256:	DBB0B4D5C3A9B9E96B85BEBE42AED664ACCF5F1CAF10C903575D1C73A2B685BD
SHA-512:	51F060EEB528121D29A67EC901B081A29554250970A3D7804753CFE1C8C24E180138B7305F8E2D1897EABD80FA16EE2EC0BA899A39D1ECE5876B4007BFC60447
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_the_hill_articles_315%2F832bdc7eaa27b3ad1dd61fb1de4d98ae&client=76f99bdb8f78cd44cc0b&signature=3aa299cb02c431ddc9f5f1b2db950faaf51d5655
Preview:	......JFIF...........................................%......%!(!.!(!;/))/;E:7:ESJJSici................................%......%!(!.!(!;/))/;E:7:ESJJSici.........,...."..........4....................................................................:.T....fN.^.s....&7!.'.u.'..d.<.1s..Y....6.zo..IKq\.E.;8.~{.i..NDX..gU..Fg+...+.i.(.A.......Y.$,..&.}.tno^..hJ=.#,..+...e....(.... .(.10Zc;...U.I.....d.,D.VUb.....T9.T...R...`0b...O..o.X..%ac6.x.1.J..6v.o...xZ.D.{s..j..\|....3\|......")..-.Q....O<\|...^........OX..:..F..>...g...6.z........90.[L.Y..~)..b.<..j.u..j=.Pu..U...,...\|GX.....q.,z_..._....-..0.>.i...y.."..#....._r...uy.?.e..Y]...]..c(..F...M....>.i.....5#.$...u..c.p...J.+..(....c.E.!^d......Y..1.K.Y.t..%.../..!.....;...>p.}@,....2dv.1..........G5...+.<...\.Q.O?..X.f2.......B..i.[..`.2. ..b..?....z.<...sR..u.h.]..\KN....,..J.Q.9FFF:.z.....T..2z.8.<.\|.x^=X..b.4..+.'.. Wo.Q.`.g7.n.c.7)..w.....m..9.V..~..z..w:.j}..N.:k^n.,j......B..I...V...%...!....

Chrome Cache Entry: 523

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2178
Entropy (8bit):	7.285559075083721
Encrypted:	false
SSDEEP:	48:9HPwvRgXdYpWDOQc0o+HDIpkp99tCPUZLq:9HwE+ks0osIpw2ILq
MD5:	B435160BC4CCD46DB19623F36D954E5A
SHA1:	918702BF8465ED8A3A5D079012E11472C272D6EA
SHA-256:	2B1CA27B9AB1FDAB2B7959A2CFF5324B333B03D8F2617B2F1B4DEEDD73324F2A
SHA-512:	985F89D8752EB81CDF5BB2819F9C16D99C0F3DDBDB93712E8AE59E6E1206A36C14BDCBD6EBADBF436BC6E3E3C140AD95161D57913C8153440A80C28362E67178
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FubvamaAftyHAO5MJFd90Vw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20190508%2F500x500%2Fraptors_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=5adab5dab53001d1bf80a106504ad949370eff11
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................................................................................................................................................................................................................................................................A..E..C..H.(S."O..B....6^.. M.Ek.9a.-W..K.*U.%Q.Xy.;c.......Nr.o..z...H.....n...A.\|...........F.>e.\}............Qt....2\........k.............c..Tw...t....Gl.._......./Y....}.....e..x.........g......Ah.......4]..r............J.Z{.............Lp....+V..........~........Vx..........Jn...Tv..a..v..u..Y{......f`iP....tRNS."..........r&f.h`.....z......v.^+...c..3M.H@..>.yJ....=n....... P.[.....k...U.....V.;....0...XD....6....:i\|...............F...\|.....IDAT.....\...............c..cvMEl...

Chrome Cache Entry: 524

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 59528, version 3.66
Category:	downloaded
Size (bytes):	59528
Entropy (8bit):	7.99655724111407
Encrypted:	true
SSDEEP:	1536:mBJZCznjVFhQbym6Pm0m1jTpPtDnxScyg:mBvCzjV1Lm1PpP+o
MD5:	BB980C649E36B9383B349DF5028C41E0
SHA1:	B009900423598DA10537E2A4C7E99C448CAFDB31
SHA-256:	7000DE37C17D90EEA5DC0FFC827355E128535B41FE5651EBDA794810F4776DC0
SHA-512:	D7B01A3E1DFF11C1C6042315A9DF53E4EBEBB96D6A5E45BDDDF1092C37D6729AE54B4EE170ADA89FEB66782640F5999E48435FA526729BFBE790F208672B633D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff2
Preview:	wOF2..............d.......B......................>..t....`?STAT^..v..\|.............6.$..N..j.. ..F..j...[..q..]."Hw."...#..S.P.[..........`.....9...7....7$.... m7..C....W...#i......V2X.9...s....4.,P.m.i..'..p.Jvv..U.....m...ZkuV.6Kv~..J...o.<B..g!./1...\...X. W....h.R.W.C.3......W(.H.B.0.\|......ihH.$..s....$..@.]..'....>...SG...M.eL..}......s..,.3...-m_ `._...L......>.0H.E.f]{...J..c..N$<.J2....].%..'...../m$=..=..!.5k....{w...`.B."...)..4@ $h.x...#H...j....j...h..}...\....4=x...~..%..#I.R...qQ...../................. ..=r#7r...5.#z..1.7....%C..+.z.E...l./.....I...........o23.B...aPU.b.........m....[Q.T.,N..^....L.5.T.....D%U...N...^"7..,...s.F.J...6-.B.R... FaDM.J.5.Z.}..]o......el_.5:B.F..P.....@.J..u'..].#..f.Q.11B%..3#..f..3B.3.9ab..\6....E........8..M...&...[*%.#... .f...B&.@.4.........mw..DK?..&-...HL...9....d...._FK.[.Cj........8huFO.p.F.... ..q..z-...4....%..r.s...5.0.P.XP@.s..^/&Y.A[.H0.....VuWU.p....~.@......"..."W.......o.T.... D.l...

Chrome Cache Entry: 525

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 526

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	802
Entropy (8bit):	7.1308074630907585
Encrypted:	false
SSDEEP:	12:wPGHQC4PGHQCHz9NVhEFl+F4bO3prXk0JRSM9CnoYigwStFm665MlKvSW9vnNu50:wP1P2nKltbE5rRbCA66Mcvn99bn
MD5:	E2AB0EA8C7FD54BA949C2FA993A91900
SHA1:	D31CBB4747779B5902A5C2BDB9CD432272B06CAB
SHA-256:	263779B84BB6385F707AD23478BA13FEE17BA3F827A6078C3891A57A3B8FB544
SHA-512:	7ABB5E0D6A9D77EF16602AA28AA015A96B440C7ED371B3C21BEEDCC2D77C18AEBA8A2B12752E13DAF936B9538BBC0A813576EFB7EA9C221DDDE42FD4B1B82EF8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=0ce860f1e66ab33504feea849bdc56f9987a9c41
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . .."..........f................................................!"Q1B#2C.A........................................Q.............?...;s.cf..`..#.u.8?v.m.....j.#G....2..5-hv..+..t...!(N....M:.)gk...^%^.FI......9...G..N[qPnX&...fvu....}..o..6....xN3..G',...b...E#...R.wi.".zC.V..T.R...lw>fJm...5...]....l.`..Z~..^.......Qy..`......O..6Dq..W..4..}.q.E..`m..yVOW...f@~_IZW........m....a.m...W.Q..-.U..........N.l",ITD..!....`.,r.^\|H.p......I..K8.Z........l...8.H..5)I..+J[;...e.{,oY..^}..J.D.V..U.m..q8B>...R./@..._.....X..S.....G..h.27VK..&+...f.*N~_iBQ..Tf.&......+.....g.NT.cO.j..M.....t8.... ....-..B..."........

Chrome Cache Entry: 527

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	535
Entropy (8bit):	7.383788917574239
Encrypted:	false
SSDEEP:	12:6v/7O9b/bQvkGnBByiwDiWY5y28VR0nbO6KhRtKr2i2v:Ij9RWYQ/UnbbWeiDv
MD5:	491574B00CD8FB418215DEBDB2DCA2C9
SHA1:	86BCC1181EC66F23FD9F9C324154CC5E7863A4DE
SHA-256:	E5BA76000CC58D5157DC91DA69FD9703DE9DC6BF96A973EC44A215984115BD67
SHA-512:	117C3DFC68EF3D217B6AEC527432E541963968AE519D3C0B21323876D66239583DA51689B78A9F62A35DFEE136C6EE633B899B451E056F187DF1F4DE5C8493CB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTEGpLF`.:V..u}7T..5B.....GS....8E.CO..Kd..XeLe..JV....NZ...A[.......\s.^t....w..}......Sa.....-:...#B........"0Yp......)G....1N....q.....'5..Oh.k....aw.y..7T.Hb.......#B...lx...........@[.........gr.Sa.6......tRNS...1.....1.1..............G.n.....IDAT..%..b.0....E.s'!.............._?6...0.}j:.>.W....D.@O.0<....s.....%X.......y.3..6($Fa.I.;.+......'Jp.............l..#.%..pBZ.....a.q..]...T..A."?.....\;.....K.....mV.......u]..1adZ..Uj.0.-.>_.`...G..........IEND.B`.

Chrome Cache Entry: 528

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	105664
Entropy (8bit):	7.998319767211361
Encrypted:	true
SSDEEP:	3072:p7495IQdD1wqrbQPy7I+/vw++62zZciYDemsK+ki:51QdD1VbQKEYwx6ucNqmsK+7
MD5:	4020D454C7567964A0AA28E018662AD8
SHA1:	3C5D065F6E212D7B8B31C4EC774A7AF2B5F8D751
SHA-256:	F1D086F313CC7906355C78B7A4B904991C3B15820A4C9498DEE21E397DB97B54
SHA-512:	BF9F4471F76F893FB18F5984AAC0F7D93424B09AB4DE13A2141CE183B35EA8ED1D9B280E016F5F6D2CC40A6162AA4768001C0E3EC81AB1B5260A06873D990FFB
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI....I...:....0.........d.?V.2.a....'{a+.....<.......E.^.....o..k\d6...(..O....DxP....y..............f.T...F....F.......G.K/~&.0.`J..X.W.u..0sd.5h.o..3..!G[1.7....y...F.....R.78...#c...H.....T....U{v.fd.H.`]........`.kn:..E3Ec.[.......)z..............z..7..N.g.P.6,..x..)...[......qL......@/W..]..v]...}..w9...qq...`Q.....(.R.k6.s..W.@.G...E,...X.;..k..V.F..O.Tk..a...%..h..B....E/.T.D.y\.=.I.$.z^..K.....#..<O..f.c.Z.\U....x!.S.....Lo.n..n^).. .O#.\......j.....6..e._...a..&g.....T.....+j9.[.[..g.........{...6.]I.....G>qD.......pb..3*.2.eh.....AK..6..........b...4..?.......h.l.bB.....

Chrome Cache Entry: 529

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5503), with no line terminators
Category:	downloaded
Size (bytes):	5503
Entropy (8bit):	5.376984635806113
Encrypted:	false
SSDEEP:	96:TeUg4KTMgKq8NGOzZZQujpcM8pmB9Q0C3MzDCprDVQ1nGXuX8Avva+b/70ApZV:6Ug4KTyNl/Qm3cy9SMHCpqp86a+joej
MD5:	19720D3A285ABA8024B11FC9955795FE
SHA1:	8E174FF6003772BC71FFAF2B655E23FC4B8794CA
SHA-256:	00A54A79B12A7E6DC344AE20DEA91F7772A088C14CF9B12D4DD8CEFF8B374C11
SHA-512:	B296C7311263B3B153353904B0D65131ED72F70F9A646795C07CE8DD3735329A6D6AAD99BD1C0F74742FC9E515D7CA1E78F44377EBBA55018331A986C93481A0
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.aol.com%2F&tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&axids=gam%3Dy-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A%26dv360%3DeS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B%26ydsp%3Dy-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A%26tbla%3Dy-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1
Preview:	<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const e=function(e,n,r,o){(o\|\|window.document).cookie="".concat(e,"=").concat(n,";Max-Age=").concat(31536e3,";Domain=").concat(t(r),";path=/;Secure;SameSite=None")},n=function(t){return new URLSearchParams(document.location.search.slice(1)).get(t)\|\|""};var r,o=function(){var t=new Date("January 1, 2011 00:00:00 GMT").getTime()/1e3,e=(new Date).getTime()/1e3;return parseInt((e-t)/60/60,10)};!function(t){if(r&&!t)return r;var e=function(t){return parseInt(t,36)};r={};var n=function(t,e){for(var n="".concat(t,"="),r=(e\|\|window.document).cookie.split(";"),o=0;o<r.length;o++){var a=(r[o]\|\|"").trim();

Chrome Cache Entry: 530

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 531

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	952
Entropy (8bit):	7.44337387509704
Encrypted:	false
SSDEEP:	24:ZIQZjQuJsSm6Dw4XyVq5iI7UabYDOZab3CzM:ZIQCEtDDwk5ib+/Za7CzM
MD5:	3C40FBFDF168E3E082389CBEFA1BC22E
SHA1:	5A1C4EA23F6320E6FF92A0ADBCFC6BEC92A1F5B5
SHA-256:	9847ACBD607AAB62B3DAE12DD0CD0C47A1B8DB738A7C98804ADF403F53D00C07
SHA-512:	3ED2F065F22192A6CC6ACFEEF4F6A782326D0EB1053D261DB04B792ACFD3D92A715E043640FCFC79EF5F2CA1DDE0C8DAD2075F6E181FDC58C0DA7F4933BC3E68
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................+".."+2(2<66<LHLdd..............................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|......... . .............u..................................................B.!"a...12................................................!.1Q".A............?.+...?.............Z....+.....U...[.+.\.....#..%.:.$,<T...2.o.~MVZ.t.v{&[__..s4....k...T.G ..J.,%P..GT=...u.!..e......g.Z...K(....B.../X.,.........E.'....:.h.B.}..........o..6exJ.!.U[..A..8....a.....H._uh..}......>:.o.e'`.?'M..X......O..4v.v\|nW5]]a.\|...3..E.&8...>...e.M+m..t..&\|..XN..v....74....;..3...)+~."L....V.....b..}J..K)^..=...l...m.?...=+.."....e&.......#......~.j;.y#.gw.....Z.....V\|....z...L.T.~]eV.--.B.......3.wr.bld..Jcv'f.....~...V......{u.U[..........&...{...c ...nJ...%A..K*......?..2.....ZV.Q@...od..$i..<pf.....KH<....,...j...o.r...#!...XtBL...m6....r...%..9.TtB?...}...9..\|...>..U..tB...

Chrome Cache Entry: 532

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 533

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	16
Entropy (8bit):	4.0
Encrypted:	false
SSDEEP:	3:Ja4Fzf:Pp
MD5:	6626573EF18846D45690B362A392D01F
SHA1:	AC7FA98D1C6706542ACD4BAED3D44C7C6FE15878
SHA-256:	44355EE5A31EE119F735B7F72FF8073B742A2CAEA0ECBC91D44D5C567D6557CC
SHA-512:	998A82AE67C61ECB95F399B7C1BFED342A00B00D779444FAE905B40CB24E3F8403271782EE947145325BE1E16F8DC97DF241329153849A4EBE3A13DB276B1C52
Malicious:	false
Reputation:	low
Preview:	...T...../.I7...

Chrome Cache Entry: 534

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (58707), with no line terminators
Category:	downloaded
Size (bytes):	132300
Entropy (8bit):	5.991787547795
Encrypted:	false
SSDEEP:	1536:M/wrzErd1GgG/wLZ98SEGcity63fqKayGH32+3ItMXKwO8KMhrQnIKHjBTEiX:4wdp/GHmGOxKpchrAHjBTEiX
MD5:	DFB006D8A1B6390F06824B94BD8FA5D8
SHA1:	4F1101E12FBB4FF92236A9B19BC230BCABB98772
SHA-256:	68DD66AF3C6E581B9B314BCEFA73D9516DCF532E16B6BD55630CAFD4EEC67FF1
SHA-512:	691722653E99DAAC0F55FACF2ED41D9B2E6FB51FBD722022CD36013D44983FB5F0F613278928C6B97CB70D5A3E4FC14FF5338142379168E90B5A79F351681790
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cb/af/adfeedback-1.0.108.js
Preview:	!function(){var r,e,p,o;(e=r=r\|\|{}).START="fdb_start",e.SUBMIT="fdb_submit",e.MOVE_ON_AD="fdb_movr_ad",e.MOVE_ON_X="fdb_movr_x",e.ADDITIONAL_FEEDBACK="fdb_cta",(o=p=p\|\|{}).POSITIVE_FEEDBACK="100",o.NEGATIVE_FEEDBACK="10",o.MISLEADING_OR_SCAM="11",o.OFFENSIVE="12",o.LOW_QUALITY="13",o.IRRELEVANT="14",o.DISRUPTS_CONTENT="15",o.SOMETHING_ELSE="16",o.POLITICAL="17",o.TOO_MANY_ADS="18",o.BROKEN_AD="19",o.MISLEADING="20",o.COUNTERFEIT="21";var d=(i.prototype.toString=function(){return this.width+"x"+this.height},i);function i(e,o){this.height=e,this.width=o}var t=(n.prototype.init=function(e){this.beaconUrl=e.beaconUrl,this.viewId=e.viewId,this.negativeCallback=e.negativeCallback,this.doneCallback=e.doneCallback},n.prototype.render=function(){var o=this,i=!1,t=document.getElementById(this.viewId);if(!t)throw new Error("Element with id: "+this.viewId);var e=t.getBoundingClientRect();20<e.height&&20<e.width&&(this.renderTemplate(t),i=!0);var n=setInterval(function(){var e=t.getBoundingClientRe

Chrome Cache Entry: 535

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.1474068528255157
Encrypted:	false
SSDEEP:	6:cIerK3VuUo8W0XuPtOD+Lba5+aIgUES8U0NIWeTPti7aVcd17rKQwkE+lallio:cIeSSRba4aHCH0NI/V6yQwkEaa/io
MD5:	B1AA5134D39C9A8C7DC8B40BC680E5AC
SHA1:	81D03C69A59FC76962FB939764DF8C897B6BAEFB
SHA-256:	F9397076FFFFBE7FEA8BF1A5B34BE8BB73B6EEE211C192246932B1852D05BD59
SHA-512:	F4A1B72AD6E1219AF6B8D0616FC5950C22F8496B086125F90514E6797E5AF335ADCBE6E75055BBA2B030C281E9970DB617AD1BCB5F26520EADF3D6D708CB973E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/os/uco/prod/img/lifestore-favicon.ico
Preview:	............ .h.......(....... ..... ....................................................Q...........................................................................$.......................................0...............................Z...........................................................................-...............Z........................................................................................................................................................................................................................................................................................................................@@@.............@@@........................................f...............................................................H...$....MMM.....MMM............................................*.......................................................................E..................................................................................................

Chrome Cache Entry: 536

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	downloaded
Size (bytes):	184464
Entropy (8bit):	5.449610683212188
Encrypted:	false
SSDEEP:	1536:CmzNNlFchunXBo4P5/vurL73G8HbREzC1H9RrMrjbJPySO+/U+wSS60ibrLr2pmx:CmzNNlFchunXBhPh90iWglWO/
MD5:	6863CE0703CE4F482389F8A7E640E4E6
SHA1:	7554A71C742AD65ADA09C7819E853F2F71D88D52
SHA-256:	D08DEDFB38AA5AE7DEDADCAE8425F632C17CE61ABA51990D9275FB71A2B28387
SHA-512:	36FA691795A4125FC052D4A75FEAB5B83059676B66C8D927E28EE56AC66B0BFA73021CB26C66953E49C3BDE0D41005D67D6F15D26AD8DA6140C5153EB9488390
Malicious:	false
Reputation:	low
URL:	https://consent.cmp.oath.com/cmp.js
Preview:	/! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],i=window,o=i;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===i.top)break;o=o.parent}e\|\|(function e(){var t=i.document,n=!!i.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),i.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),i=0;i<e;i++)t[i]=arguments[i];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 537

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.787782031835941
Encrypted:	false
SSDEEP:	3:YEOBHKbDuL/hOr0RY:YEOBgf
MD5:	1DDD66A89AFEBD6F7D2EA244030AF8DB
SHA1:	19E37864DF85A0C0FD153FCBDC74746BB1BFE753
SHA-256:	2B67D75B6EAF30B13A4453A4B2214141371309DE4A4EA5E88F9E6868E607B118
SHA-512:	750E1334E3037FC51EBD6EF5BE1E489AA9D523E2C1FDA367CF528DFC2E9B69A3FE4AA1D48B25FAD77103254679076AE12E73C9ACBA5503AC30C5B2A49D42F909
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A"}

Chrome Cache Entry: 538

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31959)
Category:	downloaded
Size (bytes):	92096
Entropy (8bit):	5.29491945551985
Encrypted:	false
SSDEEP:	1536:ahUHMfk9zWN9HVJ6SMZSdoqyCX1uKZhS68IW0vhZL3dYm:ahn89K9Hz2ZEVX1uKZgenCm
MD5:	3ABECB673B1CE73664DDE15762340AC4
SHA1:	85FF8EC52D28CCD16F27AAA8F5F1E492081680E5
SHA-256:	803DCB482A3A62AA6F6DB0E508B52B14AB5335CF451FDA0564C069EC6AD3E928
SHA-512:	45517B783B3B3B062A417DCEBDB7F2E50197A60DF66758F65DE6A98D1DF0E1BF3C251A833B4CBFF241FB089B7CA0B5C57CF3EF6BC041F5346D3F9106A0FBC781
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/WAS/tandt/atjs-loader/vendor/at.2.2.0-modified.js
Preview:	if(typeof window.LIBRO !== 'undefined' && typeof window.LIBRO.atjsLoader !== undefined && window.LIBRO.atjsLoader.getSessionId()){window.adobe=window.adobe\|\|{},window.adobe.target=function(){"use strict";function a(){}function b(a){var b=arguments.length>1&&void 0!==arguments[1]?arguments[1]:0;return setTimeout(a,Number(b)\|\|0)}function c(a){clearTimeout(a)}function d(a){return null==a}function e(a){return function(a){return pf.call(a)}(a)}function f(a){return(f="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(a){return typeof a}:function(a){return a&&"function"==typeof Symbol&&a.constructor===Symbol&&a!==Symbol.prototype?"symbol":typeof a})(a)}function g(a,b,c){return b in a?Object.defineProperty(a,b,{value:c,enumerable:!0,configurable:!0,writable:!0}):a[b]=c,a}function h(a){var b=f(a);return null!=a&&("object"===b\|\|"function"===b)}function i(a){return!!h(a)&&e(a)===qf}function j(a){return a}function k(a){return i(a)?a:j}function l(a){return d(a)?[]:Object.keys(a)}f

Chrome Cache Entry: 539

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11464)
Category:	downloaded
Size (bytes):	11465
Entropy (8bit):	5.361736510824772
Encrypted:	false
SSDEEP:	192:FpXrgVsVoE/2WMiFJFEFVFYFZ6D6l6U6rr6yH2J6d2DSi+:F1JkukvrGyH2JW2Gp
MD5:	217E9C4009BA47BDABC1BA492A178DA1
SHA1:	3A12EACC9D82A6D5B26687431AEFE625980A8BF5
SHA-256:	670E74D91C800727D241A5456EB2662D369122800C283AAED9426FE5A2BB2130
SHA-512:	625B381090DD396CD9E7D715F9B93763EF52B2534B28DD4F14DF50368D47FD327C1D85A1BEDFF13D2F163C7D55AAEEF036D984F3DB47CC9BF120EED40AE73C89
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/main.css
Preview:	/! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:rgba(0,0,0,0)}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-0.25em}sup{top:-0.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}button,[type=button],[type=reset],[type=submit]{-webkit-appearance:button}button::-moz-focus-inner,[type=

Chrome Cache Entry: 540

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1999
Entropy (8bit):	7.198267211328256
Encrypted:	false
SSDEEP:	48:zteE3rXjKOYdksjhQAs6BjZ4dfkhlUhfNiOf:zs4/tSksjhpBjXhuB4Of
MD5:	C7FE143394F0CA830DA15BD381FD532E
SHA1:	1480723474B0E5B59E7DC567F51C0ECC97AE025C
SHA-256:	2C99D58BC873746D6F5EA997CECD3FC7E4E974C432033D8E9DBBDA0DFF685100
SHA-512:	0F4B5043E2176259C551BE359B5EF926D804515B9D22D119B41381E8D858417222242053066A10E031883E4F16D21DCE60FDD11B4C2A1C5B2CE7894123907F5F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................................................................................................................................................................................:>..........;?.<@.BF.?C.X[.CG.^a..........ad....DH..sv.tw....NR.........kn.WZ.Y].hk..........FJ....................GK....PS....^a.rt.z}.HL....JN..RV....LP.TW...dg...=A.......=A.nq.................................OS.AE.}...............]`.PT.@D............`d............\_......or..............eh.....x{..............TX.fi.......UY..........>B.wy.tv...........[_......ps..............mp.uw....gkjg)h...htRNS............L... .....a.........p..%..;.39l..[..........k.....x.B.~C/d.E..{+..].."..R..........W.Y1.6......IDAT.....@.w......].[g.v......~...Nu.:g` *6.n@E.....p.......qx.#

Chrome Cache Entry: 541

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=11&ns_st_sp=1&ns_st_sc=1&ns_st_psq=6&ns_st_asq=6&ns_st_sq=6&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=9470&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=9470&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=9470&ns_st_dap=0&ns_st_et=29899&ns_st_det=7501&ns_st_upc=9470&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=9470&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=9470&ns_st_dlpc=0&ns_st_lpa=9470&ns_st_dlpa=0&ns_st_pa=9470&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508448238&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=5&ns_st_dpc=0&ns_st_pp=5&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 542

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13732
Entropy (8bit):	3.674706045825715
Encrypted:	false
SSDEEP:	192:LQg7YOCaqKpGLjwK7qFtpMNJ6btLHRPfSbpp87UdSp1FhC2GczNmJkhLWLplq8/w:kgzGLsK+pbxS1eg2Gc5WFo8/i4JakpA
MD5:	0343DFC6636833A9D5419FB66FCDCB1A
SHA1:	5AED35AE0C4332D49B1C1754E52AD0E4729DFA7A
SHA-256:	E014F4FC15B995AA3F08E90FEC21245FCDE44E4111807AB009D8FD633C267B92
SHA-512:	89E48C5A8491563B13CA419D7D5CA4F451988A63B4C1FD5977AF616D62BF6503A9D5C7DED8F1BC279376BADAA494598E47FD3121D471BCBB00E30C0A21544DF6
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.aol.com%2F
Preview:	[null,[[["103512698"],["108347105"],["121124594"],["21783347309"],["22060069514"],["22888152279"],["24746779"],["3379"],["61763806"],["1000908"],["1000922"],["1001049"],["1001219"],["100128020"],["1001535"],["1001733"],["1002304"],["1002453"],["1002601"],["1002605"],["1003265"],["10042527"],["1004783"],["1004807"],["1005049"],["1005053"],["1005149"],["1005950"],["1006346"],["1006571"],["1006794"],["1007491"],["1007866"],["1008018"],["1008725"],["1009136"],["1009310"],["1009379"],["1009813"],["1009926"],["1009966"],["1010669"],["1010780"],["1010827"],["1010893"],["1011642"],["1011792"],["1012467"],["1013015"],["1013361"],["10133669"],["1013765"],["1013962"],["1013964"],["1014761"],["1014763"],["1015101"],["1015391"],["1015681"],["1015969"],["1015970"],["1016162"],["1016760"],["1016854"],["1017043"],["1019030"],["1019404"],["1019543"],["1019702"],["1020210"],["1020620"],["1021909"],["1021946"],["1022505"],["1022890"],["1023422"],["10237869"],["1024178"],["1024512"],["1024892"],["1025147"

Chrome Cache Entry: 543

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2156)
Category:	downloaded
Size (bytes):	44701
Entropy (8bit):	5.556418658154966
Encrypted:	false
SSDEEP:	768:0n23gP8cSTWDHO4Y5DoAsxaVTlo50Zpl+B8Jpc02Wf:0vkt+BAsKxO6pcqf
MD5:	6583128F6D84D81BFD8CBBF3F2D13FC8
SHA1:	47DB6DC2FB779DEA41436F1AEF6B38B90588774B
SHA-256:	D0BFFC7261DF1454C5E05475CDA7D9E6647318DC6C3936767E1252BFE8849C54
SHA-512:	DF4026351FED40111D17EF75FF87E650627AC408BA175B7B1240D48551EF32321365139CA677C2F14178ACD0C71228B39C95C53A02BDEE10478437784AE6B263
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/instream/video/client.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("String.prototype.endsWith",function(a){return a?a:a=function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.endsWith must no

Chrome Cache Entry: 544

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	849
Entropy (8bit):	7.254858416595615
Encrypted:	false
SSDEEP:	12:6jQtFfsDvjQtFfswVz9BVJMkwKEw92YF96acjk8uwOGrBiYp/XdcfqDPS7HSg4hQ:ztFGstFF+q92YFH58u+fNNjDPSD34Kn
MD5:	782119761D9A9EF7B0E1A43CFA75091C
SHA1:	D19851EF60AE96B9154D2DBC532ABAEC05D476CD
SHA-256:	3380DA7DF559FA39E5A3780B9B27C8D5C9966F3E1FBE21826E6763050851D55A
SHA-512:	9051FAFF7D5C21944995F58B55C41A6C328D7144A41D8E17782FC7E6E6CAF54D1980F43D50AFB59FE4624B854FD9D12F174F2F5BD3740106F6C0CE5F10BA1CCF
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=177ac960ba64a8abb0f463dbe9e209b3d20d649d
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................................ .... %...%-))-969KKd...... . .."..........r................................................!1Aa.".Bq................................................!Aq..a.............?..8....-..{.....Jt=...>....Q.d3..[.][1.$.`..:(.5.-.<...:.u...A.b<........]..."..".:7.>l.......n..,\}."S.)X)y:.b._..`.,.,. &...,.FE...5t...r...!.....^-&p.l..p^ ...T ..<0.4..c..W.Lv..QI..&......../...K+U...)....MAt&H..@.U..r.2...h$..YB.G.eC...I.#...4G.Z+....6..u... .#..S...C.}.u;J.z....p.$.D.;\|5_G.........g=>8..T...v.......J........../.c..[5]#).$ga..:0.5....}........X..NX.....9.....h...KSt....F.Ah.Kq.#T.q ...7..YS..^.....Mq..."........!.t+e..,.t..f..f<....=...=.Y.%.`..;..=.x.}:.:....'W.....7..'.T..}..&.`>2..-...

Chrome Cache Entry: 545

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 546

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=3&ns_st_sp=1&ns_st_sc=1&ns_st_psq=2&ns_st_asq=2&ns_st_sq=2&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=6746&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=6746&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=6746&ns_st_dap=0&ns_st_et=6955&ns_st_det=209&ns_st_upc=6746&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=6746&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=6746&ns_st_dlpc=0&ns_st_lpa=6746&ns_st_dlpa=0&ns_st_pa=6746&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508425294&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=1&ns_st_dpc=0&ns_st_pp=1&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 547

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	304
Entropy (8bit):	6.624410242881031
Encrypted:	false
SSDEEP:	6:6v/lhPf5guVu+u0pyM6YqOoq2lg+9ugLDz3Cqh3UH76zEj54/zUapjp:6v/7JW+tz6WzO4gDjrzY8DpN
MD5:	F80320B7587D5726FC9C575CE8380237
SHA1:	2BCE57CE612EB458C4DAF111B45E53192FAFE74C
SHA-256:	85B6D77868D96A3C1E58BE58978E25FB24FEC4A8E17197C8B3556B919D7BF665
SHA-512:	545B0598BB64F572F74F2EAEF7BE0E6EE340D14E237776593EB176F7266B0ED55A015CAE7DEFC4CB069DDB13A48FB18D76A94810D9B140DF5754FB145F986714
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...TPLTEGpL.............................bb......88.ii.....++....KK..ww....VV......kH......tRNS.........1..Q]....IDAT..e.Y.. .@..*.l..v.{N.db......%.u.R0.3y8.4...?.... ..w....(...l9..=.\|.+7~a..U...[.d..T`T....vM%..K..........V............?-...v......IEND.B`.

Chrome Cache Entry: 548

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	14724
Entropy (8bit):	7.964003523982938
Encrypted:	false
SSDEEP:	384:U28kZehKeu1mouXx5jRQC8AJSgSxISkCv89oQ7O:UWeEeuoomx5tQC8AIbxn96oGO
MD5:	44D32D9E99956D3D4FC8CBC5637EE6FA
SHA1:	29E7B049B64E4DCB6F71430ACCAE13FD0DF940A0
SHA-256:	900B442407A287D1C8D3AAEA0FE5891B339ECB7EA82B4EE9CB9F20D53D91AE53
SHA-512:	E5483820073841AA5DE26096528CB2199AD9DB97E742CB7856D6A97829B2725F55447784AD42C7E4876600936E37F69527B336D889566254FE5C485316381379
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/35s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/35s/match/image.jpeg*~hmac=a3cf4a6d120f0f8a0df56940f394580058e4383f836b1582d19fdda88466732e
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE...........".......................................K.........................!..1AQa....."T.2q...3BDSU#R...$%&5Cbr4t..6Edu..................................1.......................!Q.1.."A.2Rq.#ab.....r..............?..D..u..V1@.6."C...[.P0.GG.uE..Z....0.[S. ...X.F.`NL...#."V1V..6.\Eh...b...dvbf.'.1.e....;,Y....).vN..S...^B..R1...nq.>....b.Wn?..s/.ce...).Jp..c.L8..0.f.%......4..V.I...EwdA=.A..SZ.v.V{.......f..I>...L.t...w..............p....9z.{.,...N.\|$2)..S......$.N.@0D..].T.......T;...Z.j..bu...`;...vFY[...t.u(#r..s....EK.c.5.Y+.7&..F.....c^..W.p...W.H......./....$...t...S-...V..t.6B^oV.[.MK.$...#c@......F6(1..j.._.5HW....VLwz..*.....g......:.p..o.].V~[e50....(.F2yY-q..m./.F..)....?.)?.......X.%LQL..2M@F^2C.x...'u3...5-.k..&.n..i..d.......q..s..cnt..o.Xp^.h.j...A...$.....'.....

Chrome Cache Entry: 549

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 550

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://api.content.aol.com/content/alert/homepage-alert?site=usaol
Preview:	{}

Chrome Cache Entry: 551

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1029
Entropy (8bit):	7.47756113111472
Encrypted:	false
SSDEEP:	24:wPCTR0ATxOubP/452dtpkZw/sBJyiTQL0iFYflenTU+Tt7ff:lCwXX452e3fyiTQL0lMUs5f
MD5:	45C2D91C62D658D2A623B6A15CF1D645
SHA1:	FCB919A99821D6542CED094315AB8F2B6DF9C66D
SHA-256:	EFFDF256B5FB2ABE877B541D9A3E2A8376B8BC85437B5E1CC0FDA5FCF631F5D1
SHA-512:	1590AA395EF7A6621A612343CE9EC5375E83085A7E5B0CF5D1A33E298623EEBE952FB0A73CBC104D2DB1965D002799A60BA2C9819013AD64280260E4D4741344
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-06%2F77d38700-d9ed-11eb-be27-f7edbce29062&client=76f99bdb8f78cd44cc0b&signature=f681a4e420fd5eb2c85085401f6fad97b8f5c7d1
Preview:	......JFIF.....................................................................&""&0-0>>T......................$.....$6"(""("60:/,/:0VD<<DVdTOTdylly............ . .............x....................................................."1a!AB.................................................!.1Q....aq............?..R........Hm.[p.=..D..H?n.....7...0}.Qs.....}y.nIkP...A..,.._..p.>..A...0.......{..45..i.C..0=.L.6.x.(.. .Q.E4.V.S\|...M.....Hkj(+..F;c....~....._..d]....BSc.X..u....nJ.....k.....,....K....<QTd...h3...sa..l.[#.MK-.....N.g.B..V......k.S>~.vth..2.1.6.....Rh-<3.&...UR4.\|...z..!h.F.L.v@.Y......y....9....Kr$.$.?.\|L...b.E.]Z.F....C...=OOQl..e..sS!..N..h......pA....H.\@..YFj.....{..Z....0,..n.^%!.Y....Hv...OGcf....._..<U}..O.#........`F..\|..X.pA.B[......Q...cX."x.&>.....2..$.k/....@.C...p....-9..).c....QN:...Jzg..Q..K.-GR!./...#.......=c}....O.R)xh.K.rtv..t...0w.."0..x...A..Zn...eV.......j..{q.5.....=..;.;...k......=%$..2.YW.M..G..6~...^.z..>?

Chrome Cache Entry: 552

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 553

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	dropped
Size (bytes):	6637
Entropy (8bit):	5.222724889503924
Encrypted:	false
SSDEEP:	96:Of/O+q/8vXCOE3dOE3odOE3SOE3odOE3rOE3odOE34OE3odOE3hOE3odOE3mOE3W:wE/GXB
MD5:	39A13DD9CCEBA8F5C64A27C96777367D
SHA1:	CDD1E7EFC2E193ECFEA504EA6D9D72ADBC8E3520
SHA-256:	A4E15AB1FE9A1118B7155DBBE1B7204BFA5C8621A73ECC49EF8A21CEE7775951
SHA-512:	DDD36E9FD9B973D38D832EB8D5F05B560710A0C7A5AD874A29D79D6EA67E8591967ED8C7419747CAB55DFE97EBFEF90D54BC79055F9895893A59399A731BD9BC
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNmNfYzAzYTBmOTQ2YzE3YjcyNmM0ZGNjNmI2Mzc1NDc4ZGE4YmZlODY5M2JmM2EyZjYyZGVkYTMwNmQ3NjEwMDg4OQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ",IV=0x78e53fc16aa71fed0b0a09b4730a08d3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 554

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1610
Entropy (8bit):	4.450000121721485
Encrypted:	false
SSDEEP:	48:KvNVfPDHA7jFAcfuskBf8FBelRVbJtmSoWYE+Nea:c+alfUBEbnXLYD
MD5:	906BCFA05AC8220646AF66FDF5AFD923
SHA1:	B843FFF08529CF9B24FE1737C8BD19BE16D4EF55
SHA-256:	C1780EBD4831E53AB4C3963F90D7036EA5E4F7A0A2B7ECC4697B930ED6AC3B64
SHA-512:	FC770D7414AF42EF92586C319B1447C0A8C35317B883BE009DCB493FC6595A5291828FF2CF96ED21005428862F8583EBF2A02D216161AFC7258F4EDE7D38B27A
Malicious:	false
Reputation:	low
Preview:	<svg width="64" height="54" viewBox="0 0 64 54" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1_316)">.<path d="M33.7667 0.673263C32.7899 -0.224421 31.1747 -0.224421 30.1979 0.673263L0.407579 18.6455C0.154947 18.7987 0 19.0716 0 19.3663V51.2349C0 52.6884 1.18905 53.8724 2.65095 53.8724H61.312C62.7739 53.8724 63.963 52.6884 63.963 51.2349V19.3663C63.963 19.0716 63.808 18.7987 63.5554 18.6455L33.7667 0.673263ZM31.1461 2.06611C31.2051 2.03074 31.2573 1.98863 31.3061 1.94147C31.4863 1.76126 31.7255 1.66189 31.9798 1.66189C32.2341 1.66189 32.4733 1.76126 32.6535 1.94147C32.7023 1.98863 32.7562 2.03074 32.8135 2.06611L61.8274 19.5718L40.8101 32.0956C40.411 32.3347 40.2796 32.8501 40.5171 33.2509C40.6754 33.5154 40.9549 33.6619 41.2413 33.6619C41.3878 33.6619 41.536 33.6248 41.6707 33.544L62.2737 21.2661V51.1726L33.7718 32.1983C32.8657 31.4758 31.0872 31.4758 30.2417 32.1562L1.68084 51.1642V21.2661L22.2838 33.544C22.4185 33.6248 22.5667 33.6619 22.7133 33.6619C22.99

Chrome Cache Entry: 555

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	4.726591150992212
Encrypted:	false
SSDEEP:	3:YMEWnAq4kifHrDKqKs+SdS8QAUqMFfLMfHFdS8QAUqMFOpY:YMEPBoqfvnQdqMFfqHnQdqMFmY
MD5:	F93B624146639FA7BB4C085BE144AAD8
SHA1:	7E61C834E30119196FBDA3A37E5070368976E57A
SHA-256:	62ED2EAAAFA2829D745B207B889C290A337EC18C97C1E760310EAFD22A485EAC
SHA-512:	17F531FBF594D51FE47D7BE44D0EC4220331732BCE491B36882287919240993627BD3A315AF2F2F579C0AA2434D2EFB7F681D583177635358FE16781570AB381
Malicious:	false
Reputation:	low
URL:	https://apis.falcon.aol.com/f/aep/target/session?appid=omp&ymreqid=e954eed9-f3cd-4f28-bc3b-4417573c0fa0
Preview:	{"idType":"BID","authType":"NONREG","sessionId":"c7878818-71a2-355e-954c-65820e52de58","tntId":"c7878818-71a2-355e-954c-65820e52de58","ecid":{}}

Chrome Cache Entry: 556

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11736
Entropy (8bit):	4.683072216384526
Encrypted:	false
SSDEEP:	192:K+UcmpO7BVAP+tcmpOMZ+ocmpOwuCfB5uYqDoLt+LcmpOYBwEw:tmpO1mmpORmpODPojmpO8w
MD5:	D40C073CA9A5A6000EBF640FCC0A63A9
SHA1:	5FFD966D0A648F9A64FBC32D0809345E88C4EA25
SHA-256:	46C2776774C7B07992CC40A22C5FE0A56BE0A97156336B7B34630973999EEECD
SHA-512:	92670464A131F64B7AF6DFD2659D324EA3D49778F98D1F0D3DB8053D95F4C0BDD2F8DE62D9F5CEB40560F11B51645627AFB486A2A011E1E5234035A156719ABC
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/products/recommended
Preview:	{"cpsProductList":[{"sku":"help-central-new-aol-mail","name":"AOL Mail","type":"simple","price":"0.0000","urlSku":"new-aol-mail","showChat":false,"attributes":{"offer_id":null,"svu_product_id":null,"trial_period":null,"obi_product_id":null,"price":"0.0000","myaccount_promo_sku_list":null,"name":"AOL Mail","ls_treatment_name":null,"sku":"help-central-new-aol-mail","status":"1","ls_treatment_short_desc":null,"ls_treatment_sales_pitch":null,"ls_treatment_type":null,"ls_treatment_promo_code":null,"ls_treatment_price_off":null,"help_prod_popular_articles":"overview-of-new-aol-mail,manage-conversations-in-new-aol-mail,search-for-messages-in-new-aol-mail,change-your-sending-name-in-new-aol-mail,account-management-managing-your-aol-password","help_prod_cta1":"Check Your Mail","help_prod_cta1_url":"https://mail.aol.com/","help_prod_cta2":"Try the AOL App","help_prod_cta2_url":"https://aolapps.aol.com/","help_prod_footer_image":null,"help_prod_header_img":null,"help_prod_link1":null,"help_prod_l

Chrome Cache Entry: 557

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	84325
Entropy (8bit):	4.995330061147145
Encrypted:	false
SSDEEP:	768:8V1CMVrLPLFkPHsy8c0yPokeQPYPlPtPBPVPnPUhPlPtPBPtP3PlPHP8PKPnPkPS:8y0O
MD5:	F181955CB1E46A84514734646610549A
SHA1:	A225EEB0009871B1A8C619D1E18B378172DF747D
SHA-256:	E2326C5588FBE8DAEACC1D75BFDDD287039955774A26807DD91158DE4FA914AA
SHA-512:	A4ED2867030990950CC6E5F01D90FDAC243D06B78368FEFB6E95C68A47EF1729F0F5BA8DB0F27A077860A635593B4C3AAE9E99733D4A8824A4DB30C16FEC8D9D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css
Preview:	.m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;margin:0 auto}.m-gam__placeholder p{margin:0!important;padding:0!important}.m-gam__ad-lbl{margin:0 auto;padding:0;text-align:right;font-size:13px;line-height:1.35;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#6e7780}.smartphone .m-gam--loaded{margin:0 -10px}.smartphone .stream-container .m-gam--loaded{margin:0 -25px}.smartphone .caas-body .m-gam--loaded{margin:0 -20px}.m-gam__container--stacked{height:600px;overflow:hidden}.m-gam__container--stacked.m-gam__container--abp{height:617.55px}.mpu--stack .m-gam__container--stacked{height:512px}.mpu--stack .m-gam__container--stacked.m-gam__container--abp{height:547.1px}.m-gam__container--stacked .m-gam--stack-top{margin-bottom:12px}.m-gam__container--stacked .m-g

Chrome Cache Entry: 558

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	87633
Entropy (8bit):	5.301989368439803
Encrypted:	false
SSDEEP:	1536:dhXX5lKaS9CZDnA0X6VAE+NycRQ4IOZUF2U5ll7:dhn5RSsZk0X6VwE2U5ll7
MD5:	6E3B65F7F44FA4B3BF86D1F0187490CE
SHA1:	F4006909A11A6DA5A573AF47CB63283A249E80D3
SHA-256:	8AAF0AF04BAF8EAA35B1AC46ED02D131A8D3C44896B92A45FA1555C70EBC94C9
SHA-512:	5730001752C2C6CB8AD9B7AC16804686E8DE26E9A13AB06B22314B6E4C7BF65A4D3C181F44CF0D43ECF1577A15B5B2297252921048C8E8B5860732E2BE8A83AB
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1.250.0.min.js
Preview:	/! For license information please see nr-spa-1.250.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.250.0.PROD"]=self["webpackChunk:NRBA-1.250.0.PROD"]\|\|[]).push([[111],{9139:(e,t,i)=>{let r;i.d(t,{m:()=>s});const n=new Promise((e=>{r=e})),s=Object.freeze({onReplayReady:r,sessionReplayInitialized:n})},1199:(e,t,i)=>{i.d(t,{R:()=>s,z:()=>n});var r=[];function n(e){if(0===r.length)return!0;if(void 0===e.hostname)return!1;for(var t=0;t<r.length;t++){var i=r[t];if("*"===i.hostname)return!1;if(a(i.hostname,e.hostname)&&o(i.pathname,e.pathname))return!1}return!0}function s(e){if(r=[],e&&e.length)for(var t=0;t<e.length;t++){let i=e[t];if(!i)continue;0===i.indexOf("http://")?i=i.substring(7):0===i.indexOf("https://")&&(i=i.substring(8));const n=i.indexOf("/");let s,a;n>0?(s=i.substring(0,n),a=i.substring(n)):(s=i,a="");let[o]=s.split(":");r.push({hostname:o,pathname:a})}}function a(e,t){return!(e.length>t.length)&&t.indexOf(e)===t.length-e.length}function o(e,t){return 0===e.in

Chrome Cache Entry: 559

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4493), with no line terminators
Category:	downloaded
Size (bytes):	4493
Entropy (8bit):	5.2466171019971055
Encrypted:	false
SSDEEP:	96:Zgq/BPIJ10DwLg+e5pCV83N3OIV1JbMMe9Pw/M2zziE99rmO:Kq5PugXbCVuN+kI+9rmO
MD5:	EA2D60094AF73E790A5B57A0C4E3FF76
SHA1:	FA686FB783431EF8212E040981105928C2ECFD85
SHA-256:	47DE4A38C5B50CCD8C31612E2C94E7B775A01922BB99B6CDEEF133B29690610F
SHA-512:	A18A3BB18293EFA378B04A45BE066EE1E2D3548EDB0A00382428813294E9460F921F367F65AE379CCFED41B86C176A939F6CC90BD96252E463D88AF130E06855
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/js/vendor/swipe-2.0.min.js
Preview:	function Swipe(t,n){"use strict";function e(){h=E.children,w=Array(h.length),m=t.getBoundingClientRect().width\|\|t.offsetWidth,E.style.width=h.lengthm+"px";for(var n=h.length;n--;){var e=h[n];e.style.width=m+"px",e.setAttribute("data-index",n),f.transitions&&(e.style.left=n-m+"px",a(n,b>n?-m:n>b?m:0,0))}f.transitions\|\|(E.style.left=b-m+"px"),t.style.visibility="visible"}function i(){b?r(b-1):n.continuous&&r(h.length-1)}function o(){h.length-1>b?r(b+1):n.continuous&&r(0)}function r(t,e){if(b!=t){if(f.transitions){for(var i=Math.abs(b-t)-1,o=Math.abs(b-t)/(b-t);i--;)a((t>b?t:b)-i-1,mo,0);a(b,mo,e\|\|T),a(t,0,e\|\|T)}else d(b-m,t*-m,e\|\|T);b=t,v(n.callback&&n.callback(b,h[b]))}}function a(t,n,e){s(t,n,e),w[t]=n}function s(t,n,e){var i=h[t],o=i&&i.style;o&&(o.webkitTransitionDuration=o.MozTransitionDuration=o.msTransitionDuration=o.OTransitionDuration=o.transitionDuration=e+"ms",o.webkitTransform="translate("+n+"px,0)"+"translateZ(0)",o.msTransform=o.MozTransform=o.OTransform="translateX("

Chrome Cache Entry: 560

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29345)
Category:	downloaded
Size (bytes):	38196
Entropy (8bit):	5.424679902125934
Encrypted:	false
SSDEEP:	768:3M/wi0KBfMtCGsOpYfkh2qGBS1+2Rfz4wDQjZvy/7QWwY4RXrqt:3kwiDBEtCG9Y/BSI29DQjZK/7QWwY4RY
MD5:	8AC6A0AE2CDD8C349840397A052F31F9
SHA1:	9019206E2AA23C8527B15D46CDE4A975BB01CE8B
SHA-256:	FD2064C87CEB13954A9B4EAD1B222F23471F491A3F0043ADA845DEBB749330D5
SHA-512:	B2962319B0FA6B48ACF1CF9AD7182EB82A0AC28AEE35EF9BE693A1BB928E3854DFF81637835DC73DE544C23BCF897A1301EC4C72E1CE65F79B86AC961D4850A6
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUPH46U8&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141%2C460%2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":144,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"e","coc":"NA"},"cs":"8","lookup":{"rbcn":{"name":"rbcn","time":180,"cookie":"data-r","urls":[{"type":"iframe","url":"https:\/\/secure-assets.rubiconproject.com\/utils\/xapi\/multi-sync.html?p=medianet","eu_url":null}],"pvid":29,"isBl":0,"g":1,"cocs":0},"son":{"name":"son","time":28,"cookie":"data-so","urls":[{"type":"img","url":"https:\/\/sync.go.sonobi.com\/us?https:\/\/contextual.media.net\/cksync.php?cs=8&vsid=<vsid>&type=son&refUrl=<refUrl>&vid=<vid>&axid_e=<axid_e>&ovsid=[UID]","eu_url":null}],"pvid":35,"isBl":0,"g":1,"cocs":0},"con":{"name":"con","time":364,"cookie":"data-co","urls":[{"type":"img","url":"https:\/\/medianet-match.dotomi.com\/match\/bounce\/current?version=1&networkId=57734&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redir=https%3A%2F%2Fcontex

Chrome Cache Entry: 561

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2004
Entropy (8bit):	7.682667849286243
Encrypted:	false
SSDEEP:	48:Yr2rAN8HmgcrDGfz4JF2rGSe6eM+LBuRxVFimghYIj:Yr2kBPWzQ2BerTmxVFiSIj
MD5:	232BFEE11DC835E60363E3D23A3ABF1A
SHA1:	FD00CA0DAAC48BD8D4FF5873EBF9930243D7C110
SHA-256:	D1E93E3E75F688EDE70BF8CDD0751A762F44656C2D51CEBD1CF8BBA28F92FC47
SHA-512:	D97B4AB6F965E504E0D087A0DF1423D6589C5908164AABBE9F9590BD8A872313BEE08244B6327761587FA1BE3D3FFF2FA0BE42332DCE2DBCD8A20113CD383564
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.................................................................................................................................................................................................................................................................................................................................................G........K .P%.W-.I.5kC?rKM\|V#_6..}&a8EvO.Z0].n.L n.o.M".R'....Y1.W,Q~Y.P'..~"^5...U+Y._.\2.U.\3.J..H.7mE.P&.K. ]4FwQ+d<...KzT.T)=qJHxRw.vm.n.Z1=qI<pH}.z.O$k.l.......Se.vW.i@sLs.s..2kG}.{......]7_.c\|.....i.k......CuNK}^........I\|]BwV...m.}.I..........(d?.Z2c.g...\.n...N.a..........~.{9nGf.i.......N".........k.m.........p.q...G..S(......v.u...V.\r.rX.^t.s...z.x3jB:oG...\|.z..}\|U.....~tRNS....~.^.v%...M*j.g..3.:7..GK......Z....../...t.....U.14...E...=...p...'..d.f....O..8.r....H...?.$......B...]...........w......IDAT....c`.....L..X5.m...{.$mSs5Vm...m.m

Chrome Cache Entry: 562

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvavRBUmjm-48vag0WYZinDGAY_aY4Te4oKfMPDqb10Gy9-QHAzSQx1Cz7rqxsPHS_ccqBAHw6A2dR6wTl9cEdtSmywTqYZb27mmnjWgy7q29nZykUYRJYPACmpVQ52vKRbMcNKkWI&sig=Cg0ArKJSzOyqb9kCtvFDEAE&id=lidartos&mcvt=14718&p=120,855,370,1155&mtos=14718,14718,14718,14718,14718&tos=25706,0,0,0,0&v=20240229&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3459255604&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=b&co=544120601&rst=1709508402844&rpt=7209&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 563

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8663), with no line terminators
Category:	downloaded
Size (bytes):	8663
Entropy (8bit):	3.9685180257836126
Encrypted:	false
SSDEEP:	96:Cmsj9Ygpmph9i9RKCxWzxHXNIUA8vzKK58D5+sQb5eSyRe8MjPRXiIwbzLaR/BrA:CIkNktzE/B/OFWW6Y44Wws
MD5:	5FB8FD0CD9912D39B5EABDECB442EFA4
SHA1:	D309C6B44DCBE4510C416DADC003DCA810E55731
SHA-256:	7024DE71A167D81BD9CBE043E31DF0F0A0C8A2F37A487615E3CE63484ABB15E3
SHA-512:	67D871376FAA3488D763A099B69DDBD067F25CB0AB5E6D796CA342FD9969B9B1937B174F6AB4BDA9C3820D829E27BE9D52EC4B6C26B0F22F24B4B3C852485838
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ss/nes/dfs?itype=YHB&type=1&cid=8YHB8F956&dn=www.aol.com&cc=US&ugd=desktop&callback=window.advBidxc.pf_rtd&algo=exploitation
Preview:	window.advBidxc.pf_rtd({"schema":{"delimiter":"\|","fields":["crid","dfpDiv","pvid"]},"values":{"262283745\|\|":0.35,"197670812\|\|":0.35,"586167089\|\|":0.35,"102615858\|\|25310":0.15,"839538478\|\|25014":0.35,"155262220\|\|":0.35,"155262220\|\|25014":0.35,"680361377\|\|25113":0.3,"291719069\|\|25014":0.35,"481572365\|\|25014":0.35,"531525213\|\|25308":0.15,"883518055\|\|":0.35,"659677893\|\|25308":0,"248589202\|\|25014":0.25,"560348580\|\|25014":0.35,"287538311\|\|25014":0.35,"883518055\|\|25308":0.15,"680361377\|\|25309":0.35,"659677893\|\|":0.35,"222638649\|\|":0.35,"466618147\|\|25308":0.25,"679390621\|\|":0.35,"586167089\|\|25082":0.35,"427478828\|\|25309":0.35,"251413154\|\|":0.35,"427478828\|\|":0.35,"659677893\|\|25307":0,"474205033\|\|25082":0.15,"355744884\|\|":0.35,"192459103\|\|":0.35,"102615858\|\|25307":0.15,"246161631\|\|25014":0.35,"391131126\|\|25113":0.15,"283113062\|\|25014":0.35,"901651994\|\|25014":0.35,"586167089\|\|25308":0.35,"587371258\|\|":0.35,"140238906\|\|25014":0.35,"132454864\|\|2

Chrome Cache Entry: 564

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2132
Entropy (8bit):	7.864903593053358
Encrypted:	false
SSDEEP:	48:+qdd+cpZ8nfu4zIekwgH5auRUY9tB2yY73V+OofHmJ:hdfD8n24zI+vlY9tAy0cmJ
MD5:	D489DF4119835883DF2F9A9D101126A0
SHA1:	4B9AC413FD7547B1934E19D9499906D8B2AED500
SHA-256:	65BF5CBCCFE011B9DD6C1220027BB3962974634BBA87CDDE91C18FD11E73100D
SHA-512:	70E080FE808BAD231BC487CE5EFB4F8CB4489B94ECFC182F65C951D578ECEAD4D1996C134AA9E4CCF1C794F78C38692B4989909413AFDC08008633FF041A00C9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................+\.....7..........-]............................/_+Ow......'Lu....!?.......3b.1a.,\.4c.7e.6eg...Zp.<V....?k...Hg.Dc..=j......z............u.....i}..8/Rz.(E-Qy.G................An............5cLk....@`.9[...............;\....Zu......Vr....Xt.........9g.......f...........h........7Y.8Z.........!Gq?_............................)Mvd~.....Ro..;i1T\|.Do......Nl..........t...%B...............Jh.Gf....q...}...aw Ep...Ur.j............\|........$A....3O..........8e.Cn...%Jt.q.5W~.........k........2b$Is..........Dd.............r.............{.........dy..............d~....Bb...............n........g{2T\|.....Tk..w........8R.\r..=...i....:.F_.@Y}5.O... tRNS.....S....z.Z.....-.+.........v.w....IDATH.Vw\.G.>@z....~....@.A@....4(..R..HT,x.h..5..5..5...L2s{.;..3.....vg.\|3..dW.{.I..\.u..<..F.u...s@.....pv..O..6*..ya..w.B'.U

Chrome Cache Entry: 565

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	63343
Entropy (8bit):	7.9910897855999785
Encrypted:	true
SSDEEP:	1536:ejyanxSDH5VlM36gPygxiUv+X4SiYtCXPnJdpEmYH1AQZFcP:ePxgZzM36lgxisVc2PJdpLP
MD5:	BD02C3EC913512C33090C7EB04A5C1D9
SHA1:	8B858B6BC649627EEB2BDCE227B857384ED12672
SHA-256:	B14075B8E6BCA0E1572C73DDA728913B717D8B96D052FCA89B16436B9C5F76BF
SHA-512:	BCBFABF1ED194576541B1DBC6B3A08034BCE2A3FB2AC05F98C40B4E6069C94C7CBE76ED7F645BE99BB26CDDFACBCAFF420C55A96FD9B265E04835FC39BD06E20
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,..........mz.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 566

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 833x100, components 3
Category:	dropped
Size (bytes):	12180
Entropy (8bit):	7.92777465185594
Encrypted:	false
SSDEEP:	192:nb6aGfM81hziTWAvvyGWmpyAnp8pzwggG1GXTxbkxCfaNoI4/Dx4aRXvCq4kUr0:b6aKzyHyGWmpyKpOzwgg9XwCf2oJVxvh
MD5:	74F7C49C7421783A21F05158E9DE7CD7
SHA1:	5F272F843905CCB87567A2CA8BAD77EE98A192B2
SHA-256:	948F7600959032D3CFC84F3D644ECA1C26547D28CBB7CCC15A7ACB70CFC974D4
SHA-512:	A6276B18690BD98634ED2F465F2A31FA159367C19C9C842F2A9F1CD3574714967E35F2C8435DBC1224ACC3ED7BABF15C1B50981BF2A1EBA8C2227148C7F9E322
Malicious:	false
Reputation:	low
Preview:	.....!Adobe.d....................................................................................................................................................................d.A..".........................................................................................0.. P5@`..2346.p.17.........................."#!2B3.RCS4. 1b..cs..$..0Qr...@.Aa....TP..tp.q...5...%.....................2...!".r.Pb. `1AQq.a.B..#Ss.R..............................................................#..a%Mq......w.g..e..[.g..F......dm&...6..6P.r}c..l.=Lm.Lf..-O..vV..6...&.mlm$..3k..c....`e.}.P...6.P......+...Z....Z....Z....Z....Z...T.....R.3]^..s..#.xjM....B....Zt!....2..h.H.........r5...,q3...8....k..=...;.osaa.........F-.....bLn.c.u...IB..` .gb..`5.....`s..E...%.d-...qo...........)`....56j':L>]...?5.Dv..7.WJQ(........g<....S.c...N........XS..}.W.V...V...].).\].....T\|z/...y_...y[.V.'nX.{.)..v\....jS.g..3......la.bq..7s.0>-\.\%34.V.\.s.._.)Y.....3wX.8._.........V.^c..,.....S.......

Chrome Cache Entry: 567

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	8737
Entropy (8bit):	7.943753262962755
Encrypted:	false
SSDEEP:	192:/8lkFuZ11cHyJol7g+0iOgUZiaNzSjrl53JXgrP5qLCO8uQN2uGS:/8pIh7H0iXUJS1PXgrPrOjQLl
MD5:	B25FCC90389FAD9346B135B311CD46C7
SHA1:	9E8A2B08FC7127BFBAF75FAC691F3A94CEBA6F77
SHA-256:	7EA39932EF59B9A003CEFD4C0F2F81CE444874DDDB288D0106EAA6F869CC2655
SHA-512:	70A81ED7FF7B7F55FCBFBFB3437C39B6E2817BDC3B3A02EB089CCC9B8B38EF0327CE3E51F2D1F9D6E13E480328766C9581C7D21057C4D1841F6F7B1965B12EBE
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4...................................................................:.^.`.G...{.I!$...HPk(..p....s...=kT%....W.3.....^{./Zp.y..../=..........v.R./.9...=.X(MF}.r.y......\...(..0.}..!D..6CP..2[....X.S.x..W:.........z={Q....?!..x.....\|u...^.%}..AvE..r...\6.._Pv5....<3X.4.J.....Ub..j.l+PlSf;a............1....l..Hu-,F.\|...TB.y..8v....G .;...........~.l?.>........0w...@@...s.z....\,.S....2#%o.A8.+..gG..k..G..>...rMg}.c..r1.T<.\|.-^....iYW.o.j\Z..cO..5X.....`.U..;...d.g...W........4.B.H..h...G.....\.V..W...f.4i....e2.E.....V.x.L.e.>\o.H6x7sY..u.k..J!...../.~..........-.>=7R........,>..m.......3.$.K...i.b.... ].....w.~........."mG..?*..W.b.Y...<.....z.d....yN........~..l..9AUOS._...{...]..^.....4~.+l..)..P...e%.E......X....5~..G.=..}..3.)yI..)YE@.1D.Bq+..S...H..Vz.?...5.........

Chrome Cache Entry: 568

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=3562a2a6-75ba-40ba-8019-c2dff6a6ce99
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 569

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29565)
Category:	downloaded
Size (bytes):	29600
Entropy (8bit):	5.322066206467502
Encrypted:	false
SSDEEP:	384:3ItoiWoQi1vG7vTCLm1Hm4dgA7a2at3iekWtKFnqTXnxqSpQCLQwOCGSEBkg7Hl7:O+fmavTCtAMt3izFnqTxSCACiZiQbR
MD5:	655C91ED98665809647D735C9B2A9344
SHA1:	263A169B1A1510BE470085917C8F521E4CA9316B
SHA-256:	2FCA245DE7C8C4E475DE84330F76E3A78EB754200145E1003D9ADFF224F05B9E
SHA-512:	9D1E5EA359CC173A1C9775C554C6171BC4FEF0397CF713E2474B5095D53E7B50C058398765D84DAC0D19DBE823C0A64D87D9AF10C9B5CE18BF81B360B7B72C2A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/news.655c91ed98665809.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e={1631:function(e,t,n){"use strict";n.r(t),n.d(t,{paramCase:function(){return c}});var r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},r.apply(this,arguments)};Object.create,Object.create,"function"==typeof SuppressedError&&SuppressedError;var i=function(){return i=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},i.apply(this,arguments)};function a(e){return e.toLowerCase()}Object.create,Object.create,"function"==typeof SuppressedError&&SuppressedError;var l=[/([a-z0-9])([A-Z])/g,/([A-Z])([A

Chrome Cache Entry: 570

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 571

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2830)
Category:	downloaded
Size (bytes):	194281
Entropy (8bit):	5.528682291976384
Encrypted:	false
SSDEEP:	3072:LUBufEoR1uZboHq8SMHC/alPfB2HbcGMUzbdlnD5Vglg0NIdYHG:ok1kbMOalP8BfdlnD5VOhNIdYm
MD5:	426A1139BC1459DED7B28B57465CD5AE
SHA1:	CF1A202CC58612F2C1D2CA68D73DA9E0E9DAED45
SHA-256:	08197456A5C4654924C94E7C6D49658ECE64E605C919579B645E8DFC33296A6B
SHA-512:	B078419BC653247D926C8C3E1FCD90451604EAAA24645B2D0339BC501FFE173D1B5985737709F035E776DBCD597E87AD46CDF3157C98801B51CCB69EC0ADEBD4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-13144298&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){return a.raw=a},ea=function(a,b){a.raw=b;return a},fa=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Err

Chrome Cache Entry: 572

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	51009
Entropy (8bit):	5.363505852367838
Encrypted:	false
SSDEEP:	768:EoDRVtdFtXGtpfM5kT2xNGYUJmmp09TFUVdUv2dnEAxPPLaz7O3OFDN:NztNGtFMHr3wp09ZOu2dnEANPLyP
MD5:	11B2437F39BBC12E1202EFBABAD809F5
SHA1:	BC6C360386E467B8EF757CE422C633BCD7CE530B
SHA-256:	C8639B4CFABC5CDFC809E183E8464C3BC565F5200F93AD71A6B6DA82253F7EBC
SHA-512:	548D5C5D3157A58F3258CE395C56F447AC2AD3B24BB7F761718E6E02B9E7BF4BA7154040A5EF46F29D53EE8F4BF95966C8C36184E7E09ED42486A3263156EC33
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/rapid3.js
Preview:	!function(){function fe(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},m={},e=(this.getCookieByName=function(e){return m[e]},this.setRxx=function(e){var s=-2,t=(document.domain\|\|"").split("."),l=t.length;function c(e){return"."+t.slice(e).join(".")}function u(){var e=c(s),t="rxx",n=m[t],i=(n\|\|(i=(new Date).getTime()-14383872e5,n=parseInt(Math.random().toString().substring(2)).toString(36)+"."+i.toString(36)

Chrome Cache Entry: 573

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5776
Entropy (8bit):	4.901125515092838
Encrypted:	false
SSDEEP:	96:1dJLftnl8QftnunbTmftnTYkftKIRftNyMYfttxfttgZKftt2m2ftFikBj7jftWV:ZDFTl8uH4VkKydFxj4kHwHdHJ
MD5:	230402B7279EF467759DD6FE69A8852C
SHA1:	86161A7FDA9892B1D9AEA5558D9A1F9E1194B25A
SHA-256:	627ACD39ADDD2A093423B49425A7E6DF30D7921BBDD711ED94FB1889F89D3EDA
SHA-512:	BA9F85675D3C17F3EEF1A0EE731292A4611AF537601296045AB692A9008EFA36DFC5CF33374DDB7BEAA57E836248D2B714FFC07B3A09D63FA25042023D8A63E6
Malicious:	false
Reputation:	low
Preview:	{"featured_products":[{"sku":"help-central-new-aol-mail","name":"AOL Mail","price":"0.0000","slug":"new-aol-mail","description":"Learn about what AOL Mail has to offer and how to make it your own. You've Got Mail!.","related_articles":[{"modified_date":"Feb 21, 2024","title":"Overview of AOL Mail","summary":"Learn about what New AOL Mail has to offer and how you can make it your own.","slug":"overview-of-new-aol-mail","content_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Mail","slug":"new-aol-mail"}},{"modified_date":"Oct 28, 2023","title":"Manage conversations in AOL Mail","summary":"Learn how to turn conversations on and off or delete emails in conversation mode.","slug":"manage-conversations-in-new-aol-mail","content_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Mail","slug":"new-aol-mail"}},{"modified_date":"Oct 28, 2023","title":

Chrome Cache Entry: 574

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1313)
Category:	downloaded
Size (bytes):	11987
Entropy (8bit):	5.520314749476795
Encrypted:	false
SSDEEP:	192:/9oSOs/FHXEBzpDO5EhFOpBtEhFOpBHEhFOpB2EBzpDOvEhFOpBHEhFOpBFeEhFP:/SSlXEz18wORwO7wOSEz1+wObwOhewO4
MD5:	26944C71D5AF149F517DC46307D61BDE
SHA1:	0A7820312FB0435992243B29AD364DF3CC0DA130
SHA-256:	D36A3A3BD0568D843398D3D525433E23D251B87E8DA7F0A374D3A456A761B768
SHA-512:	63BD4C1A5A753B67C04B685AECF56F19EB7E874131C25A5B00C227AEA6272315BFE69FF10FA8D7F2A6D492907AEAE856192DF74ECF425F0D002AB51425F82E2F
Malicious:	false
Reputation:	low
URL:	https://tb.video.yahoo.com/v1/evp/asset?bcid=5afc769f7239855a15fcee15&pid=5afc75ea3a04293dad9f1a1f&secure=true&rssId=3caca4ca-191c-3933-bab5-595ca1d1495a&firstVideo=true&height=276&width=368&sid=b9b3c6c5-2cd7-4937-8390-628222cda75f&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-aa-2&b_id=btnlfjdiua1pb&licensor_id=a0a6T00000R2KYJQA3&us_privacy=1YNN&isDockable=false&m.type=VOD&device=desktop&v=1&f=json&s2s=true&gdpr=false&content_len=68&content_title=Winter+storm+wreaks+havoc+across+Sierra+Nevadas&content_id=https%3A%2F%2Fwww.cnn.com%2Fvideos%2Fweather%2F2024%2F03%2F03%2Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn&gpp=DBAA&gpp_sid=-1&pver=1.3.9&aver=3.624.0&country=US&state=North+Carolina&ad.plseq=1&ad.pct=aolfrontpage&ad.pl=up&ad.pt=home&ad.pubfamily=aol&pos=preroll&evp=bcp&fmt=vmap&ps=bdud5hbm&r=https%3A%2F%2Fwww.aol.com%2F&givn=[GOOGLE_INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid=
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<vmap:VMAP xmlns:vmap="http://www.iab.net/videosuite/vmap" version="1.0">..<vmap:AdBreak breakId="FyfGjwynXHAFIlOc" breakType="linear" timeOffset="start">...<vmap:AdSource>....<vmap:VASTAdData>.....<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="3.0" xsi:noNamespaceSchemaLocation="oxml.xsd">......<Ad>.......<Wrapper>........<AdSystem><![CDATA[Ad System </AdSystem>........<VASTAdTagURI><![CDATA[https://pubads.g.doubleclick.net/gampad/ads?iu=/22888152279/us/aol/hp/dt/us_aol_hp_dt_video&ad_type=video&output=vast&gdfp_req=1&env=vp&sz=640x480&tfcd=0&unviewed_position_start=1&vpa=click&vpmute=0&vpos=preroll&correlator=1709508410166&url=https%3A%2F%2Fwww.aol.com%2F&description_url=https%3A%2F%2Fwww.aol.com%2F&gdpr=0&gdpr_consent=&us_privacy=1YNN&npa=0&ltd=0&is_lat=0&ppid=&cust_params=lmsid%3Da0a6T00000R2KYJQA3%26pstaid%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26colo%3Dbf1%26lang%3Den-US%26site%3Daolhomepage%26region%3

Chrome Cache Entry: 575

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17167)
Category:	downloaded
Size (bytes):	17202
Entropy (8bit):	5.223607279355988
Encrypted:	false
SSDEEP:	192:/X0ZQq1ExeRTfRSxPgxlyTeCptHh4hKvFsUJ35bHPHCpqyRF4/ST94qHoXCpw4NO:/X0ZQq1P9CGhKv/5TCY/dhC/NzCgxK
MD5:	0842230E9F6170E23710BD314F8CA9DA
SHA1:	A426CC9E7407BA3C29E0064E85900E01A7DAF7A7
SHA-256:	135C153FF19E4D11C4B8E28119D7B86ACFCB5352D28FDDC5E781249B4A04C766
SHA-512:	AB7414CB5A8476FE3079A639C7B4E66575DFABA676F75BBF7EF9AC784FE4AF8F413B31F7A679249CE8FF20807BA4848876836CF550AADD1FEACA0C544A97C699
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/stream.0842230e9f6170e2.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t,e={2127:function(t){var e=["img","link","meta","br","hr","input","iframe"],n=["svg","path","circle","rect","polygon","defs","linearGradient","stop","ellipse","text"],r=function(t,e){for(var n=!1,r=0;r<t.length;r+=1)if(t[r]===e){n=!0;break}return n},o=function(t){return null!==t},i=function(t){return t instanceof Node?t:"string"==typeof t\|\|"number"==typeof t?document.createTextNode(t):null},a=function(t,e){if("function"==typeof t)return t();if("string"!=typeof t)return null;for(var a=document.createDocumentFragment(),l=r(n,t)?document.createElementNS("http://www.w3.org/2000/svg",t):document.createElement(t),u=arguments.length,s=new Array(u>2?u-2:0),c=2;c<u;c++)s[c-2]=arguments[c];s.forEach((function(t){Array.isArray(t)?t.forEach((fun

Chrome Cache Entry: 576

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=9&ns_st_sp=1&ns_st_sc=1&ns_st_psq=5&ns_st_asq=5&ns_st_sq=5&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=7821&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=7821&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=7821&ns_st_dap=0&ns_st_et=20749&ns_st_det=545&ns_st_upc=7821&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=7821&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=7821&ns_st_dlpc=0&ns_st_lpa=7821&ns_st_dlpa=0&ns_st_pa=7821&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508439088&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=4&ns_st_dpc=0&ns_st_pp=4&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 577

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18967)
Category:	downloaded
Size (bytes):	19005
Entropy (8bit):	5.183712364108337
Encrypted:	false
SSDEEP:	384:/X0qTuulfboru7cxOeiCoGzaE/zmNWKhaRA7/UDNlXZl4DA+CoMVVJw:jusf0i7cxOei/fgmNWKhaRA7/6NFs3CG
MD5:	570A7E8B6540E7FDBD6D0A32B502F75C
SHA1:	2559D164AB0C754C7A9CD1612028440C7AD9C3A1
SHA-256:	6FB3B40ADD768297AFD74104E626578B67F4D38B2E5B40968FB03DAECB6BDF1F
SHA-512:	4EDB8484771E035C32A1D62F16003455A50B7AEF5AB706DC4F2948C8E77C3B31ACEEB14A7E54EF419C380E19025E50CCD861433E9D3CF6BDBA929EED72D7248B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/polyfills.570a7e8b6540e7fd.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={5012:function(t,e,r){function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},o(t)}var n=function(t){"use strict";var e,r=Object.prototype,n=r.hasOwnProperty,i=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},a="function"==typeof Symbol?Symbol:{},s=a.iterator\|\|"@@iterator",u=a.asyncIterator\|\|"@@asyncIterator",c=a.toStringTag\|\|"@@toStringTag";function f(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{f({},"")}catch(t){f=function(t,e,r){return t[e]=r}}function h(t,e,r,o){var n=e&&e.prototype instanceof v?e:v,a=O

Chrome Cache Entry: 578

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	18633
Entropy (8bit):	7.971711631040415
Encrypted:	false
SSDEEP:	384:TclWvCzufvUDFGFXdjjONtxu36MxtKRnHztQAZmHNZFLd:wlWqzkoGlglkDxtKRnTtQrjd
MD5:	F640AEBE153A94D3F89D995D692FE8B7
SHA1:	0CCC489D89FC1A1BAEEEAA1280E220AD6B8F2866
SHA-256:	9C01049609C48B6B959AA8B7F93BADE3DE09C7935F73E4C4E3337223C869C8D4
SHA-512:	30F54D15A1E7C08F7F4D0024652EDA2836D43527C0003551C17D94385D492232A069498A8D960345CBF5510F9FFC3C2098DB191270D4BF3609F76500486BB8F7
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_people_articles_471%2Ff2816944f427428b6dbbce36b851f474&client=76f99bdb8f78cd44cc0b&signature=d09cabf23bc17090e996922db5bbf3be311a0dd6
Preview:	......JFIF...........................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|.............."..........4.................................................................:'JK.$tN.....@.g@.o..N.V..s....^....Ay.....V(>..`.!..1.EA{S.....3..[#`....w....Gp3...z.Q...z..z.9.M.b.GD.$X....%..%y:.sV.sV%..U....\.....NH...=..R.H.d..6..^.....rx..(...j;....#.......s...@b= o/.)H:.r......+..wT{...z&..QX...Aqi(].k.qi.\...Y.ZJ.....ij.[., .)...g....^[RN..#.[EH....G #\........G "9...%......}"9.K.t......d...ez...I%..Ahp.Q.A%...(...C..QI/....E.FAv"..V.E..g.3.s.]F[JN..h..R5.w3.y8........... r/.y.3y..p...+..HUj.?..?....<.......8.J..]..'.5I(.RH.'...\|H.).)...,.t...0...[...,d4.#..O...Z..ij(ZuE".W..(M.K.pK.(I..2$}..........^.x.Q...x..-...7.<Hq-..s.U...r.-UPE^.^..^'.....w...F>..pb....f)....t5........S.2...#....(K.(J..%..%F.K....t.k.o..V..rh,r:t.{.=7b..;..&,..l...E...qs4.b.cWQ...NUj.p...V..NE.D4n.K.......;.)`3..2

Chrome Cache Entry: 579

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	535
Entropy (8bit):	7.383788917574239
Encrypted:	false
SSDEEP:	12:6v/7O9b/bQvkGnBByiwDiWY5y28VR0nbO6KhRtKr2i2v:Ij9RWYQ/UnbbWeiDv
MD5:	491574B00CD8FB418215DEBDB2DCA2C9
SHA1:	86BCC1181EC66F23FD9F9C324154CC5E7863A4DE
SHA-256:	E5BA76000CC58D5157DC91DA69FD9703DE9DC6BF96A973EC44A215984115BD67
SHA-512:	117C3DFC68EF3D217B6AEC527432E541963968AE519D3C0B21323876D66239583DA51689B78A9F62A35DFEE136C6EE633B899B451E056F187DF1F4DE5C8493CB
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=d8586900015e214006818744f76d7ffdbd495d00
Preview:	.PNG........IHDR.............(-.S....PLTEGpLF`.:V..u}7T..5B.....GS....8E.CO..Kd..XeLe..JV....NZ...A[.......\s.^t....w..}......Sa.....-:...#B........"0Yp......)G....1N....q.....'5..Oh.k....aw.y..7T.Hb.......#B...lx...........@[.........gr.Sa.6......tRNS...1.....1.1..............G.n.....IDAT..%..b.0....E.s'!.............._?6...0.}j:.>.W....D.@O.0<....s.....%X.......y.3..6($Fa.I.;.+......'Jp.............l..#.%..pBZ.....a.q..]...T..A."?.....\;.....K.....mV.......u]..1adZ..Uj.0.-.>_.`...G..........IEND.B`.

Chrome Cache Entry: 580

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6792), with no line terminators
Category:	downloaded
Size (bytes):	6792
Entropy (8bit):	5.129958192618698
Encrypted:	false
SSDEEP:	192:ceDn9n0VJLyXq1sO2L8kh1pBpeKpn2PdmnObf:fDn9n0V1yHL8aLPbn2PAn0
MD5:	DE6B7DD6C9A37556366A69C0F8DD83B6
SHA1:	0F43BAC9204E1419F848E5D5D477A787B195241A
SHA-256:	C85A2DFB4F61FEA40255EC5DF45104467F03227BCCEB7318A4AAA6832BEE8DD2
SHA-512:	79F488AC2D1FE698C620460A4BB86C21B9AC974951EBBA648A0D8810C5CB64F201A49797C200A487B4F019369165CB553D6C7706351AC8BBB505037F6E38F760
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/hero-cover.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.heroCover=function(t){"use strict";var e;"function"==typeof SuppressedError&&SuppressedError,function(t){t.DEV="dev",t.QA="qa",t.QA5="qa5",t.STAGE="stage",t.PROD="prod"}(e\|\|(e={}));var o={"theme-a":"button--dory button--large","theme-a-bold":"button--dory button--large button--bold","theme-aa":"button--dory button--large button--large--wide","theme-aa-bold":"button--dory button--large button--large--wide button--bold","theme-b":"button--text-color--dory button--large","theme-c":"button--outline--dory button--outline button--large","theme-d":"button--dory button--small","theme-e":"button--outline--dory button--outline","theme-f":"button--watermelon button--large","theme-g":"button--outline button--outline--charcoal--transparent button--large","theme-h":"button--outline button--outline--white--transparent button--large","theme-i":"button--danteinferno button--large","theme-j":"button--swedishfish button--large","theme-k":"button--danteinferno--yellow

Chrome Cache Entry: 581

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1991
Entropy (8bit):	3.8123462766897567
Encrypted:	false
SSDEEP:	24:YRZb2XoQXKcFI1kJkHI8LXbBnrjmKfbqEEG:YRZXQG1w6XvmUnEG
MD5:	2165DFAD04FA42A17B7A4D4A3E5DB7BF
SHA1:	31E57CF43133ADA4C069ADFD418D0ABF70F39B9E
SHA-256:	701658F6509CF1CB7E3B1EF3E38874A983F22C7AC1AAB8E5B77DC11F96B49547
SHA-512:	47121AEEEE658768E0ECA801F9F3CD73CAEDD160BA5FF58A2320401809C0CC7417AE68AD54310FF2BC58C2C963C7524BA2F9C7D0538FB9A6A72E447AA1FCC14C
Malicious:	false
Reputation:	low
URL:	https://api.content.aol.com/catalog/cms/help-central-usaol-navigation-rail-unauthenticated
Preview:	{"identifier":"help-central-usaol-navigation-rail-unauthenticated","content":"[\n {\n \"id\": \"products\",\n \"label\": \"Products\",\n \"url\": \"/a-z\"\n },\n {\n \"id\": \"shortcuts\",\n \"label\": \"Shortcuts\",\n \"subpanel\": {\n \"items\": [\n {\n \"type\": \"link\",\n \"label\": \"Reset My Password\",\n \"url\": \"https://login.aol.com/myaccount/security\"\n },\n {\n \"type\": \"link\",\n \"label\": \"AOL Mail Troubleshooting\",\n \"url\": \"/articles/aol-mail-troubleshooting\"\n },\n {\n \"type\": \"link\",\n \"label\": \"Minimum requirements for AOL Mail\",\n \"url\": \"/articles/what-are-the-minimum-system-requirements-for-aol-mail\"\n },\n {\

Chrome Cache Entry: 582

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1785
Entropy (8bit):	7.470718589759509
Encrypted:	false
SSDEEP:	48:Ay0qRhPZ1qvHDh9WVZEY21++x1fJ66X7xj4UTN57Xre6J:A6ZEvF9cEY2NRVX1MuN57bpJ
MD5:	4EBA1FBA64296252E56327839FD1781F
SHA1:	28D7DBEFCF7CCBED883833A1CA494D2DEA84F3C9
SHA-256:	F0BFD8F52A289AA4234D459722AD044853DBBCCF3ED6653C7398A2D7855B2528
SHA-512:	9F250979243BE59972D59639F193E57B70FFF1826E6E7B313778C8F773D678346DE4981FF8809C5BA9FCDD2E4E32D2AFF3644BE085AA327B7161FE6A2872C2FF
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FP2Lcp4ZIzhVhuQjVqH9yJA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191021%2F500x500%2Frockets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=8339d7b537e79acc2460e70ee7938168423d4456
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL............................................................................................................................................................................................................................................................................................................................A..A..A..A........>......D........>.....@....t....Ys.h..!N..2[.:b.......%Q.=Y..>.y...>.n......j}.s...?.c...z....................Sv........Uk.Ic.`u.Ps.}...n..6[....h...;.F].....e{..A...._\|..9.....B_....Vm..;.Jo.1K.$D....=a.Nf.......p..:`...Qg.{..4]......7W.6V.i........1W....r....~................l..l~.4Q.!I.Gf..?."@..........=_.Ko.L_.[\|.;V.,R.Ma.v....B.~..@f.+V..J.....G.x...A.:U..%G....t..k.._r.>V.Jg.....~..e...5P...jtRNS.iD.5."....&r.(...K.N0[.o.....Y..9@=.....\|..T.d`...,........lf....G..^..........................v.t.YB.H...AIDAT....ux......u.nu.[w..0...HJ..`...z...=..n;.n%.P0.[..../......

Chrome Cache Entry: 583

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11084), with no line terminators
Category:	downloaded
Size (bytes):	11084
Entropy (8bit):	5.26714858103651
Encrypted:	false
SSDEEP:	192:sANzVNUBOebwvXDA+mJ4fXOrTIjDJfiRxug9xx+EMZajp:PNbUBOjHmJcOgjDJaR1bMZip
MD5:	65F1D21D5FCC9D21DA758ADABABD0C3C
SHA1:	E0661D07D64C00008BC9D013D16EEC0A0F156DC7
SHA-256:	D2B82E612D2A812E8BE2A57300DAB8923C4F2EDBE7A799E7DA70791B595646FE
SHA-512:	DE7D7DC739CED2E6CFA52C1809144180787ADC3AD5F9B7597C72B9D9BD5EB2F21DE06B1FC12B5034F2458DE428B368772700A6665D3F2E02F148A300239E6183
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/os/help-main/assets/js/modernizr-2.8.3.min.js
Preview:	window.Modernizr=function(e,t,n){function r(e){b.cssText=e}function o(e,t){return r(S.join(e+";")+(t\|\|""))}function a(e,t){return typeof e===t}function i(e,t){return!!~(""+e).indexOf(t)}function c(e,t){for(var r in e){var o=e[r];if(!i(o,"-")&&b[o]!==n)return"pfx"==t?o:!0}return!1}function s(e,t,r){for(var o in e){var i=t[e[o]];if(i!==n)return r===!1?e[o]:a(i,"function")?i.bind(r\|\|t):i}return!1}function u(e,t,n){var r=e.charAt(0).toUpperCase()+e.slice(1),o=(e+" "+k.join(r+" ")+r).split(" ");return a(t,"string")\|\|a(t,"undefined")?c(o,t):(o=(e+" "+T.join(r+" ")+r).split(" "),s(o,t,n))}function l(){p.input=function(n){for(var r=0,o=n.length;o>r;r++)j[n[r]]=!!(n[r]in E);return j.list&&(j.list=!(!t.createElement("datalist")\|\|!e.HTMLDataListElement)),j}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),p.inputtypes=function(e){for(var r,o,a,i=0,c=e.length;c>i;i++)E.setAttribute("type",o=e[i]),r="text"!==E.type,r&&(E.value=x,E.style.cssText="position:

Chrome Cache Entry: 584

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	7.596436994244262
Encrypted:	false
SSDEEP:	24:ztFE6xOVjRJk9jkSupGnPEbcD8To8ZQVxLdWjfXGWV7MEa2m:ztC3Rqj+pGPOcD8fSV+jfXGWBCV
MD5:	F721CF57548E40CB0F7E8ED0934CF1F1
SHA1:	2CF8D835FDB58A658B9074DCCB89CA66D52E9B2C
SHA-256:	6BD7C68C3A96C7ED2357B8072C073D55175FFF2748D62AC50B6B8B76286BD486
SHA-512:	7E34D1C7BAA68C5D2D8DF1329F2ECF1F2ECCD49E46360835313F64457A07160570CD7B5E77DF05AA1246920E253857464C3656EC7D41ADFF545959A36E5ED879
Malicious:	false
Reputation:	low
Preview:	......JFIF.......................................................... .... %...%-))-969KKd......................................!...!.1&""&18/-/8D==DVQVpp....... . .............~...................................................!#..$1BQar................................................!.."1AQa2Bq...#............?.t.}.....G2=.m..b.\|K`.....t..4....lg.rhrH.\..@.......d.ooc......M..":1...(.g...3.%.?.4..n..$.....X.F.f..8..f....n&NA9.ug....8...N.0...>....p...>3M.n..u+bv.Zb..E.-~k.... b.....V../..v...jv).a\a..P..N.r..e.O.2..l.V5,e...Q.......I..E..{..5.'.,i`K.lg.[....P.w.....s.a.K..r.....i....Y.....s.J..T...5...S..wn$..v..K..Z...-.K.....A62.N`B..G............9<.'./.'Pe...d....L.O...Sv8...{.P.d."...H.X.B..=....Y.m....H...$%fI6.N2.n.o/.}.a..,IC.f.4}.a...$.+.FzFK..cA-... !..y.......X,.x....9...\|.v-z..LC....W.:B.XA...y....@`:.76....py..<..;h...i...0....u#.....[zX.;....J].\..9..!#.... n.2.....~..X...\..6p=..j.+.]....x.`F.....M8...A(%*..1...........Y.:h7.01.......

Chrome Cache Entry: 585

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=6&ns_st_sp=1&ns_st_sc=1&ns_st_psq=3&ns_st_asq=3&ns_st_sq=3&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=7815&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=7815&ns_st_dpt=1049&ns_st_ipt=1049&ns_st_ap=7815&ns_st_dap=1049&ns_st_et=17214&ns_st_det=1049&ns_st_upc=7815&ns_st_dupc=1049&ns_st_iupc=1049&ns_st_upa=7815&ns_st_dupa=1049&ns_st_iupa=1049&ns_st_lpc=7815&ns_st_dlpc=1049&ns_st_lpa=7815&ns_st_dlpa=1049&ns_st_pa=7815&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508435553&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=3&ns_st_dpc=1&ns_st_pp=3&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 586

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (463)
Category:	downloaded
Size (bytes):	464
Entropy (8bit):	4.79636784000914
Encrypted:	false
SSDEEP:	12:1R6qkEycJRW5iT7NV0SiL+CH7ygtlJDP6Ep2:1R6qkY/WUTm7RftDg
MD5:	9C9A410CE03DC2C7B6A95E9A2F209FEA
SHA1:	CA8775498DF557229CC11F39BB06BDB3C45E8EC6
SHA-256:	DC6428B961540E2E43B89C50CD94ED6E5D9E7629BFEC3E9C96905690007A1222
SHA-512:	88AF7B316DE7ADB6F32C9F54A9A2CA4FD1C98E924790A52CDE510F69D0FDA026AAF49E51FFCA4462FEB2227D6A4CD4AEEACF62537FF4F54A8951C16C1EECC074
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/section-footer.css
Preview:	.container{box-sizing:content-box;margin-left:auto;margin-right:auto}.container>{box-sizing:border-box}.section-footer{text-align:center;padding-top:40px;margin-top:0;font-weight:400;font-size:0.875rem;line-height:1.71;margin-bottom:1.8em}.section-footer__container{padding-left:5vw;padding-right:5vw}@media(min-width: 768px){.section-footer{font-size:1rem;line-height:1.5}}.section-footer :first-child{margin-top:0}.section-footer *:last-child{margin-bottom:0}.

Chrome Cache Entry: 587

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 588

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1619
Entropy (8bit):	7.3339603715310115
Encrypted:	false
SSDEEP:	48:s8fMduisHPCXcIoGlwXO2MyBBwC31qh6MGBCWF:s8flNIoGCMyBBwC06hvF
MD5:	76F0AF63BA54FAFDB24C12012A4865B1
SHA1:	97AB3F8580BF3940DDFC53617A89E3BE411A8771
SHA-256:	CCA255F7548BA7A9FC1DF5207465DAAF2361C9A69F79D3C8B8905A8819894F16
SHA-512:	0A8004823BB3CE7BD59AD863E76D92203A38EE5CE0E1C5B613213C2FC7AE154C32A310DA0764BBA796D57013BE9FEBE12021D40B941EE77082243AFA2CAD1B30
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-96x96.png
Preview:	.PNG........IHDR...`...`......F......PLTEGpL.i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i.....i.R..x...............l..j........k..i.....s....&x..m..p..........,{.7........$v......................9.. s.}..[..g.................3..U.....C............o.0~....J......o..r.f............../}....u........=..k..Y..?..............b........M........"u.S..O..^..;.....i...........d....................{...........n........*z.......E..5..Zk.j...3tRNS.;..w...\|H....h.....?[j.2.........7M&.... ......-......IDATh...[.A...E..5.L;.:.SwH.PT@..R...2.#K;......../m.a.vy..w~../....~.y.Y.Y.(.\....$c.>....b....b}.L.....jJ....x.....A....C...I.O;.U.8... >OH...<d.....s...c..e.Li.....p....B.....#K@i....J.r....%..2.........P.h......l..j.0F7r7E..o..=..`B.W#....otY.......q6....p.l..$>w8..`....G,.&1>.F:....<.k_v,Q..Q..;..p.....%:@k....i.c.K.\.Q..!oO...+Z.>p..G.0.B.....\..p...V.x..WzzQc.F,..T.g..n#.....w

Chrome Cache Entry: 589

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=16&ns_st_sp=1&ns_st_sc=1&ns_st_psq=8&ns_st_asq=8&ns_st_sq=8&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=11435&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11435&ns_st_dpt=5&ns_st_ipt=5&ns_st_ap=11435&ns_st_dap=5&ns_st_et=33527&ns_st_det=5&ns_st_upc=11435&ns_st_dupc=5&ns_st_iupc=5&ns_st_upa=11435&ns_st_dupa=5&ns_st_iupa=5&ns_st_lpc=11435&ns_st_dlpc=5&ns_st_lpa=11435&ns_st_dlpa=5&ns_st_pa=11435&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508451866&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=8&ns_st_dpc=1&ns_st_pp=8&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 590

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	331
Entropy (8bit):	6.979178920515702
Encrypted:	false
SSDEEP:	6:6v/lhPfd2pZIQKYsQUUVD+1/rzILNDwYHSQg+tcNOzoYZFmyGdfxviyeC+IVp:6v/7MZIQKxt96NDwYHSQlcNGFm31x6yB
MD5:	6E73E8B5F42F8EB2A888E9482F70C0D2
SHA1:	D0DE9FA1BB16D3FA18DE58F01DFBB493F3D06F11
SHA-256:	F376E4F8B74B99D4A88FCCE470C6098071632B0B94507255DF10744320BE1E1A
SHA-512:	BC52ADDF2304AF93744D98957A99EC5E6A6E1AD8BFF1E6E470F1A74FF420D0FE5CB007002DA17D3BBC0072A8B01CD00C572B8C2BD187BC54E2165089E3D7312F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...WPLTEGpL<[.<Z.Lh.;Z.;Z.Gd.A_.<[.<[.Ca.;Z.<[.;Z.:Y.Gd.....Sn.^w.w..q..........h.....?].Mi....\....tRNS.......1........F.....IDAT..e....0..C.$.v.....w.).*u..V...(=H9h%...'f..O\....`8.......PB..6....h1..a.,...B.1.....X.#.K.h.....o.........f.>.Zb-..?L..=..^f..-g_.G9.G...6...q.L....IEND.B`.

Chrome Cache Entry: 591

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	14350
Entropy (8bit):	7.965630074052074
Encrypted:	false
SSDEEP:	384:q0bpAsrGrlBsLJZzmdQ9KCkuvF7WvEObj/9oA570VTs1I04gQZ:qaAnbbdQoKvpWvRbjlJt0tsG
MD5:	2DDF533194ED6457E3C14912D8B5A8D7
SHA1:	73874913A2C350C87575BD1F7426A9E9442A8819
SHA-256:	3DFB671709E7A388B1607ACA2F8AA788DB965858CFF573EE7D0E782D039B342F
SHA-512:	842AC9E043EC92642AB714A6D5CEE6E61250111ECC8319FA03EEAB07B3016C2896839F0CB6A112A3D5EE2600F39996117AAA19B8FF11F1270A247F4269F1BC3A
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/25s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/25s/match/image.jpeg*~hmac=08969a2d61776440bf1a2b2e6d98687b31c466c0e0344f460898c4bb00bb328f
Preview:	......JFIF..............Lavc60.3.100...C......................&....-(0/,(,+28H=25D6+,>U?DJLPQP0<X^WN^HOPM...C.......%..%M3,3MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM...........".......................................L.........................!..1.AQ.."2Uaq......#3B.$ERT..4Cbrt....%6D&Sds..........................................................!1.Q."2A..Raq...................?......[Ew..+.@r.....DPz..S...qGL.J..'.).q4f.....A.Y..+\Yd.M...!z..c....Z...R.>...5%..JWwj..Vb.s?....\\|.Ut....L.u.:I.L.2Ie..M.........t.@1QRQL.=.J.P).N.....e.C\.....F.O..5....8x...?5...~..TIP...d..;M<.C5k.#..4...U_..r6.a...yo...q-...j.[mM.3]5,.,.Z.wr.........A.7q.....y..&......G.\{h-...'....]70.k..v `.D.V..5-4.C+%.G...dj..9.w.....q-..kY..D..{F6.a...p45v..#.2S.B.5...k.z.{Y.Ll.E...4.cX.I.9...........#a.......T..*....~....n...94SG3.8.@.7@9.go....YP..!h.W..60....e...l..)...^...U..6...3.......}%..}9t..nv....\|s...Zy......l.....v..7O..K.<Aj.g....~...M.+.....f.R..7H...C\\0.e....'...r

Chrome Cache Entry: 592

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (766)
Category:	downloaded
Size (bytes):	3247
Entropy (8bit):	5.148496699547664
Encrypted:	false
SSDEEP:	48:0sNXNUNbNANwgol5q+vSu5N5FWbRQGTiR9Ma+E1MyfZQG3h2XYKu:uNAK5U+vPAzU9MaLLRku
MD5:	AA02FAF6344D876281370766477C5964
SHA1:	478D55030E7D17D0B9B5BCD42AEDE77D9856D0E3
SHA-256:	AF58CF33C5F4FFF75D6D6F2D2AC4681647748A653A90A0B6C2C2E6C5A2AF4619
SHA-512:	B40B2AFAB27A7B51930FEBD873080A04222C7BAB63023970962F048C62570B390E1594C789CA321760DD3B07D001409A1119E316A96D69E10BE036388FE6770A
Malicious:	false
Reputation:	low
URL:	https://products.gobankingrates.com/pub/421977c5-5f01-11ed-9a44-0a919b37cd73?ct_url=https://us-east-1-web-oao.ssp.yahoo.com/admax/adClick.do?dcn=8a9690350187874cb30f80639700008b&n=Yahoo+SSP&id=342a3272366a4ecbb8599f16d1e7baba&tid=8a969d570187874cae487b5dfbb90087&nid=8a808aee2edf264a012f0d6ee4e87844&pos=us_aol_hp_dt_as_top_right_c&grp=%3F%3F%3F&type=2&hbp=252&nl=1709508449369&rts=1709508449335&ari=71e235ae00a94cc08dbd49337f1dd733&us_privacy=1YNN&b=OTIwNTs7Ozs7Ozs0MjkzMjE4Nzs7Ozs7Ozs7OzsxOw..&a=1c3e61d1-2713-4485-9ace-8542e793cfad&rdm=1&rd=https://pn.ybp.yahoo.com/cj/cd/n8a1jXIplq5s47Tm9bRbuV6faogRpEzT7do4au9LpqyBZk02ikMkVyMuDZGB7jRQAZnLLZTuOTg-eZG0fa0lQxB-2fAqiIp3eb62Hx01jBVN1VDvShwlAKbfmLNuygJND34r9ATp4iS4KTEU4lK9uEXPyjQDt4juEqVeAe-RgaeaWU4UKTjcL6aSYVYIjHirZmiaEOk4Le5CSKezg-d2TWU0tE6F-KGO-vGu9guK4i6Z8sc9dHr9AuyfUcqXvx73IMDjD14xozmb5mcvBgfwClKPehOpz6uwKpJlRFf2GJtUYxkRATkC9g/rurl/&pub_inventory=aol
Preview:	<!doctype html>.<html>..<head>. <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>. <link rel="preconnect" href="https://fonts.googleapis.com" crossorigin>. <link rel="preconnect" href="https://www.google-analytics.com" crossorigin>. <script>. window.appData = { isProduction: 'true' === 'true' };. window.startTime = Date.now();. </script>. Google Tag Manager -->. <script>. (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. '//www.googletagmanager.com/gtm.js?id='+i+dl+'';f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-KDRQDVW');. </script>. End Google Tag Manager -->. Required meta tags -->. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="robots" content="noindex, no

Chrome Cache Entry: 593

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	354
Entropy (8bit):	6.624288456317598
Encrypted:	false
SSDEEP:	6:6v/lhPfanDLGuaRzRq2W/dg+os5oglGksNx+RsOlI6tyF4PFM6GsCtiJjmHxDQ3f:6v/7qLGuaR9nWK+noTx/le9MXJtBHJQP
MD5:	4E60D49658A9F45ADEB0F4A371574F52
SHA1:	460B58EF85F4966E87521A375524BC4D61D22582
SHA-256:	794054A00504519338C27752BE5316A79C24707EA375CE52E871A89F4FF77AA9
SHA-512:	816AC9C4845B91DA19AB70B8AFA8DFF912AA0031FD47BE5823E1E713B26C7E70AFEA6B421A9A8DF355CB03CC187D5F311913A3D9E99271F70D4B5A36F5EA2F4A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee
Preview:	.PNG........IHDR.............(-.S...iPLTEGpL....HQ..........................................OOO.........:::...wwweee.........kkk......111XXX.........9....tRNS...1....1.........IDAT..U.... ....B..........\,-...S4...`\|..*4.h...sb.9.V.".H...{..a..^.&....<..E).\g.=...6uI.('.w.}..GR..+......TXy.:..i...!..........v..[...=...v...{.....D.....IEND.B`.

Chrome Cache Entry: 594

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1793
Entropy (8bit):	7.588421172765343
Encrypted:	false
SSDEEP:	48:Gxo97u9I+nIcdTX3D6HZ9GNKjD/tNNrtY3y1:Gxohu9I+nbj3DEZ99fBJY3y1
MD5:	E1659A010543D3C34B4F66A24F826F40
SHA1:	96D20CAA5F7DFE8056799A8552C2D99EF0CFCC81
SHA-256:	CBE6D9E92E68621C34A24DAFC72A15CB52826EDBE1199AA86D1940A59FCFE871
SHA-512:	6BBEF69C4826E9CB873BFC009A69EC3B1000FD60B02E1D5C86B4B8B021A040A480B1F3DF6DD398FEFF4FC8843A3404FA8B0A34409B84603896EC86816FF1BFA6
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................-b..0...3IX.8i.5.39MW.4_.4g0Rz.9.4..b.1a..1%B[.;].<].4.GYplL$A[....5_.;k2T{<NVQZR6KW.......xG..2.8..=....>m..0..c.6CRU.3.<...<[.MYS..1.tI.zG..1.9^Ec.V]Q.2`..?!?\./a.9^T\QY_P.5?^...=#Ht.7...,Nxg}..6)Mw.6he{.1HXt..`x.Gd..uH....9.0d(Lv"@[.4.5..>?PVsnK.{F..<by...Al....EQl........yG.:.....1.7^..@]aP.=\.:AQU.4&BZ..<,FY..C)DZ..@..?i~.GUT.3.........Vp.p..deN}...3f7X~..AMi....nkL^v.okL.1dx.................8i8X~%Ju.m.2...p...2e.\|FJWSzrJ...`cO.....B......n{..P8MW..A..C.9jwpJ.9..0PZR..>...m...7.Cp5KXCa..AoB`.Yr.w...4IVTxpJ.8{......JtRNS...E...&..e3..z).A....._.L>Q......p."....;..[......`....-.....j...!gt.V8L.....fIDAT....e`.....mZ.........]......#i<u_.Rw....2\|......}........<tR...t...`!......R W.......k..

Chrome Cache Entry: 595

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 596

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2854)
Category:	downloaded
Size (bytes):	20101
Entropy (8bit):	5.5153385521223
Encrypted:	false
SSDEEP:	384:8ArQ8Iu5bYFSzRxx+aeZm2moUiUYUxa5f1B3i5hqwWl/xXs2e6ajgqlXbF+z4EL1:zrQDuFYFSz/xeZmvoUiUxM5DS5hqwWpD
MD5:	D3E73C3217B7C3296C5DA07D7AD8C3A0
SHA1:	B9AF82BA4689F03D73176311630F601BEAA41A95
SHA-256:	E7AFDE571C53D192943A40B3B7F109E698BB47E6D6424BC7D1F53A7CB9466360
SHA-512:	72DE3FAE53C05E2F8AB5AD95547608DFA5B2AD5F0A2E74CA8FBD80324F2C044A67C0E7B4C16175098987E1D44EC524CEEF8A7C32082DC59574BFA4040F36BBE7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240228/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function ia(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,g){for(var f=Array(arguments.length-2),k=2;k<arguments.length;k++)f[k-2]=arguments[k];return b.prototype[e].apply(d,f

Chrome Cache Entry: 597

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20567), with no line terminators
Category:	downloaded
Size (bytes):	20567
Entropy (8bit):	5.787199698422859
Encrypted:	false
SSDEEP:	384:DSlNjjOSgNjuYn30XuFMOpAuXKgS7QhQo+HoABiEOaij:DmjOpuYn3/M3o+H4
MD5:	A531C16F740B20532CCB2DAC03724C6A
SHA1:	3E7E6863CFA28E89E0DC5AA44A503586B5F1E4B4
SHA-256:	A387DA6A68905C6E6DC981148B5BDA4666A8EEB839D86CD4E2C1933FF6D8DD63
SHA-512:	DDC9BF54FCA93861A1A0AE3C09426025ABF4252BA8EBA053153BDFBC952CC0E4E6CC3861C59ECAEACDC7324B053CE8CBADAAB8B850AA6EEE2D1782E43C7E868A
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.3.9/bcplayer.css
Preview:	.js-focus-visible .vjs-menu :not(.vjs-selected):focus:not(.focus-visible),.video-js .vjs-menu :not(.vjs-selected):focus:not(:focus-visible){background:#151b17}#bc-player.vjs-vpaid-playing > *{z-index:1}#bc-player:not(.vjs-ad-playing) .vjs-ima3-ad-container{display:none}#bc-player.vjs-ad-loading .vjs-title-bar{display:none}#bc-player.vjs-ad-loading .vjs-progress-control{display:none;pointer-events:none}#bc-player:not(.vjs-has-started) .evp-overlay-show{display:none}#bc-player:not(.vjs-has-started) .vjs-title-bar{background:rgba(0,0,0,0.5);height:100%}#bc-player.vjs-has-started .evp-overlay-show{display:block !important;left:5px}#bc-player.vjs-liveui .vjs-progress-control{display:none;pointer-events:none}#bc-player:hover .vjs-big-play-button{background:linear-gradient(45deg,rgba(255,255,255,0.5) 0%,rgba(255,255,255,0.5) 40%,rgba(255,255,255,0.5) 60%,rgba(255,255,255,0.5) 100%)}#bc-player.vjs-ad-loading .vjs-control-bar .vjs-time-control,#bc-player.vjs-ad-playing .vjs-control-bar .vjs-tim

Chrome Cache Entry: 598

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	508579
Entropy (8bit):	4.559084918874422
Encrypted:	false
SSDEEP:	1536:F5uvU7uFIpqqSdeUl15Me4h2Krji3XD42Ru8mzZ/N/9xGXpssCxz2s3kH0Vi0VBt:C5/4f35J8gF
MD5:	0471DAA01EB11E7B69E87F2213120F5D
SHA1:	44C7BE229ADB6D08649ADBA4C5C31E7586374D10
SHA-256:	F5E8183CD835E691CFD8C7BDDD105F4C9E385D04919AC6363331133408889B8E
SHA-512:	00549232B028353A853383C55EB806916EC19F2CFE326884C153E565ADD4D0D245E5FEBEAD3941D28D85DAAF9CACB6C18F7EBFB70B3A5FB4928F66E7517B9D29
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/weather.0471daa01eb11e7b.js
Preview:	!function(L,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():L.CAAS_AOLCOM=e()}(self,(function(){return function(){var L,e={1631:function(L,e,t){"use strict";t.r(e),t.d(e,{paramCase:function(){return l}});var i=function(){return i=Object.assign\|\|function(L){for(var e,t=1,i=arguments.length;t<i;t++)for(var n in e=arguments[t])Object.prototype.hasOwnProperty.call(e,n)&&(L[n]=e[n]);return L},i.apply(this,arguments)};Object.create,Object.create,"function"==typeof SuppressedError&&SuppressedError;var n=function(){return n=Object.assign\|\|function(L){for(var e,t=1,i=arguments.length;t<i;t++)for(var n in e=arguments[t])Object.prototype.hasOwnProperty.call(e,n)&&(L[n]=e[n]);return L},n.apply(this,arguments)};function a(L){return L.toLowerCase()}Object.create,Object.create,"function"==typeof SuppressedError&&SuppressedError;var r=[/([a-z0-9])([A-Z])/g,/([A-Z])(

Chrome Cache Entry: 599

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	32281
Entropy (8bit):	4.5377915994954545
Encrypted:	false
SSDEEP:	768:qt68uqUhC3c7cJTiMmypcocQcBc5cHcZcBcfcick4cr5cQcAcIcRcwc8cfNcjcIW:g6cUhCL3R6zE
MD5:	2BCD33ABCF1D9B53E39084BEF961E404
SHA1:	D03ED6E7B587A9FFEC31D7CE468FEFCC763BC3AC
SHA-256:	1ADDFAE65F5AE5F79529B5D18E1A3AD6BFA2D6C11107725EF2377B4C040119BC
SHA-512:	D32EDA524708E5367B560C48C534847F36C94D2C1E23CD7CC6F74B1F92AE6272785708A275F8A67CB3C381F19564D7406B806F7C32317F9988BC84B3836F2351
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/kj/js/dispatcherWidget.js?_=1709508425917
Preview:	(function () {. var __extends = (this && this.__extends) \|\| (function () {. var extendStatics = function (d, b) {. extendStatics = Object.setPrototypeOf \|\|. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|. function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };. return extendStatics(d, b);. };. return function (d, b) {. if (typeof b !== "function" && b !== null). throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");. extendStatics(d, b);. function __() { this.constructor = d; }. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());. };. })();. var WidgetMode;. (function (WidgetMode) {. WidgetMode["AutoHide"] = "autoHide";. WidgetMode["Overlay"] = "overlay";. WidgetMode["Stick

Chrome Cache Entry: 600

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 601

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13732
Entropy (8bit):	3.674706045825715
Encrypted:	false
SSDEEP:	192:LQg7YOCaqKpGLjwK7qFtpMNJ6btLHRPfSbpp87UdSp1FhC2GczNmJkhLWLplq8/w:kgzGLsK+pbxS1eg2Gc5WFo8/i4JakpA
MD5:	0343DFC6636833A9D5419FB66FCDCB1A
SHA1:	5AED35AE0C4332D49B1C1754E52AD0E4729DFA7A
SHA-256:	E014F4FC15B995AA3F08E90FEC21245FCDE44E4111807AB009D8FD633C267B92
SHA-512:	89E48C5A8491563B13CA419D7D5CA4F451988A63B4C1FD5977AF616D62BF6503A9D5C7DED8F1BC279376BADAA494598E47FD3121D471BCBB00E30C0A21544DF6
Malicious:	false
Reputation:	low
Preview:	[null,[[["103512698"],["108347105"],["121124594"],["21783347309"],["22060069514"],["22888152279"],["24746779"],["3379"],["61763806"],["1000908"],["1000922"],["1001049"],["1001219"],["100128020"],["1001535"],["1001733"],["1002304"],["1002453"],["1002601"],["1002605"],["1003265"],["10042527"],["1004783"],["1004807"],["1005049"],["1005053"],["1005149"],["1005950"],["1006346"],["1006571"],["1006794"],["1007491"],["1007866"],["1008018"],["1008725"],["1009136"],["1009310"],["1009379"],["1009813"],["1009926"],["1009966"],["1010669"],["1010780"],["1010827"],["1010893"],["1011642"],["1011792"],["1012467"],["1013015"],["1013361"],["10133669"],["1013765"],["1013962"],["1013964"],["1014761"],["1014763"],["1015101"],["1015391"],["1015681"],["1015969"],["1015970"],["1016162"],["1016760"],["1016854"],["1017043"],["1019030"],["1019404"],["1019543"],["1019702"],["1020210"],["1020620"],["1021909"],["1021946"],["1022505"],["1022890"],["1023422"],["10237869"],["1024178"],["1024512"],["1024892"],["1025147"

Chrome Cache Entry: 602

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1910
Entropy (8bit):	7.835257861899819
Encrypted:	false
SSDEEP:	48:tVpSeKE89KTrO9lk+R5uYpcxZMoPfHJGwM9ObngwmwGsyc:tXSjL9KTrClv5lslX0WntNyc
MD5:	B0AC2B682AF25611FEDC4D0983AAC530
SHA1:	F729DB994A323D70123FB632777113FB241E9668
SHA-256:	4DDE3D99490ABF969CFB7A046A058FFD48D3D831F12424154ABB20ED86E776A0
SHA-512:	4E5951185958526176847F44D0C820E314EA4DD7D87FB4C074D760E25E397396C50788E715CAC8B41BB68F57DC84B085EAECBB5438EE10029BC2D98401ADB598
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.B..B..A..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B..B...'+J..C.pne./..(3N.~v_+I..0...,Q^s[cn.~X.=9Q~..F=S\|IYw&G.tpc..U%F..:.5.0#E...F!D..@..(./wrb$F...)L[u.6.;I...E..E..N.2..X..S"D...N.C..5.A.=.8..TDWy,J...)..D.7Ybo..+..L7P~..L.4..M..GR^s..P..J..F.2?T{..B5O..w^cgk..E..Sdhj.{Z.,.A.9..I.6.1.B...K.-.;M[u-K...Dhji./..HK[v..'.>`fl.:..S.9..Ofij..(kkh..I..O..Cafl.y\ysa..P}u`..Egii6O...V_em.?..T..Gjkh.AP]tCVy{t`.>.}Y.0.6llg.5..R.7.-'H.qod[cn..Q.v_ZboXap.x]..'V`qEXx.30L.@Uznmf..J..Tspd.3xrb..R.z[..B.\|Y..K..V<R}/K.tpd..N\t..1L.:Q}.\|ZvrbWapGXx)I..<..W..D..Vmlg>T{JZv..W..GS^r.B.y....tRNS.E..!.........m....N.....d(....IDATH..._SW..#.....s.HB&.MB..f@.({.7.P@6..J.(..N.V;hmk...A.7..L..>......s....}......tuswttwse.83..i{.'Pb...._'...&..f...@&.....}..I.........UJ9..X..$./....a.%X~..H..bG&.6..`y..`.......C....r`.4?L....+"........C..x..(`D..@o.9....\|P*.F.J.:...{c.;H....V.y../V6..

Chrome Cache Entry: 603

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1610)
Category:	downloaded
Size (bytes):	1684
Entropy (8bit):	5.141093687933593
Encrypted:	false
SSDEEP:	48:QSPubVkl5nR0SD4TyeSI72Gb7DFFBfV7y:7PkVK4yeHNW
MD5:	9BEB4A432799AF60F32408C598207633
SHA1:	EBE0F7E44B21300BDF38D2C5C7681CA43EC05E4A
SHA-256:	50F1C119F9A28920C4DF4CA58650FB612DD5C3C43443788868A921CD18F0F014
SHA-512:	4798F4588CD4E122C28D34E94CF796D3E387A539EA7AB23B299AD97BF1701305F58C524D4EEA33D618FDE9373DAAEFD39BB865BC22735CD28A1FC4E5ABD4C8B1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/scroll-indicator.js
Preview:	/! For license information please see scroll-indicator.js.LICENSE.txt /.this.LIBRO=this.LIBRO\|\|{},this.LIBRO.scrollIndicator=function(){"use strict";function r(r,n){var t="function"==typeof Symbol&&r[Symbol.iterator];if(!t)return r;var o,e,i=t.call(r),a=[];try{for(;(void 0===n\|\|n-- >0)&&!(o=i.next()).done;)a.push(o.value)}catch(r){e={error:r}}finally{try{o&&!o.done&&(t=i.return)&&t.call(i)}finally{if(e)throw e.error}}return a}var n;!function(r){r.DEV="dev",r.QA="qa",r.QA5="qa5",r.STAGE="stage",r.PROD="prod"}(n\|\|(n={}));var t=function(r,n){Array.isArray(r)?r.forEach((function(r){return t(r,n)})):a(r)?Array.isArray(n)?n.forEach((function(n){return r.classList.add(n)})):r.classList.add(n):i(r)&&t(c(r),n)},o=function(r,n){Array.isArray(r)?r.forEach((function(r){return o(r,n)})):a(r)?Array.isArray(n)?n.forEach((function(n){return r.classList.remove(n)})):r.classList.remove(n):i(r)&&o(c(r),n)},e=function(r,n){return i(r)?s(r).classList.contains(n):a(r)?r.classList.contains(n):void 0},i=fun

Chrome Cache Entry: 604

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5778
Entropy (8bit):	4.0305539921544815
Encrypted:	false
SSDEEP:	96:avfqh2eGTBoaX4wBPFU2e419aj28g8iHNkR+uX2a5hJcNP2c6DzKV3t6Ueu5DErI:yqh14BohwBPg419AMHaYufJckc6qV3QK
MD5:	0F121237872CCB64CF52B3C4A2405745
SHA1:	0675A14DB97BDC8287FE23ECC67505FAAFAB402A
SHA-256:	DEBF3438D86E63280DDBE393891CE01DE87157C80DE51F3766B462A792CCFE44
SHA-512:	3E7C529D9171556943BC29FE7DCDAD4F18D8544D5B1D04C923DE99F1CAA02991CABBF99404335DAD72F4E6A4D7E9BD96C909D2B8C9F7676BCB66EA11AB05C478
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 85 12" style="enable-background:new 0 0 85 12;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#A9B1B9;}.</style>.<path class="st0" d="M11.2,3L9.4,2.6L9,0.8L7.3,1.4L6,0L4.8,1.4L3,0.8L2.6,2.6L0.8,3l0.6,1.8L0,6l1.4,1.2L0.8,9l1.8,0.4L3,11.2..l1.8-0.6L6,12l1.2-1.4l1.8,0.6l0.4-1.8L11.3,9l-0.6-1.8L12.1,6l-1.4-1.2L11.2,3L11.2,3z M6,1.8C3.7,1.8,1.8,3.7,1.8,6..s1.9,4.2,4.2,4.2s4.2-1.9,4.2-4.2S8.3,1.8,6,1.8z M3.4,3.4C4.8,2,7.2,2,8.7,3.4c1.5,1.4,1.5,3.8,0,5.2c-1.5,1.4-3.8,1.4-5.3,0..C1.9,7.2,1.9,4.9,3.4,3.4 M38.8,4.1v3.2c0,0.6-0.1,1.1-0.3,1.3c-0.2,0.3-0.5,0.4-0.9,0.4c-0.4,0-0.6-0.1-0.8-0.4..c-0.1-0.2-0.2-0.6-0.2-1.1V4.1H35v3.7c0,0.4,0,0.7,0.1,1c0.1,0.3,0.2,0.6,0.3,0.8c0.2,0.2,0.4,0

Chrome Cache Entry: 605

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 606

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3
Category:	dropped
Size (bytes):	32876
Entropy (8bit):	7.955962044542817
Encrypted:	false
SSDEEP:	768:/8crNhUQVrzy5hk3I8bRN/Mnfc0P1/qX22/K4KK0EUlNr:/8Uhs8bfMnb/qG2/bK7N
MD5:	F037C63994AD5D6119F36567CAEAA070
SHA1:	C8CAB51B0E67D1848896C69AEBBE646E011E3406
SHA-256:	311C1DC1A0C740AD22097F94FE8D65E5C3C718A9FE38FA0231B0C550A43F10A7
SHA-512:	629CB4E7C098DECC6E154461B3191EDECBF33A208264666C41244B247AA1B7C3F2173EC754D06BCA5FC782609C0CB57A574A0D506684B02ACC8C0879DDD72F09
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................................!...!.1&""&18/-/8D==DVQVpp.......................................!...!.1&""&18/-/8D==DVQVpp......... .."..........2...............................................................u..Q..........2I.1!.d...@....3=.$l.O...V<2....,f...Zd.4.Fe...L..w7I:.9.u'q!$...%...\|..H..1...t.q.i..`4(vB.U.l...:.f.1.EM..{..t..4c..C.4V.b...}+....u. O.-..hH.,.....f..I.U...)+... 4s..'32y...g.FF.`..Z.G.n.E6iF...s....l.b.T....[..\..f..K..uz8a.....7.....X..], t(.%.s\|.j.....X.P..p.. .9....F1.....2h.506.:9...-..h.....!.f.S.N...Z.7.i..f..H...E.2AU...kBH... Cb.s5.ZQA...U..#.t.\...5....$.X.MT..{.4.O..9`.J.....}.r...r...........Kz.CQ..pfY.t.3.F..m..A.q.8&.I...<VM...~....P.............p.bB.a+SE].-.em.6.....9^.2.1^..s..UY.!.sC........G<.#...$......\7..F...ET.w.....Qr..5o`.t.F....F\|..B.3H.^^..4&.a9..(...f..cHr.U7.fN.L......\|B6_..a..5[ ..\|..kN..f4...%.e.3.X.j......k%.R.Q.r..r.$H....C.[.Dek. ....(.:HB@..-a...-...R..i.Ws

Chrome Cache Entry: 607

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1182
Entropy (8bit):	7.5201658977339205
Encrypted:	false
SSDEEP:	24:wP4VO7vvldNiDLk0kBMFPuIXhfZ8YrqbT20RMVLcFqAVtpxtrOIr:N87vvbNF0NmIL8YObq0+rM7
MD5:	62673EB3F4F65DB0FD7B37AD94813B02
SHA1:	1A952E24251DB23A5FF7EB6283B6511CD4980E28
SHA-256:	F7E4E987CE794D57A5DF5904B15F1B54B421A94A864ED5655C4EB7E381BF4537
SHA-512:	1B5F2A078B7F8BE958A94EB659EDDABECBDF0790A20DD77BD5A76FA63A45155A3C20A550F0C6A173C60F3F26303F09C6F043996ABE8203CDFA51DA4E49B04072
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T............................................+".."+2(2<66<LHLdd....... . .............y................................................!1"A.r.ab.................................................!..1Q..A.."2R............?.y..m..... ........=..LU....?8.d#..oMt.n.lX,....>...W=.q>OJI.U./F..O...g.c.$f.V..F...Z8..9.u.n{..\|^....!^...a.S.)..9.u-..o!K5...c..M......d...d7x.......Oi.m.p...&..\|:Uu/M6...r.Y...C..lK.]...y..V.B..7..@S..Iz....N...$=m.fC'.....,..:P..yhA2.T0.R.R..d.......B.....tM..\_CJ.@..d+.I!.:^].7;..5.k,..^......_:.{/,..pn...(.U..R-.6...E.A.M..j...IiV.@x.<...:.....Crk.9......J....R._,.....2..R..m}..b...n..Q...z....>RxH..V......A}M......+H..[...\O..QLn.S..1.......^....Y..J./vH...5OI..m7..M.5T..2u.....+J.x....j....o'.W..2.Zx...<..\......o..<.Y .....2i...A.z....D4.N.-\|.\.....^S....7".....\...).x...{..Q.....#.;..A5"q\|GM.q.,.r..#.'.y..X..1.]-g.E/*.{pH./...me(_.2Q..

Chrome Cache Entry: 608

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	460608
Entropy (8bit):	7.99950731725927
Encrypted:	true
SSDEEP:	12288:2OZZ9jUAtQucZGYZ7cdzTIyXsdFQ5eSbUU:2OxiGYZ7cd3TcdSbUU
MD5:	D6A84028FEFDD42FEA7C01C32A4BD880
SHA1:	5D5AB130A519CED16F1C2E6FC5F34E072E059FB3
SHA-256:	811AC97FDE24C23B5EE56580BFA353B2232EC0B1D8ABADFDE9F0A5E5B994D5E8
SHA-512:	D46DB2E9427A76A4056F3E7BC2EAE018568646D98A49BF59683219BE15F0656F11251E395090A51B82838210E83E0D2122B48A0C158D921D4075E27C47397345
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|.P.M.X...7.-......u-'Y....p%...As...*$..t....z.\|..S.#..../7...:...M.k........z..#e.^x...Sf..V.,...........C..K.(.....M...<.&Lyw.E[.....e....[}o\[....9.;[.G..0....+1.,.PP......QrR..Yr../.......g^)f....mX..<....+...v.&j].....a.B#.`sW.O.\|e>n..A.j...gw......xM..S.i..i$q{..p.....!...&.D.;D...)....b.R..yf3.[.:E.+.}.$..ec.\|6..UT.....@.~.-..J.M......)kj.tR...M.....3V..c...w9.#.:.E.......=0b.t...<..b.yx%..P..:%#p...0.w....<...O....I...'.........W..m:.S...Y.q..H7..q....b.b^..x4...}hH..Y ?.@...NH..oTC8aU.5.#.6....1..@3.....^i..{O@{a..-.K.%.A...../2......Sj..!\..".I.9Q..X.ro;y'Q.....I.w...'I...4.

Chrome Cache Entry: 610

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2112
Entropy (8bit):	7.4644232945919455
Encrypted:	false
SSDEEP:	24:e9PoZPuSMxg7EbJRpXko2Q6tPaNK8mgrSGMZ0AcLw/hS6KLrLvllcu:edCdM27EyftCNK8mgWJZ0AbZZK7ku
MD5:	10460CAA4146B9D9A12AA9D195570901
SHA1:	157855B5CE6CBD5020FD43EF2CCB099305D0AAC8
SHA-256:	B9B127FD542DAEA4198302AC13E6734C9C995536A466EE6331F7653F1F2FC776
SHA-512:	2C5FDE9DEB4CFF5B7C0F21D53F4C8AAFB1901449BD2668FE31CB5F71EE8319A461393182484A44A205540050AC94BB27EFFE1A9638043E25716032AAD29E2886
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................................................................................................."....B.a{.r......p.......$-..........dwVq......&...[v...(...#.#,.v..&/.j\|cou.)2.+3.!CQXEc.......hty..../77FNP]clw\|...KY_%5=..............-=E...]io;JQz..:B.......Zgm............u..iuz............9IPIW^amsESZ{........x.....2BI.,5..,<D.......'0.........Tbh...[hnR_f......fqw......N\cM[a............................'7?=LS........l..`lrr}............{.....0?G~........5EL...HV]Xdj.............):A...LY`"3;oz.!2:VciYfl...Pm....................u.....>MT......?NU.D\..]r............Jh....Si.gz.l........fy0;.....QtRNS......s.........}...\..S..=...'.-9.........LO.p..........w.....\|7...e...i.]Ha.D.....IDATH...XSW..........n..^v.a........0".Q.A..AP(X...2dh..*...X\....N..}//.#.P../y....

Chrome Cache Entry: 611

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	671
Entropy (8bit):	5.070605168410861
Encrypted:	false
SSDEEP:	12:tvG1MQpnGhxCqrEmuvjZkYJuw4WqQTYiR/e9Jxl3JR+0ix8:tu1MGnGhAv7v1kCJjkiRKxtW0y8
MD5:	A8000C3EEE161461EF12E64D80AF2D31
SHA1:	EE943BD802BC80D19C7F61CD4698513B3D5FE58C
SHA-256:	11E4E32C12EE0D2A20F159B071182C9B5B3A1FD3C67823EBF196DA02FE0C59CA
SHA-512:	C4605A93D785E230A936D10C8E9EE4FC9A334B72DC7E49BB0BD733E4C1DBFAC3DA3A6D0FF2271F6715FAB754D5A91282E7999D5C4E32F04F5FEAA62C917540AF
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/os/paid_services/lifestore/logo_aol.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 173.45 67.5" height="29px"><title>AOLlogo_black</title><path d="M95,16.8c18,0,26.58,14.2,26.58,26.35S113,69.5,95,69.5,68.4,55.3,68.4,43.15,77,16.8,95,16.8m0,38.85c6.4,0,11.82-5.27,11.82-12.5S101.39,30.64,95,30.64,83.16,35.91,83.16,43.15,88.59,55.65,95,55.65" transform="translate(-2.06 -2)"/><rect x="127.87" width="14.96" height="66.11"/><path d="M41.42,2H28.11l-26,66.11H19.71l3.48-9.56h23l3.22,9.56H67.2ZM27.84,45.15l6.92-23,6.93,23Z" transform="translate(-2.06 -2)"/><path d="M175.5,58.64a9.94,9.94,0,1,1-9.93-9.94,9.94,9.94,0,0,1,9.93,9.94" transform="translate(-2.06 -2)"/></svg>

Chrome Cache Entry: 613

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (656)
Category:	downloaded
Size (bytes):	657
Entropy (8bit):	5.009632611891603
Encrypted:	false
SSDEEP:	12:bNjToIeAyHLMbTCVk2GeYUfA6FP12rjE3r/GOXsOR0oCkktTKcEk6:xMIeAyHLMnCV/fjP1jXfJSKM6
MD5:	C6CA9FCD472D2846AF3CB4C6EDB76C00
SHA1:	90AD0F1177CEF3C6901C4B4AABD8A9F3A597C30A
SHA-256:	FD52EDA86C593B0E395BAAA35C781FDE91A3590B0536F334472F70B250C6BA3E
SHA-512:	3897250D0E3D84B64902E1DE211C7A54D120329B86AE50A48AE2BF355DAD9FAA9B05912F247E9D5CBD783F8D84F6E53AB15DFD2BD02FD2CE67E3E5864EBCC52B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/back-to-top.css
Preview:	html{scroll-behavior:smooth}.back-to-top{height:85px;width:85px;background-color:rgba(151,158,168,.3);position:fixed;border-radius:50%;bottom:25px;right:120px;z-index:10;align-items:center;justify-content:center;flex-direction:column;cursor:pointer;transition:opacity .25s ease-in-out;opacity:0;visibility:hidden;display:none}@media(min-width: 768px){.back-to-top{display:flex}}.back-to-top--show{opacity:1;visibility:visible}.back-to-top__icon.icon{display:block}.back-to-top__icon.icon svg{fill:#fff;width:27px;height:27px}.back-to-top__txt{display:block;color:#fff;font-size:16px;text-transform:uppercase;letter-spacing:.13px;transform:translateY(-2px)}.

Chrome Cache Entry: 614

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4015), with no line terminators
Category:	downloaded
Size (bytes):	4015
Entropy (8bit):	5.649002309903367
Encrypted:	false
SSDEEP:	96:ClYd2YdgYd2YNfwNvUN2xVsyIy7m8tDglDv1bWq:CY0YKYIYFHPUY/
MD5:	F831A9D7B232E019A50683FD50437DCC
SHA1:	DD4D55C426D9F0CA1BB2B248B24B6C888158F86A
SHA-256:	9C171A4786D5472672839636775B2AD755A41A6926EE2EE69A95D9A46DA7A8D4
SHA-512:	6B511538CE329CF1B3E484437B4B46D97AB7449F8F2B232083C383CCF051F49A9B0C4A674A335DEA9B3F75B1025B92A270DB0D88ABF4A950A6436652A4A1EABA
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=19400441&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('htt

Chrome Cache Entry: 615

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.726591150992212
Encrypted:	false
SSDEEP:	3:YMEWnAq4kifHrDKqKs+SdS8QAUqMFfLMfHFdS8QAUqMFOpY:YMEPBoqfvnQdqMFfqHnQdqMFmY
MD5:	F93B624146639FA7BB4C085BE144AAD8
SHA1:	7E61C834E30119196FBDA3A37E5070368976E57A
SHA-256:	62ED2EAAAFA2829D745B207B889C290A337EC18C97C1E760310EAFD22A485EAC
SHA-512:	17F531FBF594D51FE47D7BE44D0EC4220331732BCE491B36882287919240993627BD3A315AF2F2F579C0AA2434D2EFB7F681D583177635358FE16781570AB381
Malicious:	false
Reputation:	low
Preview:	{"idType":"BID","authType":"NONREG","sessionId":"c7878818-71a2-355e-954c-65820e52de58","tntId":"c7878818-71a2-355e-954c-65820e52de58","ecid":{}}

Chrome Cache Entry: 616

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1725
Entropy (8bit):	7.676188922921497
Encrypted:	false
SSDEEP:	48:16LwRduIgejS5BbEObJAHkJj+dqWfk7AN8dfJZH:16LIuxMS/1bJAcCdqqu5
MD5:	05A539397B4DC91B238A9F42A747D792
SHA1:	377702E784DDCF9B9D5AE24FE29EA698B4C1F0FC
SHA-256:	DBF71AE2DB875E04E610C4464EA23408141D9186EA113FE405BE4E7CAD82D04C
SHA-512:	D6E3E7B94D93963714EC36B61F5E580F21114C2517403D4AFE14B5D2CCC086781709F1763769925B5FEC4334CBEBD5425577B0C6B1DA7963ABF8F47D7BAE358F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLX9izbkR2E3ylw0Xjvm9MA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2Fmagic_wbg.png&client=76f99bdb8f78cd44cc0b&signature=017c613f2f9352dfc32599f7308fc6338e568ab6
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL............iw~................................................n\|......s........w..cpv.....y.................t...........o}.}.....................................m{..................................Tck......}.....................q.....\krw.....q...................................s..z..........{................u...."....}.Xgn.08..$2CKp~.>NV9JR..%r..^mt6FNK[cIY`@PX.)2..#CS[.%..!......,=E..7w..BRZdry....,5 2:..(\krO^e8IQEU]/@H9..8HPZipP`g#4=Vel+<D.+4N....Rbj."+...->F...%6?o.........-..A..H.......4EM...v........(0...eszGW^...t..............m{............<LT->G............M\d1..y...............".....\|..g..n.......'.............U..@..............)..........b.........;C............_qzr.......M..Sly............Y..............N...mtRNS.\kGL.'...w..3.._..}n..4..%D......T.sz.a.H......=........h......X.yB..l....f......;........Y......P....]......IDAT....eT.a....X..a.vwwwww{..~.d.C...%0.n0........N.c..?.B.r.

Chrome Cache Entry: 617

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4320x2001, components 3
Category:	downloaded
Size (bytes):	220644
Entropy (8bit):	7.4922394465336195
Encrypted:	false
SSDEEP:	6144:0j5ZNX5UozYYw02cQaVC1+oSPmpK0Flzbj:c5XmOt2cQak1+oScfHj
MD5:	5A95D24B01BE9778D52D54EE6903AFDD
SHA1:	CC74AD3BD163440F226D8CA19029BB45F345A4C4
SHA-256:	A7B5CEEC52E126CD2C8EE231195E0A95E80210C388C4FCE85237E1F89E8B5E66
SHA-512:	110D37BEA235C6630FA752788C8388B765B7B9D4FA85CE07604117F2DDBB95DF569DFF7D773CAE2FB4A1F780EDCDF50085EB636A615C5E48EDC481B6DD70CAE9
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/ad-free-mail-large-hero.jpg
Preview:	......JFIF.............C................ .....'... .)10.)-,3:J>36F7,-@WAFLNRSR2>ZaZP`JQRO...C.......&..&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO.............................................................................................................................................D........B......... ........P..Q@.(..@....E...@.. %@.. L.P...P.T...R.@......!.B., $R..)KT.A.*.....P...@..P...........P...............................................................................................................@........ ...@@.......... ...P......$.....P..... .@@@@. . ..P.T.....@......!.B., .)JR..M....JP.(..A......Q@ .. ........@...........................................................................................................D........P......$............E.-P.............@PH.... 2..B....-...J........B.. ".....)MU)A.Z......-...PB...P.......P.@...................................................................................................................@...%.....@B

Chrome Cache Entry: 618

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	10867
Entropy (8bit):	7.941826461292982
Encrypted:	false
SSDEEP:	192:CkMgECQWIpNu63xUD1V7gqYmqUgCglCjDkS/nO7DSM91uGWmwxJfOqG+P8:1M/hzNugxy0q9cCglUkKUGM9EGWmwxRA
MD5:	23CC03AAAAC083A595F23EC9CD30F207
SHA1:	1E4ED5A9FB226714F821B4D456793B10774823A9
SHA-256:	D7E2F20D2A1A8D80B2F221AF1642812F8FE48EF8E12DEAF92A4823676898CD13
SHA-512:	219B59BA8B37271AC4015673787E8278756D7A2A847CFF1490D5FD3DC4B7252470BA1F0B5E8A47EEB075F81AC257D73026ABE8C85C1E059E503E92200F2B6167
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/50s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/50s/match/image.jpeg*~hmac=8307989bf33a37a60df12855ce05f4f27b9d11526a47a3ab2e89753d1c7c4b0f
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE..........."........................................H.........................!.1....AQ.."Ta.2Uq..BS...#36DR.$&bdr.%4tu...........................................................!1Q.A.Raq."......r...............?..(..!..I... .. a..P4.&..I4.......r...Q.4.....K...a$.4.H&.0....S.H...B..b.....zb..e.D7.l1..F./....M....q.f..a......Q]..1.$.i.....6.<.T..o.U.N..P.....%\|...Tc....o..I..$E.............[d...J..:..hh.:.x..:vX.....SR..'tl=$lh.....rH..]Km:.7.B:.7.B.Gw....m[)..&\|.....{s......U..g..)....E...OE.......5-.+.z........%4L..(.l.H.&.#/.!.@....L.....KC..t.....i..d....OhR..z.v.7.G.Z./4.b....A...$.....'......Yl...9!.q.kH.K^....=...).z>..._..B..`..(...9.j..`......>#....6)#mM+..oL......s.F..e5-............l...,.{H.........C$..9.n..w.....+..4..7+E.B..j.H./+*..@Z@.I..I4....i&.B...BA4SB..B.@.B.'(.;.E

Chrome Cache Entry: 619

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuS4hUL_ZHHshIx_ZOw-2vIBVTZT84aK_6YoJpsismGPJY8FtpNNT3AFsGsZ3mLuVs-o3SU6ITbd2BTz_wUEW6sJ7U2jh8ONwPSKBsyDgCe2AXceCgW7xiNuSoiaeJ1LKeKtrZkWTIA7zzNJFlVa-qK-jqtMDtA7Uc&sig=Cg0ArKJSzDe3dCuZWQ1mEAE&id=lidar2&mcvt=1006&p=382,855,632,1155&mtos=1006,1006,1006,1006,1006&tos=1006,0,0,0,0&v=20240229&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=3&adk=1294450886&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=544120600&rst=1709508403048&rpt=3107&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 620

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 621

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 622

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6629
Entropy (8bit):	4.844833644931232
Encrypted:	false
SSDEEP:	192:CSBTTKAeahpX7AmmoOaXO0FpXqkmq9mfIgmqf/hhNgH3V9u7jOVfhUYd:n726
MD5:	F3615890804672898BC17387F80CF2D7
SHA1:	11AAC657FD8C6AAD749CA4AD606B8CD293BE8A9E
SHA-256:	00900B79A9E964D5D4C90371ECE4F3776F9CE0041BB6759004DBA34D24F9DED0
SHA-512:	DB59B73237F6FEC04210A2AB35F60DECE8B6C708348BA90BE53A21F03E358246C7571A7F4D06DCFC36279E22D7AC3571D63EDCE4AEB01123756E12CAEF414E2A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/offer-templates.css
Preview:	/* Neat 1.7.0. * http://neat.bourbon.io. * Copyright 2012-2014 thoughtbot, inc.. * MIT License /.html {. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box; }.., :before, :after {. -webkit-box-sizing: inherit;. -moz-box-sizing: inherit;. box-sizing: inherit; }...infor-module.prty-1 {. background: #FFF;. border: 3px solid #DA3BA0; }. .infor-module.prty-1 h1 span, .infor-module.prty-1 h2 span {. color: #DA3BA0; }. .infor-module.prty-1 .cta {. border-color: #DA3BA0;. color: #DA3BA0; }. .infor-module.prty-1 .cta:hover {. color: #DA3BA0; }. .infor-module.prty-1 .more-link, .infor-module.prty-1 .more-link:hover {. color: #DA3BA0; }. .infor-module.prty-1 .more-link .ah-icon, .infor-module.prty-1 .more-link:hover .ah-icon {. color: #DA3BA0; }..@media (min-width: 745px) {. .infor-module.prty-1 {. padding: 50px 45px 60px 45px; }. .infor-module.prty-1 h1 {. margin-bottom: 20px;. font-size: 2.375rem;.

Chrome Cache Entry: 623

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17306), with no line terminators
Category:	downloaded
Size (bytes):	17306
Entropy (8bit):	5.214427838568237
Encrypted:	false
SSDEEP:	384:3vEngW8/iWy2L5x2ibjzouV0U7zulpOp10sw/A/59DIN3r8TLhP:f2bgL5xl0U7zUOuEVIehP
MD5:	83379D1CF4DF945EADF3F545CE6DD7D2
SHA1:	026394F00EA0B93CFF5BAFA2A36C9A856DD899D6
SHA-256:	7997EBC8835578F639A9276AC7EBA62518ABDCB6D40E4B0CF8F8646F60DA1D52
SHA-512:	3B9BD4441FDBF5B056BE36118BA2DEC24221B86C837718599C43202F71895AA28E19A5506C8B956A394C77859046452EC66BAF7733A89A12E2D16B80EC2EA0E6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-fetch-1.19.1.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-fetch"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(e,t){var r={};for(var n in e)t.indexOf(n)>=0\|\|Object.prototype.hasOwnProperty.call(e,n)&&(r

Chrome Cache Entry: 624

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14326
Entropy (8bit):	4.108366455679344
Encrypted:	false
SSDEEP:	192:l5BVmyWVRlpQJSkNqm+xg3FDp5UzWv8mmMt6UcmByiTYBkhOUciaSMkvZsUEL:l5BVmfoim8EyWkrMtBcnsOE0kqL
MD5:	E2C8E7F300B16A993657A04B82EFE131
SHA1:	5C8709BDD0EBAA8A9738AEB345D294E53DA0377D
SHA-256:	411F6CF312CD93E7A0AE5F7984124FD941656B1BFA72D156DA780C0F1B026B30
SHA-512:	5C24D69ADEE532D6DB2F894C6A4878318BC418E5FA351FA4B01736C253DA46557768D638D80B45D28E66EC090F76DDA5425C19ABF114A4C46FCA110DF8948859
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg
Preview:	<svg width="174" height="153" viewBox="0 0 174 153" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_916_4485)">.<g opacity="0.25">.<path opacity="0.05" d="M91.2871 152.899C135.089 152.899 170.597 151.4 170.597 149.55C170.597 147.701 135.089 146.202 91.2871 146.202C47.4856 146.202 11.9775 147.701 11.9775 149.55C11.9775 151.4 47.4856 152.899 91.2871 152.899Z" fill="#959595"/>.<path opacity="0.1" d="M91.3182 152.794C133.221 152.794 167.189 151.334 167.189 149.533C167.189 147.732 133.221 146.272 91.3182 146.272C49.4159 146.272 15.4473 147.732 15.4473 149.533C15.4473 151.334 49.4159 152.794 91.3182 152.794Z" fill="#959595"/>.<path opacity="0.14" d="M163.787 149.515C163.787 151.266 131.359 152.688 91.3542 152.688C51.3494 152.688 18.9219 151.266 18.9219 149.515C18.9219 147.764 51.3494 146.342 91.3542 146.342C131.359 146.342 163.787 147.764 163.787 149.515Z" fill="#959595"/>.<path opacity="0.19" d="M91.385 152.587C129.492 152.587 160.383 151.206 160.383 149.502C160.383

Chrome Cache Entry: 625

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=15&ns_st_sp=1&ns_st_sc=1&ns_st_psq=8&ns_st_asq=8&ns_st_sq=8&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=11430&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11430&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=11430&ns_st_dap=0&ns_st_et=33522&ns_st_det=1659&ns_st_upc=11430&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=11430&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=11430&ns_st_dlpc=0&ns_st_lpa=11430&ns_st_dlpa=0&ns_st_pa=11430&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508451861&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=7&ns_st_dpc=0&ns_st_pp=7&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 626

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3278), with no line terminators
Category:	downloaded
Size (bytes):	3278
Entropy (8bit):	5.334054622982394
Encrypted:	false
SSDEEP:	48:c5/PlnqG9C+L/+3as5/zu5D1tM570jbWzzFGTbpyPwZwXcMLwn2miK:c5PlDCS/ca55hq70XW4Y4uMn2y
MD5:	DBA9EE6FD0DEA426C1EF06BA67172E0D
SHA1:	C9979404DBC9A52AD798AB25A6925185F836A1AA
SHA-256:	A80E5B1BD221376014EBC4E78333B7FE9F689E7BC994075AB117861ED12C9D66
SHA-512:	2948F9418F6C4A19C81087BDFFD8A763EF7F4A26450B73B7D4FBA10BE7A007B314C40F142523593ED74188C6C4F3656CE7EA023F3F03F203EEDEE4E80222BDD1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/navbar.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.navbar=function(e){"use strict";"function"==typeof SuppressedError&&SuppressedError,(n=t\|\|(t={})).DEV="dev",n.QA="qa",n.QA5="qa5",n.STAGE="stage",n.PROD="prod";var a,r,n,t,o,d=function(e,a){try{for(var r=e.split("/").filter(Boolean),n=a.split("/").filter(Boolean),t=Math.min(r.length,n.length),o=[],d=0;d<t&&r[d]===n[d];d++)o.push(r[d]);var i=o.join("/");return i?"/"+i:""}catch(e){return""}};function i(){for(var a,r=[],n=0;n<arguments.length;n++)r[n]=arguments[n];e.store.debug&&(a=e.logger.tag("header")).info.apply(a,function(e,a,r){if(r\|\|2===arguments.length)for(var n,t=0,o=a.length;t<o;t++)!n&&t in a\|\|(n\|\|(n=Array.prototype.slice.call(a,0,t)),n[t]=a[t]);return e.concat(n\|\|Array.prototype.slice.call(a))}([],function(e,a){var r="function"==typeof Symbol&&e[Symbol.iterator];if(!r)return e;var n,t,o=r.call(e),d=[];try{for(;(void 0===a\|\|a-- >0)&&!(n=o.next()).done;)d.push(n.value)}catch(e){t={error:e}}finally{try{n&&!n.done&&(r=o.return)&&r.call(o)}final

Chrome Cache Entry: 627

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1057
Entropy (8bit):	7.462257846937284
Encrypted:	false
SSDEEP:	24:h0FQZ0p4ePJAUeBFRWvg8XSf+IO2Eq5i1bR:eFQmXUIvg8XZlV
MD5:	33E862CD5BDE2D44324A410DDC377898
SHA1:	5FD588D5B33C9A62D5A99EB9BC65CACCDBDA8353
SHA-256:	6D03A3E44C48C93B2CF37A6E4F3D4E39B4EB6B81108C82C1C3416253C622BE6F
SHA-512:	59E9D261BCAA51FC86307080833E4AF108CD23BB84F6337529096F342890D8E624CAD391B80E1512091F9A32FF0A5C5BC8C484EC979D49814053E94B9F8E692C
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................&....&,%#%,5//5C?CWWu.............................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|......... . .............}..................................................!"A..1a.b...................................................!.1AB.".#$2Q.............?.Mf.o..... ...!N..D.I\|&...1.KZLQ..G..+........_.c..r.=.%.7..\| .Q..R...Wor.8.S.`..9......u.Z.......[U ..@\/.6../.Z........^.~2....P..].Q.".K4......$)...a.Y....d..18.B..8O`...pIuM.9q..<jEST....q..h.j.LGh@.8.....?)....wk.Y>6..z..zcON[Of.....cW.m..t%.....5..'t9s..L.c..!..n]`.9..1......C.b...:..D...........l4SQ.?w......6....&..5Sf.c..?...\Dl.rd;N.y..aS.........c.....p..u.K.9....D.....s.~29Y.#...b!..j..Pi..........j..!.yw...{....#.....Gr.em....>.E....#.z.6......zr.......x.........$t.w.........).MS`.C.._...\\|kUs.{B....Yk...6.{(B.... jY......._.....6.h...$H...+.........z....q.g... ......:....:...K{{.H..............Y..W..oq.>....4.yMJ..6..

Chrome Cache Entry: 628

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (594)
Category:	downloaded
Size (bytes):	5311
Entropy (8bit):	5.046822701969818
Encrypted:	false
SSDEEP:	96:duegRhCpwcn4QfbE/XOZjt/r6tCrY6saTGTbAaNkYaySgoaauIfQYCSG8IrW:OhCpwcn4QfbSOttT6MU6saTGTkYaySgq
MD5:	BA0777792CE6C88CB6AC61D50F5ED420
SHA1:	096E3337C3EB08177FC61F058A0A43FE7CC486EC
SHA-256:	2CFC3D9F68235DCA692E8B8D70E2DE1F872D321133005C628D1306AC0D72F225
SHA-512:	C8D17040A8966648EE790EB91235553096BCE4050814696A6F741A8E1C7EA9233EC2CC4005C3918B507B939D3E26A812212A40B87C6CD7CB7E414A627B52D066
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport". content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <title>Document</title>. <script type="text/javascript">."use strict";..function _slicedToArray(arr, i) { return _arrayWithHoles(arr) \|\| _iterableToArrayLimit(arr, i) \|\| _unsupportedIterableToArray(arr, i) \|\| _nonIterableRest(); }.function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }.function _unsupportedIterableToArray(o, minLen) { if (!o) return; if (typeof o === "string") return _arrayLikeToArray(o, minLen); var n = Object.prototype.toString.call(o).slice(8, -1); if (n === "Object" && o.constructor) n = o.constructor.name; if (n === "Map" \|\| n === "Set") return Array.from(o); i

Chrome Cache Entry: 629

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	671
Entropy (8bit):	5.070605168410861
Encrypted:	false
SSDEEP:	12:tvG1MQpnGhxCqrEmuvjZkYJuw4WqQTYiR/e9Jxl3JR+0ix8:tu1MGnGhAv7v1kCJjkiRKxtW0y8
MD5:	A8000C3EEE161461EF12E64D80AF2D31
SHA1:	EE943BD802BC80D19C7F61CD4698513B3D5FE58C
SHA-256:	11E4E32C12EE0D2A20F159B071182C9B5B3A1FD3C67823EBF196DA02FE0C59CA
SHA-512:	C4605A93D785E230A936D10C8E9EE4FC9A334B72DC7E49BB0BD733E4C1DBFAC3DA3A6D0FF2271F6715FAB754D5A91282E7999D5C4E32F04F5FEAA62C917540AF
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 173.45 67.5" height="29px"><title>AOLlogo_black</title><path d="M95,16.8c18,0,26.58,14.2,26.58,26.35S113,69.5,95,69.5,68.4,55.3,68.4,43.15,77,16.8,95,16.8m0,38.85c6.4,0,11.82-5.27,11.82-12.5S101.39,30.64,95,30.64,83.16,35.91,83.16,43.15,88.59,55.65,95,55.65" transform="translate(-2.06 -2)"/><rect x="127.87" width="14.96" height="66.11"/><path d="M41.42,2H28.11l-26,66.11H19.71l3.48-9.56h23l3.22,9.56H67.2ZM27.84,45.15l6.92-23,6.93,23Z" transform="translate(-2.06 -2)"/><path d="M175.5,58.64a9.94,9.94,0,1,1-9.93-9.94,9.94,9.94,0,0,1,9.93,9.94" transform="translate(-2.06 -2)"/></svg>

Chrome Cache Entry: 630

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2443
Entropy (8bit):	7.831728436688947
Encrypted:	false
SSDEEP:	48:WDTC3fetX7GoBTDCbmkdbZnjoWvfnZiycLnqWwObQ:WK3fILGoCbbS6NEW
MD5:	42286BA6D6F057D86973C9E5D55CD1B0
SHA1:	B89DE059B1C99363F91DD812E54F4704564A83AA
SHA-256:	8749FC53EB1C50CC4067BC14FB891BD9F28A5A1E0BFC9811CB6B7EA86CBB0BAD
SHA-512:	F464CEF509523D09E526322F52287EE07B4C7D0B216D668EED5B1F66CF937607A0F602879C451F8B8C5037760B0B58DC668D4E3F2B83847A4F12A9AFB6CEF8B6
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.............................................................................................................#@...#a..$A.&B.%A.+K"_../I... 5N.&C.,H.R..HqZguJYj5F[....0J.%C.'F%8Qu~....8J^.:_.Js.#@.-H:K_./J.-M"`..Ah.&D.(G7H]!\. Y.![.L[k}......1K.@f.1R!].,@Y.7["^..Mx.<bdp{w..J[pu...+GFUg.S..V.~..IXi[hu..Olv."6Oco{\iv.0P.Q}.)Iq{..,L.Dl\|...2KGWh@Pc...KZjASj...........Tdy;MdXh\|...o}.'<V......r\|.....2T&:SXfs+?W.3V.T..2L)=U.GpDTf8Kb........M]sYft1D]3G_..J........ETfDSeoy..'Ehs~BRd.Oz./>x..2DZ.(D#7R.>e;L`=Of.../C\?Qh........{..7Ja........)Eap....R`o X.....&?....Em.5W3\4.6Y.FCTkky...............gu...... 5P...q..N]lO`u.4O.3M[j~...^m.........cr..E/AWN\lz..>Ob...Gx..9;1X5J\|..@d....6V.,K./CP.,.><.ENP.,p."S.+.+HY.)!A:%H9t.!e.&5^4,R6.4E............GXn..../.A....%tRNS...`0.. ..Z...............W.....\|....bR.....IDATH..g\.Y...(......d.lBB.B.........D.HS. ...+......k^....!.............c..h..jjL...ih...x...O-lw...3.]m...S...\|......w!J...52

Chrome Cache Entry: 631

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1116
Entropy (8bit):	7.488508359164234
Encrypted:	false
SSDEEP:	24:h0YAlh+bHgasfQk8iTiNeJpP09WxPfk+Amd3Xt56A5c9/:eYGqg90iUUfPAy3d56AM
MD5:	92071BFE197DADC7D6E4CBF61D9F1FD3
SHA1:	1FAA16CADE2C29B9BAF5BA33A18B4B9D5526297C
SHA-256:	37F3C0849FC54B51D5B74BA39DB8E8A6F0C647552BB94B3E4E40CC622D224C0D
SHA-512:	AF55FADE212C44263AECD2F1588037824D65B7499B61637782533A2EB9FE580D7DAA380FB54CDF10BD0EE5DFCA5DFC9F3D86BBB0562331A283903FBD231C19D7
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................&....&,%#%,5//5C?CWWu.............................................$ $.5--5@99@QMQjj....... . .................................................................!1Aaq.2.$QR.....................................................!1Q"A#2q...%Rr.a............?....:.k.;m..[..... O..b.B...~.e.{.-.Z.....#x....OWr.................R7..$...4Jq.j..hV.WU..L?....V.)^....H...X..p.Pt=..Ks..T9.x.a.3mQ.f........t=q.... .`SGX.+.u.tY.y.......G.\|.7.w.."x.j.t........M.<..4....;..U!~......._.../.GSw.(...O..u9~\.F...Yt.=.SQ<4..<.-\3...O=./....w$/.2..Nu..SF$..rM....h.[...}..Ws.C...H.j..S_....H..w9p.V.....E=.S....2Yo...d$/`{j;:....:..$l......r......u?..ke.K_.h(..L.xW....8.R...d;V...X...Jn....-4...?...D\|....>=.._.......z......RS.d..&..@.Q.c.b....Q...<zz........t...O...5...V..Yv...Z.W_*$.....F....<)...p.\..].o.p....U.~F.......-m.,u..z,.;.\|.....R.q...ww...`.....C....Yb.Zn...J.y`.I.^b.......e......}.....j..;q.C"I.

Chrome Cache Entry: 632

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4928), with no line terminators
Category:	downloaded
Size (bytes):	4928
Entropy (8bit):	5.293459573082886
Encrypted:	false
SSDEEP:	96:cBx8BoVMq24cdV8a+Y+GE21ymBG+WssZrTqIgjuVhOwKwIpaG1kTX53XZ:c38BoM8xjGE21vBG+WssZTlI4HKwLG1s
MD5:	3A58DBF125AB86204D3AB1CDDFA91192
SHA1:	1DE9BE059A40AEAB02B3456389E1B738DBD88447
SHA-256:	6074D2EBC0BA4E9EFEB16191683F12C22DE1EF3EBD8AE7C3F86008253CA8B0CA
SHA-512:	1357EBCDF51C513ADD86B50B2AED73C72688F4D7C32E8DA567C42E3FD49B062D0863817534EF9D3A4109E0D177FB4A609CD72A3F021A059E247489A99A8945AB
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/hero-yangle.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.heroYangle=function(n){"use strict";function t(n,t){var e="function"==typeof Symbol&&n[Symbol.iterator];if(!e)return n;var o,r,i=e.call(n),a=[];try{for(;(void 0===t\|\|t-- >0)&&!(o=i.next()).done;)a.push(o.value)}catch(n){r={error:n}}finally{try{o&&!o.done&&(e=i.return)&&e.call(i)}finally{if(r)throw r.error}}return a}function e(n,t,e){if(e\|\|2===arguments.length)for(var o,r=0,i=t.length;r<i;r++)!o&&r in t\|\|(o\|\|(o=Array.prototype.slice.call(t,0,r)),o[r]=t[r]);return n.concat(o\|\|Array.prototype.slice.call(t))}function o(){for(var o,r=[],i=0;i<arguments.length;i++)r[i]=arguments[i];n.store.debug&&(o=n.logger.tag("hero-yangle")).info.apply(o,e([],t(r),!1))}function r(t,e){void 0!==e&&(""!==e?t.innerHTML=e:n.dom.hide(t))}function i(t,e){n.dom.applyFunction("".concat(t," .hero-yangle__title"),(function(n){return r(n,e.title)})),n.dom.applyFunction("".concat(t," .hero-yangle__desc"),(function(n){return r(n,e.desc)})),n.dom.applyFunction("".concat(t," .hero-ya

Chrome Cache Entry: 633

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	105664
Entropy (8bit):	7.998338119549073
Encrypted:	true
SSDEEP:	1536:/R2mcdw5WqfMJc1o2EQwt/09TkJ+szTS9g2/UhM2cHSXTJR8yzEYAEf0Km+1BhYg:5odw+coQw+5o+u29ByXTdz8dvEhYyFaq
MD5:	D61B3CA5B993933DB8D8822BF9B417E1
SHA1:	4DF230CC6DCFB963C74CE168EFEC580DEF7320E7
SHA-256:	74DDEC103AA1484315510E80BA24439799DD386719E006EABAE2CEE00958B509
SHA-512:	923951DABDF74A0663ED5FB14B761E5FC1096B9B3F315CD8421664FFDC0E8A79F0FEAF4BB5965E6E62E1A58A8BECA3B1B11CA7C85B0CE6D3522069A0CE14C314
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment6.ts?akamai_token=exp=1709530988~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e8b40a2463d355aee79ce16d02f266fb895828cb22f6586733f56f035b643b4a
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI.....\|^Y~..D.....v........z.l'.G..Cc...P.{......lg$...:P .~.fl..,U.W......s}...bU..[.]......c....r.z$FQmm...p..5@.`XH.(.</gO...j.qqE...9b.Q....6k..xo.........{..f#i.".e(..Q./.EX<.O..@.t.@ v4,.!Z...w.c....Yw@.v/L.4b..3...?. J..W...YjuF.mR.{..n.`n.]@..+.'..f..g\(....0.\|B....a...0..(...a..xf..a.?..;KLKnQ.cC=.hQ6&..W..m..JC.d.."..E....hOM\nx>...b....S..u,D.Tl.`.C>m.Jx.[}......3..n...w.W......T...$q..i=I...../...S.."..//.eL.$.L.&w.].-...A..8t..Y..UK..3...>yZ.'.[4.o._.A@E....s7..7Y.X..Z.1...:..EN....9..%[V#.-.3..M...;.{.W'.'..9.....HX,....q\,h.....i..........]..O.4.uQ."...j9..T...;...R....F...t)6.....

Chrome Cache Entry: 634

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	733
Entropy (8bit):	5.0890758327857375
Encrypted:	false
SSDEEP:	12:TMHdVZnnlRR/KYcYSF1+4HkpJqeaxM23pXqFwt5viVHrDdz6:2dznnbRLkFEvqeaxM23p6FwtAVLo
MD5:	F456007284E4510464D9DFDDABD3FB0E
SHA1:	3599ABDE3AA91ED0FF10EA647993335D9266FC4D
SHA-256:	C25F3A57F7858DE738E2F3CD49AE322E7D02D70484CF7B6DDE7DE302EB033AA8
SHA-512:	A2DC2A32B68DC7A9ED3184C6B122EEA834590B95FF69CF1EF7397A1700978992B11E9E4E5FFF3740AB8EC851776F6F43C45B0335322EE2AED21CADEF5E6469B1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 59 (86127) - https://sketch.com -->. <title>Tick_Checkbox_No</title>. <desc>Created with Sketch.</desc>. <g id="Account-Access" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="User-Name_Desktop_01" transform="translate(-24.000000, -336.000000)" stroke="#B9BDC5">. <g id="Tick_Checkbox_No" transform="translate(24.000000, 336.000000)">. <rect id="Rectangle" x="0.5" y="0.5" width="15" height="15" rx="2"></rect>. </g>. </g>. </g>.</svg>

Chrome Cache Entry: 635

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	47078
Entropy (8bit):	5.975123908927608
Encrypted:	false
SSDEEP:	768:xQ+9Kh+Clpxixm7yhemwuaSyqCH8CxtWeTUVgOBMzzVCzlxPZx7UM8+1omRz4II8:57mGeoVrMzRC5xPZ9UM8+1wE
MD5:	7AC4F5D135ED7CF6C8614EFE5121AE55
SHA1:	E854BC01BAF48BB70EE99AD56DD5737BE4A0761C
SHA-256:	77EA756BD9D29AF44E6FF2B96CD334FB83576FFC114672C959E77CF451EE8265
SHA-512:	4D6285F2E4BDC47265919CA00F5ABEBC038CF25AE629313B5341AE16AFDF95CD4994B0F492EA27996AA12ECFB20A0DAA8D24556680FAC852E681AF7B805361A5
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3589207970860027&correlator=2406189250846353&eid=31081519%2C31081350%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202402220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_as_top_right_c%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7&prev_iu_szs=300x600%2C300x250%2C300x250&ifi=6&sfv=1-0-40&fsfs=1%2C1%2C1&fsbs=1%2C1%2C1&rcs=1%2C1%2C1&eri=5&sc=1&cookie=ID%3D5f754106410cdef1%3AT%3D1709508399%3ART%3D1709508399%3AS%3DALNI_MYnIUVMVlsIYkFHA-RSwJMdhkowYw&gpic=UID%3D00000dcf03e41a0c%3AT%3D1709508399%3ART%3D1709508399%3AS%3DALNI_MZSweHx1DoXuB5AdbYDZ0AYIee9iA&abxe=1&dt=1709508450074&adxs=855%2C-9%2C-9&adys=120%2C-9%2C-9&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C-1%7C-1&ucis=1%7C2%7C3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.aol.com%2F&vis=2&psz=300x512%7C0x-1%7C0x-1&msz=300x0%7C0x-1%7C0x-1&fws=4%2C2%2C2&ohw=300%2C0%2C0&ga_vid=167189262.1709508399&ga_sid=1709508399&ga_hid=2079726794&ga_fc=false&td=1&topics=3&tps=3&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X2FzX3RvcF9yaWdodF9jIixbXV0sWyIvMjI4ODgxNTIyNzkvdXMvYW9sL2hwL2R0L3VzX2FvbF9ocF9kdF9hc190b3BfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL2FvbC9ocC9kdC91c19hb2xfaHBfZHRfYXNfdG9wX3JpZ2h0X2EiLFtdXV1dLG51bGwsM10.&dlt=1709508388026&idt=8752&prev_scp=loc%3Dtop_right%26y_pgid%3D6%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_plcmt%3D585477397%26y_crid%3D585477397%26y_bdp%3D1.27%26y_sz%3D300x600%26y_act%3DheaderBid%26y_bid%3D25014%26y_fp%3Dbhci%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_ref%3D1%7Cloc%3Dtop_right%26ri%3D1%26noads%3D1%26y_pgid%3D7%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D1%7Cloc%3Dtop_right%26ri%3D1%26noads%3D1%26y_pgid%3D8%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_plcmt%3D102615858%26y_crid%3D102615858%26y_bdp%3D0.93%26y_sz%3D300x250%26y_act%3DheaderBid%26y_bid%3D25014%26y_fp%3Djhgc%26y_ufr%3D1%26y_dp%3D0%26y_dt%3DO%26y_ref%3D1&cust_params=bucket%3Daol-aa-2%26colo%3Dus-east-1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Daol%26ver%3Dtd-app-aol%26pct%3Daolfrontpage%26pt%3Dhome%26spaceid%3D1197803361%26yrid%3D02r7skdiua1p4%26bka%3D0%26y_bx%3D1&adks=2925883975%2C3459255604%2C1294450886&frm=20&eo_id_str=ID%3D7bb82c97959dc59c%3AT%3D1709508399%3ART%3D1709508399%3AS%3DAA-AfjZPE8XmncuK1jLB_EFwQ-PX
Preview:	{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_as_top_right_c":["html",1,null,null,1,600,300,0,0,null,null,1,1,null,[138432988732],[6298088822],[5307966191],[3200313979],null,null,null,null,null,null,null,1,null,null,null,null,null,null,"AOrYGsnd5zfcqDOPKT_dnZs_dCfk9Tliv0APJOeZhC3IhSMuJdQSB0acV7dt1GDUBOQgotbnm7jQEKpOIfOnSibr46hJ1kJTw4IeSVFD-VE3Mr5zjL4-Ctb4k42q6A","CM-S6p-f2YQDFT4HTwgdzRsPTw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html><head></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script src="https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js"></script><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240228" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb~"]">(function(){'use

Chrome Cache Entry: 636

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1727
Entropy (8bit):	7.841642834649501
Encrypted:	false
SSDEEP:	48:neqelHLIHEOuwXcmPqGrdiGaasVuyt3mfcNDXFBgdS:ndelHoDfrTtsVzycBFBgo
MD5:	999D1B3FF54C1BE003B5178BC20314A7
SHA1:	A707A9D53C0F4D81CD529BDC5BD3E25AD87BEE1C
SHA-256:	BF6625A8DEAABA65EBC070FF4E4FD6BC4900DD2C044369462DFB8DC137E41AA6
SHA-512:	CEFAC1A4B571BAB2AB927F4D46E1C67FE24DF2FB9AFDCBF09F4B919054AF451BA93309DD166796F909F231FF18ADD41F2994A7FA2655F2DD0F9D890F1E243DFF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x....7PLTEGpL...........................{......................................................B........?W...8..@X.+F....p...0..j\|.)D..1....Ja.\|.Ga.\q.:X.......Le.......$G.j.....Qm....Ph."F.%H....>[.^s.f~.....B.......C`.....\|.. D......6O....(C.h{.Lb..2......E.....t.....,G.y.....Pf..........">.gz..4............5....Yn....4M...........H.$@.....=].>]...F].H_.bv..............Vl../..:.....Xm....x........(C.&A. <..6...../I.;T.<T.....Mc...BZ..=V.5N..r.....w.....3M.7P.l~......9R..Vk..l......\p....CZ._s.ex....n..]r..\..W....tRNS..!..E..........m..N......0.n.....IDATH..g[ZK...Db.=.a.....0.hT4..A# `.5jP....bzT...S..r{.?...<(.0.............G.R.)..qq..)..$.g.@brZu...KNTU.%'..$..._^!.....@d.<A..K...L....\),((,..........w-....xK..\~.8....&...w.....J.+C.x$..J_YSKW....E.<F.O..]..{..u.....~Lt..hl...{..JC......V.nR.A@.R7....9....-......^.J;.;../.(MtN.E...."#....o.....'.w.....t...O.h&..o.M.o

Chrome Cache Entry: 637

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=1&ns_st_sp=1&ns_st_sc=1&ns_st_psq=1&ns_st_asq=1&ns_st_sq=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=0&ns_st_cl=68971&ns_st_pb=1&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=0&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=0&ns_st_dap=0&ns_st_et=0&ns_st_det=0&ns_st_upc=0&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=0&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=0&ns_st_dlpc=0&ns_st_lpa=0&ns_st_dlpa=0&ns_st_pa=0&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508418339&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_lt=19738&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=0&ns_st_dpc=0&ns_st_pp=0&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 638

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3944)
Category:	downloaded
Size (bytes):	3945
Entropy (8bit):	4.741513182522235
Encrypted:	false
SSDEEP:	48:hHag3AnexiJ8Jymb6ldeEeZeci/CUQeteiHQedebeQe+eTWf4pw83cMV0Yb1hDXt:hFOexia8mbdyCUPoY0SHDXj4BVoxXr
MD5:	8C46EAF409C1A8DAB2FDB8F372C5A4B6
SHA1:	3464B2AF6E71B451C3490F2B4F3D2D7A61D89AC4
SHA-256:	5218669902674D63F214F7F96F2C5E88672ABBCC019DB1590B321ADA8AE0DB7D
SHA-512:	1F4D78909D54C85C78A6DC8B598738FF8A8973505A09DD827842021E9DB09E7454966D5A621093E7AFCAF5A1B27E0EBF5AD64E6A6E402F1F02D67B800DD1B3DF
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-ima3/5.2.6/videojs-ima3.css
Preview:	.vjs-ad-playing.vjs-ad-playing .vjs-progress-control{pointer-events:none}.vjs-ad-playing.vjs-ad-playing .vjs-play-progress{background-color:#ffe400}.vjs-ad-loading .vjs-loading-spinner{display:block;visibility:visible}.vjs-ad-playing .vjs-captions-button{display:none}.vjs-ad-playing .vjs-audio-button{display:none}.vjs-ad-loading .vjs-loading-spinner:before,.vjs-ad-loading .vjs-loading-spinner:after{-webkit-animation:vjs-spinner-spin 1.1s cubic-bezier(0.6, 0.2, 0, 0.8) infinite,vjs-spinner-fade 1.1s linear infinite;animation:vjs-spinner-spin 1.1s cubic-bezier(0.6, 0.2, 0, 0.8) infinite,vjs-spinner-fade 1.1s linear infinite}.vjs-ad-loading .vjs-loading-spinner:before{border-top-color:#fff}.vjs-ad-loading .vjs-loading-spinner:after{border-top-color:#fff;-webkit-animation-delay:.44s;animation-delay:.44s}.vjs-ad-loading .vjs-big-play-button,.vjs-ad-loading .vjs-poster,.vjs-ad-content-resuming .vjs-big-play-button,.vjs-ad-content-resuming .vjs-poster{display:none}.vjs-ima3-ad-container{botto

Chrome Cache Entry: 639

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38172), with NEL line terminators
Category:	downloaded
Size (bytes):	267811
Entropy (8bit):	5.40776599523037
Encrypted:	false
SSDEEP:	3072:N+74kQhrsZsSSxZhN9IvHI6UDnzNOLFEZW:wQFL98wbzNOLd
MD5:	399CB48C8B0681A1860AE8059C808560
SHA1:	D1F22C74021754EBF404A9CAF5A431B5313AB04E
SHA-256:	7D9289900841BB0333FE57EA20AD44BB7088E3E09C3DBB79ADC3BE1C8E6F7531
SHA-512:	8E41E1D58782AC752D61DA948B6CCB2D4879D8BFBB09DA23E39F393855D1FFE47D7A3CE3C8FE8110FF209FC88CFE1AB84382377D7AE1824DE171FFB3BC8A8E2B
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ss/nes/player.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=11)}([function(e,t,n){"use strict";e.exports=function(e){var t=[];return t.toString=function

Chrome Cache Entry: 640

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20848)
Category:	downloaded
Size (bytes):	20849
Entropy (8bit):	5.321834961993557
Encrypted:	false
SSDEEP:	384:w2C9N/B+UaIdKyTCZX0CWjQyX2GrVtA5RqpJeqn0c5ZzZyclcTcRcZcMc7cUAczD:w2WUgCtTWjfXXVtAyz0clcTcRcZcMc7X
MD5:	5CADC82C58084F53482E28EF8A77B254
SHA1:	1508565757B18F2766FD6BADBA953DCE3CB035FA
SHA-256:	1026C8D60E8D0AA73446CC18DF3B358E6FFE104126F0AB0D8D54AF1B0F6AD3A5
SHA-512:	B5578A52EE77E88DC071AC06B3FF105C60B5EC7AE2C7610A57A82883614F6EAFB2924AC378C53B136076D8DCBF101F5795568FCFF78C5D5EAEEF35891D85ABF1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/WAS/ais-chatbot/prod/1.0.27/client/chatbot-client.js?_=1709508425919
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var o in t=arguments[i])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},e.apply(this,arguments)};function t(e,t,i,n){return new(i\|\|(i=Promise))((function(o,s){function r(e){try{c(n.next(e))}catch(e){s(e)}}function a(e){try{c(n.throw(e))}catch(e){s(e)}}function c(e){var t;e.done?o(e.value):(t=e.value,t instanceof i?t:new i((function(e){e(t)}))).then(r,a)}c((n=n.apply(e,t\|\|[])).next())}))}function i(e,t){var i,n,o,s,r={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return s={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(s[Symbol.iterator]=function(){return this}),s;function a(a){return function(c){return function(a){if(i)throw new TypeError("Generator is already executing.");for(;s&&(s=0,a[0]&&(r=0)),r;)try{if(i=1,n&&(o=2&a[0]?n.return:a[0]?n.throw\|\|((o=n.return)&&o.call(n),0):n.next)&&!(o=o.call(n,a[1])).do

Chrome Cache Entry: 641

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU1yltxlHh/:+/
MD5:	93841CECCA9DAF9F88E8018D5FE8B5D2
SHA1:	341414E62D98248DAC3E06ED5C820124E1615028
SHA-256:	F28236CF9FB53F0F4F4F35FAF320AAFAEBCA7C2F0679E6F13F8A4283EC5ED10B
SHA-512:	985F02B75B42A1DDC54062733FCB2CA8BAF8E624E3D9D780183068EA60881064914DC6B747DA77076FAFC4433B57D57BBA2D6680C8B76F8B9D89CE52C9D26195
Malicious:	false
Reputation:	low
URL:	https://us-east-1-web-oao.ssp.yahoo.com/admax/adEvent.do?tidi=770960200&dcn=8a9690350187874cb30f80639700008b&posi=1764405&grp=%3F%3F%3F&nl=1709508449371&rts=1709508449335&pix=1&et=1&a=1c3e61d1-2713-4485-9ace-8542e793cfad&m=aXAtMTAtMjItNS0zNQ..&p=MC4wMDEzMzkyODY&b=OTIwNTszMjtuYWZkaWdpdGFsLmNvbTs7Ozs3MWUyMzVhZTAwYTk0Y2MwOGRiZDQ5MzM3ZjFkZDczMzs0MjkzMjE4NzsxNzA5NTA1MDUxOzswLjAwMTI3MjMyMjs7MDs7Njg0ODU5MDs7MTsxOw..&uid=y-valk76NE2rOL4CIsUQej0Ppn9nWsdHFD7Koa3KA_ip16%7EA&xdi=Pz8_fD8_P3xOVCAxMC4wfDE3fERlc2t0b3A.&xoi=MHxVU0E.&hb=true&type=2&hbp=252&af=2&dety=2&us_privacy=1YNN
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 642

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=14&ns_st_sp=1&ns_st_sc=1&ns_st_psq=7&ns_st_asq=7&ns_st_sq=7&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=11430&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11430&ns_st_dpt=8&ns_st_ipt=8&ns_st_ap=11430&ns_st_dap=8&ns_st_et=31863&ns_st_det=8&ns_st_upc=11430&ns_st_dupc=8&ns_st_iupc=8&ns_st_upa=11430&ns_st_dupa=8&ns_st_iupa=8&ns_st_lpc=11430&ns_st_dlpc=8&ns_st_lpa=11430&ns_st_dlpa=8&ns_st_pa=11430&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508450202&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=7&ns_st_dpc=1&ns_st_pp=7&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 643

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1057
Entropy (8bit):	7.462257846937284
Encrypted:	false
SSDEEP:	24:h0FQZ0p4ePJAUeBFRWvg8XSf+IO2Eq5i1bR:eFQmXUIvg8XZlV
MD5:	33E862CD5BDE2D44324A410DDC377898
SHA1:	5FD588D5B33C9A62D5A99EB9BC65CACCDBDA8353
SHA-256:	6D03A3E44C48C93B2CF37A6E4F3D4E39B4EB6B81108C82C1C3416253C622BE6F
SHA-512:	59E9D261BCAA51FC86307080833E4AF108CD23BB84F6337529096F342890D8E624CAD391B80E1512091F9A32FF0A5C5BC8C484EC979D49814053E94B9F8E692C
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=5aa61d192ca3818eb6ba7e0db0dc91240b4ed0b6
Preview:	......JFIF..........................................................&....&,%#%,5//5C?CWWu.............................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|......... . .............}..................................................!"A..1a.b...................................................!.1AB.".#$2Q.............?.Mf.o..... ...!N..D.I\|&...1.KZLQ..G..+........_.c..r.=.%.7..\| .Q..R...Wor.8.S.`..9......u.Z.......[U ..@\/.6../.Z........^.~2....P..].Q.".K4......$)...a.Y....d..18.B..8O`...pIuM.9q..<jEST....q..h.j.LGh@.8.....?)....wk.Y>6..z..zcON[Of.....cW.m..t%.....5..'t9s..L.c..!..n]`.9..1......C.b...:..D...........l4SQ.?w......6....&..5Sf.c..?...\Dl.rd;N.y..aS.........c.....p..u.K.9....D.....s.~29Y.#...b!..j..Pi..........j..!.yw...{....#.....Gr.em....>.E....#.z.6......zr.......x.........$t.w.........).MS`.C.._...\\|kUs.{B....Yk...6.{(B.... jY......._.....6.h...$H...+.........z....q.g... ......:....:...K{{.H..............Y..W..oq.>....4.yMJ..6..

Chrome Cache Entry: 644

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	8737
Entropy (8bit):	7.943753262962755
Encrypted:	false
SSDEEP:	192:/8lkFuZ11cHyJol7g+0iOgUZiaNzSjrl53JXgrP5qLCO8uQN2uGS:/8pIh7H0iXUJS1PXgrPrOjQLl
MD5:	B25FCC90389FAD9346B135B311CD46C7
SHA1:	9E8A2B08FC7127BFBAF75FAC691F3A94CEBA6F77
SHA-256:	7EA39932EF59B9A003CEFD4C0F2F81CE444874DDDB288D0106EAA6F869CC2655
SHA-512:	70A81ED7FF7B7F55FCBFBFB3437C39B6E2817BDC3B3A02EB089CCC9B8B38EF0327CE3E51F2D1F9D6E13E480328766C9581C7D21057C4D1841F6F7B1965B12EBE
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F2022136b017401181a8dbbdb1388592a&client=76f99bdb8f78cd44cc0b&signature=6c01f52bdd151aa1eefa1c3038c29a48e748304f
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4...................................................................:.^.`.G...{.I!$...HPk(..p....s...=kT%....W.3.....^{./Zp.y..../=..........v.R./.9...=.X(MF}.r.y......\...(..0.}..!D..6CP..2[....X.S.x..W:.........z={Q....?!..x.....\|u...^.%}..AvE..r...\6.._Pv5....<3X.4.J.....Ub..j.l+PlSf;a............1....l..Hu-,F.\|...TB.y..8v....G .;...........~.l?.>........0w...@@...s.z....\,.S....2#%o.A8.+..gG..k..G..>...rMg}.c..r1.T<.\|.-^....iYW.o.j\Z..cO..5X.....`.U..;...d.g...W........4.B.H..h...G.....\.V..W...f.4i....e2.E.....V.x.L.e.>\o.H6x7sY..u.k..J!...../.~..........-.>=7R........,>..m.......3.$.K...i.b.... ].....w.~........."mG..?*..W.b.Y...<.....z.d....yN........~..l..9AUOS._...{...]..^.....4~.+l..)..P...e%.E......X....5~..G.=..}..3.)yI..)YE@.1D.Bq+..S...H..Vz.?...5.........

Chrome Cache Entry: 645

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8064), with no line terminators
Category:	downloaded
Size (bytes):	8064
Entropy (8bit):	5.245040884595144
Encrypted:	false
SSDEEP:	192:12JhEIVHpBTbxWGDX4WxEn02lOTlcWbBCNUs5Wg6TWh:12JhEwpB/EGDoWun02oBcSAUi66h
MD5:	D1360A16026C224F7DD9D13AC565D5AD
SHA1:	34124B0059269D90C5AE64B07D837D9170069D1D
SHA-256:	EDA66327F9E3612AF7BAC1CF55BAFA77872DDB6735BDBDCF97DD39B8FD744725
SHA-512:	8BDC40309E639E80E1F79BF23827F558688753F241911CC22B44FFB13B75FF8A884A6FD81C470D211B9AD494773D7164F7EDF10BA7F29B3DD44C24BB09B845C9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8-6d742e966c.chunk.js
Preview:	webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.$":function(e,t,s){function a(e){return s(r(e))}function r(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/types/aol-location.js","./aol-location.js":"./src/types/aol-location.js","./aol-markets":"./src/types/aol-markets.js","./aol-markets.js":"./src/types/aol-markets.js","./aol-recipes":"./src/types/aol-recipes.js","./aol-recipes.js":"./src/types/aol-recipes.js","./gossip":"./src/types/gossip.js","./gossip.js":"./src/types/gossip.js","./sports-teams":"./src/types/sports-teams.js","./sports-teams.js":"./src/types/sports-teams.js","./weather":"./src/types/weather.js","./weather.js":"./src/types/weather.js"};a.keys=function(){return Object.keys(i)},a.resolve=r,e.exports=a,a.id="./src/types recursive ^\\.\\/.$"},"./src/types/aol-location.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0});t.getListMarkup=function(){v

Chrome Cache Entry: 646

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1785
Entropy (8bit):	7.470718589759509
Encrypted:	false
SSDEEP:	48:Ay0qRhPZ1qvHDh9WVZEY21++x1fJ66X7xj4UTN57Xre6J:A6ZEvF9cEY2NRVX1MuN57bpJ
MD5:	4EBA1FBA64296252E56327839FD1781F
SHA1:	28D7DBEFCF7CCBED883833A1CA494D2DEA84F3C9
SHA-256:	F0BFD8F52A289AA4234D459722AD044853DBBCCF3ED6653C7398A2D7855B2528
SHA-512:	9F250979243BE59972D59639F193E57B70FFF1826E6E7B313778C8F773D678346DE4981FF8809C5BA9FCDD2E4E32D2AFF3644BE085AA327B7161FE6A2872C2FF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL............................................................................................................................................................................................................................................................................................................................A..A..A..A........>......D........>.....@....t....Ys.h..!N..2[.:b.......%Q.=Y..>.y...>.n......j}.s...?.c...z....................Sv........Uk.Ic.`u.Ps.}...n..6[....h...;.F].....e{..A...._\|..9.....B_....Vm..;.Jo.1K.$D....=a.Nf.......p..:`...Qg.{..4]......7W.6V.i........1W....r....~................l..l~.4Q.!I.Gf..?."@..........=_.Ko.L_.[\|.;V.,R.Ma.v....B.~..@f.+V..J.....G.x...A.:U..%G....t..k.._r.>V.Jg.....~..e...5P...jtRNS.iD.5."....&r.(...K.N0[.o.....Y..9@=.....\|..T.d`...,........lf....G..^..........................v.t.YB.H...AIDAT....ux......u.nu.[w..0...HJ..`...z...=..n;.n%.P0.[..../......

Chrome Cache Entry: 647

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	11613
Entropy (8bit):	7.9554268193237645
Encrypted:	false
SSDEEP:	192:T0QEKYZvI0tM0orIEUySuVKVYZ25e4mi72XcHJyvpQq8S82Rx/NA2i524YkA7Ou5:46YZvS70sVni72XcHJysS8xHVYH7+IN
MD5:	8752A19BAD1D9D37217FF2239F0B0460
SHA1:	70BB8A681171F94FF620AADAC2AD0EBA3D45CD51
SHA-256:	4FB2BA6D8122C2A93C8E0EE77F6640DB473F1582E2DBD00522A27C08DEAD258C
SHA-512:	3B84F19847C58C3A865D8BE01215B1717A07E93AFA9B225389FFFFC718F13512F88B507FB0B6E3CB7CDAAFACCA23B88E2421F800B5DC29F0E3A046481FE1E907
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/5s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/5s/match/image.jpeg*~hmac=868328882022d9eb8d9b8228a78a59536ca67a97f1ce67a1ad7535f80d38850d
Preview:	......JFIF..............Lavc60.3.100...C......................&....-(0/,(,+28H=25D6+,>U?DJLPQP0<X^WN^HOPM...C.......%..%M3,3MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM...........".......................................M.........................!.1..AQ..."TUaq..#2Sr...3..$4BRb%5CEt....&Ddsu...................................-........................!1Q..ARaq.".....r..............?... Q. ^.6aH..R5A+V.KU.f$..r[..8.-......r\z~au..7Y.H.g%.hB.........B.......;...9+......;....K2.:-...%..o%...Q.0....$..f.]..q......b.W......V........."K..uV....o..%..JC.IG...u...:5v.7.....o...%..]..tg....=..~`%.8.i../.aa=...+..&...O.V'........,.T:/r..b..D...TuE..M.T.u?......[..'.3.J...T...-%.2.j..?..r....#.+.c..k\|.I.. .i.$BL..V..I@.v.^22..iP....548.c.p.M...yZz.i..x....Z{kY.~J.f..Ij{k..&l.P]..Z...v..e.%D.J.#............I<.>..r[....Z}u..~H....Y.~J..lR..[..\.......i...(.71......1..I....nI...b...<..1.V.]g..*_..`.]..z10:...@-..g ...Z.uV..5....F...;:K.FA..>..&.......?$u....?%N.

Chrome Cache Entry: 648

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46582), with no line terminators
Category:	downloaded
Size (bytes):	46582
Entropy (8bit):	5.218572648449973
Encrypted:	false
SSDEEP:	768:+jSaF13bkxgCaPRq++10mW63qoqNqpKlrTghhKXRJ6ao8bOFpD2JvyjE6piEEL4G:B20hhKX3No8bOmJvsTpiEE/Y4yh9Bqdr
MD5:	0C84C99F9B88BA0E3CA06E6D6D13677D
SHA1:	8729AC170FAE03E7053F9533915A30ABA69CD822
SHA-256:	F339A9B2CDB4A73D05827537D446138E225D8D90FA8973332635E14A9946D112
SHA-512:	C1EECB38C75AB2ABFF1157BD059200B870F338028790AE130F5B0E57B5D3DF5D4C665E5D333C042BF313BE68EB5DC936D7C1F87FD21A927D42045045E8CC52C8
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-dl-1.6.3.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-dl",[],t):"object"==typeof exports?exports["wafer-dl"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-dl"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(i[n])return i[n].exports;var r=i[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,n){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,i){"use strict";function n(){return h=l(i("./src/data.js"))}function r(){return v=l(i("./src/plugins/autoscroller.js"))}functio

Chrome Cache Entry: 650

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=13&ns_st_sp=1&ns_st_sc=1&ns_st_psq=7&ns_st_asq=7&ns_st_sq=7&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=11422&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11422&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=11422&ns_st_dap=0&ns_st_et=31855&ns_st_det=4&ns_st_upc=11422&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=11422&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=11422&ns_st_dlpc=0&ns_st_lpa=11422&ns_st_dlpa=0&ns_st_pa=11422&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508450194&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=6&ns_st_dpc=0&ns_st_pp=6&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 651

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/19505?id=y-RZbsowVE2pJUqo61lnbO500m2RcYNsnMLcM-~A
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 652

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2012), with no line terminators
Category:	downloaded
Size (bytes):	2012
Entropy (8bit):	5.217194903140277
Encrypted:	false
SSDEEP:	48:c35nr0EK5AzcukJyu49VwttWo+Aklz3yIwmj2Dz+1MUI7+z:cJnr0A1ktO3yIG+GUt
MD5:	9321F726798AFD6802699079A43EC6B3
SHA1:	27548CF586CBBDB5F811A67923DD0F7147ED812A
SHA-256:	4977E3A5D73D419FBCBB463BB12AD11D17841BF613D5C7811EA6DCFD257E9178
SHA-512:	B1B1D3F1CDD436DEA79D87B2834FF1B2A9269FAE81B2D3BA320F9ABA132A0DF4134DBA660010F9E235E6429E0EA48E18FC99912BF998FCAE7912B0E90C3A2759
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/profile.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.profile=function(o){"use strict";function e(o,e){var r="function"==typeof Symbol&&o[Symbol.iterator];if(!r)return o;var i,t,n=r.call(o),a=[];try{for(;(void 0===e\|\|e-- >0)&&!(i=n.next()).done;)a.push(i.value)}catch(o){t={error:o}}finally{try{i&&!i.done&&(r=n.return)&&r.call(n)}finally{if(t)throw t.error}}return a}function r(o,e,r){if(r\|\|2===arguments.length)for(var i,t=0,n=e.length;t<n;t++)!i&&t in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,t)),i[t]=e[t]);return o.concat(i\|\|Array.prototype.slice.call(e))}var i,t;function n(e){o.dom.getClosestWithClassName(e.target,i.CONTAINER_CLASS)\|\|a()}function a(){o.dom.removeListener(document,"click",a),o.dom.removeClass(o.dom.getElements(".".concat(i.CONTAINER_CLASS)),i.ACTIVE_CLASS)}function l(e){var r,t=e.currentTarget,l=o.dom.getClosestParent(t,".".concat(i.CONTAINER_CLASS));o.dom.hasClass(l,i.ACTIVE_CLASS)?a():(r=l,o.dom.addClass(r,i.ACTIVE_CLASS),o.dom.addListener(document,"click",n),o.rapid.addRapid({profile

Chrome Cache Entry: 653

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1693
Entropy (8bit):	7.182295722430782
Encrypted:	false
SSDEEP:	24:jYTt456GaT4Gq1zA+WGTZgNCaNqvd8D8rzqhmWAWCrH13d9X+/g/PNr:8e5aT4pbW+1qDemgfWOV3d9X+/iPNr
MD5:	02657A57715136E73DF932A1BAAB26E7
SHA1:	ABE661E09BBFF147CBC84763BFDE488CA66CEDF4
SHA-256:	48F43FCD4624CF3267E0860FAC6C83CD294ECD19CEFFAD964AEECCF901E101CD
SHA-512:	3A8036293466BEC2701831AD55814E74410AF9C5FBEA0F48D369E9916CBC81B270958829733B1BED1B15C397F34B9EA07F68D7AD4864DEE3D9B5E343ACCBFD78
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..Z..Z..Y..Z..Z..Y..Y..Y..Y..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Y..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Zq$<..Z..W..Yr%<.<B..Zs(=..Yw.?y2@v,>.fM.JF~:B.KFq%<..Z.RH.PH.}Sz4@..U.`L.{S.WI.lO.\K.QH..U.iN.nPt)=.YJ..V..X.[J.MGu+>..Y.]K..Z..T.uQ.sQ.gN..X..Y\|7A.rP{4@t(=..Xs'=.zS.FE.~T.bL.\|S.qPw/?.^K.aL.wRt=..Tr&=.@C..W..V.EE.lO.UI..V.GE..Uy1?..W.VI.kO.=C..X.>Cu>.pP.TI.hN.eM.ZJ..Y.LG.nO.HE.AD..X}9B.JF\O.:...wtRNS.................o/..!.`&.(..>+.E..c...~<..M.O}y.ft....d...2q....km.....7.....e..5U.......]AaKl.;.#....I..Z.Y..w..Wz...MIDAT....ecSg...'.....R...1.pw..;..#mRww.j..p.......I;.s].8..}m.V...jz..4!.....V..H3..5.Z..?.....n..0.V.....P.>......B.J.._gGv...o.o.d...-7......V.f.o.=U..

Chrome Cache Entry: 654

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	437896
Entropy (8bit):	5.503310960915329
Encrypted:	false
SSDEEP:	6144:O5dw93IFOf0E7qMHl/C6AMGqRvJwSF6mffLRSlPg:AdwWUJRvOSFhfLRz
MD5:	3279F50A5A53E9F41272C731647B91B3
SHA1:	53B826E582F9649289D3C68DE83295892B695F30
SHA-256:	E518D28FC305914D99970E7793785FF5143EB03B1FF3EAF90F980D3E28758CDD
SHA-512:	6B0BD65F5129D8EB3C384204FB1F4DE45B1F59BB41FB21A74E44F87A306958775F13D0306B941D8C6B95A1E3B7C31B82258026EEB3D0379D33510746389BFD0B
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202402220101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ba,ea,ia,ma,oa,qa,ua,ta,va,wa,ya,za,Aa,Da,Ea,Ia,Ja,Ka,La,Oa,Xa,cb,fb,lb,nb,ob,pb,qb,sb,wb,yb,Eb,Hb,Mb,Ob,Qb,Ub,Vb,$b,bc,ac,ec,fc,Wb,gc,hc,ic,lc,mc,oc,qc,rc,tc,uc,xc,zc,Dc,Fc,Gc,Ic,Kc,Mc,Nc,Uc,Vc,Wc,Yc,Zc,$c,bd,gd,hd,id,jd,ed,pd,dd,cd,qd,rd,sd,td,vd,wd,zd,yd,Bd,Cd,Id,Ld,Md,Od,Pd,Qd,Ud,Wd,Vd,Zd,ae,$d,ce,be,de,fe,Nd,ke,le,oe,Ee,Ae,Ce,De,Fe,Ge,Ie,Ke,Le,Oe,Pe,Qe,Be,Re,Se,Te,Ve,We,Xe,af,bf,cf,Ze,kf,$e,lf,Bf,Df,Ff,If,Jf,Kf,Of,Pf,Qf,Sf,Tf,Uf,Vf,Wf,Zf,cg,eg,dg,ig,kg,lg,Fg,Gg,Hg,Kg,Mg,Og,Qg,Rg,Ug,Vg,Wg,Xg,Yg,$g,ah,ch,dh,fh,gh,hh,ih,jh,kh,nh,ph,th,rh,xh,Hh,Ih,vh,wh,Jh,Kh,Uh,Sh,Xh,ei,Lh,ni,wi,xi,Bi,Ci,Ii,Ki,Li,Oi,Ri,Wi,cj,ij,kj,mj,nj,oj,pj,qj,rj,sj,tj,vj,yj,wj,zj,xj,Aj,Cj,Gj,Ij,Jj,Mj,Kj,Pj,Qj,Rj,Vj,Wj,ck,dk,pk,vk,tk,uk,Ak,Ek,Gk,Hk,Ik,Kk,Ok,Vk,Rk,Lk,cl,al,bl,el,fl,il,ol,rl,sl,M,tl,zl,xl,Kl,O,Ml,Nl,Ol,Ql,Sl,Tl,$l,am,cm,dm,im,pm,rm,tm,um,vm,wm,zm,Dm

Chrome Cache Entry: 655

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	967
Entropy (8bit):	7.4509660798232895
Encrypted:	false
SSDEEP:	24:ztFspDRkRIb3wKvJKupw5k9s2qKp/z9SYc:ztapRkOgQJKLIpxg
MD5:	ECFB9D0FE05A55DA841156C2E67F42C0
SHA1:	C31207CC94772F6E3793C27E2369D6A52C103B56
SHA-256:	8F1E1989655DF26756B971027B1C5D34162F0B30B3639EC65203697B47059C4B
SHA-512:	9BFE7261FDEAEC2811766A6A63F14807F8FF76F27D45273209896E86B118FF67721A62A7AF88964D49AB6851777C28CE53E3415AD3B9CB78718DD416217A0AB6
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-04%2F024bb600-bc29-11ec-be3f-c8aa85a55bda&client=76f99bdb8f78cd44cc0b&signature=b9513e72c8af6f42b1e2f462026b9e7c280d5a3a
Preview:	......JFIF.......................................................... .... %...%-))-969KKd.............................0.#..#.03)')3L;55;LWIEIWj__j............ . .............\|..................................................!1ABQaq.."2...............................................!.2.."1#Ba.QR.............?.Pu[.Pl...nh..:sw.r..#.a.s.]o..7..a......{.F.<B-..6.w....+..'..H?H..G.cM.Z... V[e.oc4..nK..S=..Wn.......y'.a.F.eU.=a.+...(.c...H.v.U....F_..L.e...5....'.yM......C..y...r..[..w1.3U.;.T..9...?R.U"l.,..km..N.NY,..U.5..#..T.S.;.#L$...2..k..Yh...x........_.D./.w...6...%...w...S.FA......)..a...}.&...-.n]7...p.AF..%.(x.0G..9V%.E........k../?..ROu..4..@*.......d...a.......%.`f..............W..p.z.4.....I.[<...t....G;......I.f.sQ..D.Z.........)R]...'Sw.-.~.L...V..a..Y./.q...R(...V$.J._ ..e......m.m..=.........[....~..JWG'..D...,......KR..(`VWugN.$M.h..e.R[).c..i..Q.......=..r.8.[i.+4j...l.#..e.....<V..0...S.....xM..a..[..x...

Chrome Cache Entry: 656

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5504)
Category:	downloaded
Size (bytes):	5556
Entropy (8bit):	5.2857072176183015
Encrypted:	false
SSDEEP:	96:a95qSDEAtjkKJmz/srLIaZI3Eq/XIaZI3Ek/gIaZI3ElYUw3ODK/nKoq70scXwMj:I55YK7Jmz/k0aZgEq/YaZgEUNaZgEj2N
MD5:	1229C537C90BEA4F08C34F64EDD086DA
SHA1:	08C48A5DC7A077C3016C2668D3C603C72A9511A4
SHA-256:	71CE6BD3E93582FDD9EE51370258D11E1F53785DCCF1959440E408847C9B674B
SHA-512:	CED9F01991BC4440355DB4C1C980C16E05423543A5AADC80F26C1129AFE380306118099DDC620E06203EBB9E4E4071B43BFDAE4B76DACECAFAAAB11FA5F230D3
Malicious:	false
Reputation:	low
URL:	https://consent.cmp.oath.com/cmpStub.min.js
Preview:	/! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,a=[],s=window,r=s;r;){try{if(r.frames.__tcfapiLocator){e=r;break}}catch(e){}if(r===s.top)break;r=r.parent}e\|\|(function e(){var t=s.document,n=!!s.frames.__tcfapiLocator;if(!n)if(t.body){var a=t.createElement("iframe");a.style.cssText="display:none",a.name="__tcfapiLocator",t.body.appendChild(a)}else setTimeout(e,5);return!n}(),s.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),s=0;s<e;s++)t[s]=arguments[s];if(!t.length)return a;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 657

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 658

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	13950
Entropy (8bit):	7.963002970742842
Encrypted:	false
SSDEEP:	384:ZknlseBmk0O0/Uz0WBPyTIxqmPPA5esj2QhbA:ZktBn+EPycXw5x6QC
MD5:	E47C94C7A13014447EB9CD7D5CEEDF9C
SHA1:	AC8A4519BF6089B7976FF03FB56E8C1CCE55F6C5
SHA-256:	E1EBD915146AB3AC3D8CD28AE9640BBCA9DB3A82EFAF6DB939D462005FAD6E3D
SHA-512:	6B9ED95FB61708847F3A772A35F4591F0DA93D8C2A4F8F3925CC81C43BB00314113824FB0853652DF6F5D0F0208561F5361AC24F2924CC835831FAF6FF40E7AD
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/15s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/15s/match/image.jpeg*~hmac=f2f30f7b46b454acd244c92e271670b94f722ff7ddc863f0c863e33cf6904478
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE...........".......................................G.........................!1..AQ...."aq..2T...BDU...#3RS$%&46r.bt..du.........................................................!1Q.ARa.q..".....r..............?...;e.P..fY0.]L...dj.....D....qT\J.TU..U......iFi@.J.(.r.r...'(.6N.i.P&.BQ..\.......iLF.aMD....vPK.'......DA.0..{.e.0...p/.x.^..s.#5........Lu;..t.7_.Ts.6../......:.o..p.#..#...{....r.a=.......Q..\9. 4e.H...l..'8.d.I.....6U..o..b..2vF.K..........[..#Z.1..zU.......<..H..C..}../....[.....b...=.d..rr}.[...m...H.L.V]]e=#.....q...3v_?..OUF.{...a.n.'..}TzV.....9c..Ig{....6s(s..k...........y.SO.}@-.........$...X....Z/.7.n..xb.d.?0..........u...-?5..S.ctl.5.....{.Z..x..e,.........I........<.....bpuM.8.i`.#:.#......}..W...E.'=........,...?.o.H.Q....FI,3>..59l1.'.K....>O{..@.)@.,qv.d.ta..

Chrome Cache Entry: 659

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52213)
Category:	downloaded
Size (bytes):	52304
Entropy (8bit):	5.125715524515446
Encrypted:	false
SSDEEP:	768:5c9mqxGR29mqxGnuw9m7xwUx0rm7xONCvh:SfRt5
MD5:	E4AD001A9E7C47E8F5ABAB6082868BBF
SHA1:	8FF6F57B5FBA76E2DB2B820316A3B93AB1499610
SHA-256:	94EF382AFA6AC569FD59B5E5E0453B96C77B1AC7A99E5AF4A525570609AE7071
SHA-512:	56AEDCD4907A113DB3F5E9926F4CAD1AA9A73EFB8D52AA58EFDBBD646C52C68BB72DE5AA8A65A93270089851481F6E1010F0A82069659C7A704EF67B4772B610
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/dl.e4ad001a9e7c47e8.js
Preview:	/! For license information please see dl.js.LICENSE.txt /.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={5497:function(t){t.exports={dispatchCustomEvent:function(t,e){var r=document.createEvent("CustomEvent");r.initCustomEvent(t,!1,!1,e),document.dispatchEvent(r)}}}},e={};function r(n){var o=e[n];if(void 0!==o)return o.exports;var i=e[n]={exports:{}};return t[n](i,i.exports,r),i.exports}r.d=function(t,e){for(var n in e)r.o(e,n)&&!r.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:e[n]})},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})};var n={};return function(){"use strict";r.r(n)

Chrome Cache Entry: 660

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3998)
Category:	downloaded
Size (bytes):	4037
Entropy (8bit):	5.169888083237825
Encrypted:	false
SSDEEP:	48:YozhS8pv0kSqguti9GmqiiLmQNlzQAxuFpmT2DoGu8EGQtTLS1LDHR3OKWQGb4DI:3hDId95qnqszQuuFps2DCpByDwi5QOM
MD5:	707AE9824EBCBC09BBD340E68BBC68BD
SHA1:	933408489CB648A35958839EC6D8BE83A4EC833E
SHA-256:	8C4C5B0B489B01197EC592A28F1C149DC123C7ED2ABBA5C5552D3E3817FCCAD2
SHA-512:	78F0CEA95846A60D34B08ACD9514C8C98DA12C290EEABC1AE83F783D8CE19F49D3693D635403836EE01F4F6BEC570A853E83039C6FA53533E1890B31828848C0
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/dispatcher.707ae9824ebcbc09.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"use strict";var e={d:function(t,r){for(var n in r)e.o(r,n)&&!e.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:r[n]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}function n(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Objec

Chrome Cache Entry: 661

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (10418)
Category:	downloaded
Size (bytes):	10553
Entropy (8bit):	5.371243852083246
Encrypted:	false
SSDEEP:	192:BLDCIBrTfcYYLJCAb3yXUjrVlyoJw5YjHvOCeH0NtQ8siAt0ffd9RjH+Pn3ylqyt:BL4EYyXUjrV1JwPCh5vHd9RjH+P3Wqyt
MD5:	DD142D94264B320EC9EC0445BE324C4F
SHA1:	5FD33E4E5973E5867567B0944641E13D328B2EA6
SHA-256:	A962ADBE176254E9188836E9C47FBA39A34DFE9CC7D39891CF72F6E02BEC20A5
SHA-512:	B6094BCC4C743590DCA606BE845C2409943C9F1A60286DC6F9C8DE424BCF63BEC7AE946133FC88A614D73AEE890B9E927A9A3F2C14A0C214C22188B0268FBBC0
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/omp-widgets/2.1.3/smart-widget.aol.prod.js
Preview:	this.OMP=this.OMP\|\|{},this.OMP.smartWidget=function(){"use strict";var t=function(e,i){return(t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var i in e)e.hasOwnProperty(i)&&(t[i]=e[i])})(e,i)};var e=function(){return(e=Object.assign\|\|function(t){for(var e,i=1,o=arguments.length;i<o;i++)for(var r in e=arguments[i])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t}).apply(this,arguments)},i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function o(t){var e={exports:{}};return t(e,e.exports),e.exports}var r,n=o((function(t,e){var o=i&&i.__spreadArrays\|\|function(){for(var t=0,e=0,i=arguments.length;e<i;e++)t+=arguments[e].length;var o=Array(t),r=0;for(e=0;e<i;e++)for(var n=arguments[e],s=0,a=n.length;s<a;s++,r++)o[r]=n[s];return o};Object.defineProperty(e,"__esModule",{value:!0}),e.logger=void 0;var r=function(t){var e;if(t&

Chrome Cache Entry: 662

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50492, version 4.262
Category:	downloaded
Size (bytes):	50492
Entropy (8bit):	7.996239464156703
Encrypted:	true
SSDEEP:	768:N+zvGQ3XASHbY9ps66236vU2DXgjcinVOnZlpqcwAwd/ilj+eet5OMSI1O55nNF:EGshHMZ6B/MTn8Zfqh5CI1E/F
MD5:	5F64EA58A43603DDAB8B2E538701F6F8
SHA1:	C3CAEB4D385C158920A91C83E43F8B960AAD7344
SHA-256:	F45F98A61C87AF15EE003CF113ADA63636F52B5C7E17ED150A92D5D532BCCC07
SHA-512:	BCBA35E1F5A5DB16FEBD98AF7882EECACAC10596EB1CD7884EBDC5B9BC5191972BF2466F161DA7677A1B3C2AFC5271F97DAA634CE9005AD7495DFCD99345D469
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2
Preview:	wOF2.......<......f..............................@..,..v.`..R........6.$.....H.. ..&...[.......^.B..m....4..>....4$.I...1T#.....t.................4...L\|}.Ap..g5#RR....#.+..Q'O..".Y...,...Y7..}k...bb.N..\....'s..^..........wDE.S...k.T>..7V!..]..........W../..x.....C..n.#L....a.......F\|..........9.."L3...&..G.s~.:.].}.Kc.Py.oQi<.2.-l.;..0..T..i..:....>.w..b..pY0...(.s...UP...L!.fE,..p.......R....h...p.0$..l9r..n..~..t...!...\..A.("P.x ...X......w...3....p.;i..g.dE.,.....2.d..X..2..D$...j.w..w.q\ .Eo........l..l...^.qD....&F"...._...\|.....F.r,y...H...0....... ..\|.n.dK...>.AB$D.6.`;..............$?........}.9{..I.. ....[...4h.....ys?....ezB.yf.`..g...E..D3...~.Yf7.eW......9.M..gA.R3yB.4.......Me..[q.....M.:p.1..GT...........Z..2+0....\..lP.....)..\....)..t.M..e.i.:/..S.k..g$.@....>tXpJ..K..$u*.i.Zg......k...H....(.P...].2.~..S!....c:s.&.Lb..]...A...Sgfd.........T.0.u....Fz..!`.zsx...,I.......t.....w.EQtt...E..h.%?.E.h4:j....n7.m.L.8.aP...mv.

Chrome Cache Entry: 663

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 664

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6926)
Category:	downloaded
Size (bytes):	6967
Entropy (8bit):	5.185663142245749
Encrypted:	false
SSDEEP:	192:9hiwcbKK5uBC1VlNwbK/KbJAuXK5uBC1VlAE5f69/s:9/cbI0VbwbK/Kb0I0V+qo0
MD5:	53A0B2A8E8A6AED3E795B88F65D7D0D2
SHA1:	6742F279266BB2934931C68D22B5D591786ADF4C
SHA-256:	8691A5F39A556ABADF010121E4DF9A7D07E773EE4088137D16C81DBB8751DE3E
SHA-512:	19229138D6270684260F2A0215CF26271FF0BBE69E45B55930D48500F14DFB8B1D4762C37C00808D5E43CAB19C8D901F9CF2CDD7A51D0022919B4F981F7A769E
Malicious:	false
Reputation:	low
URL:	https://products.gobankingrates.com/versions/4.60.0/static-js/runtime~main.js?d5eec0337058d8269397
Preview:	!function(e){function t(t){for(var l,s,r=t[0],n=t[1],o=t[2],u=0,c=[];u<r.length;u++)s=r[u],Object.prototype.hasOwnProperty.call(p,s)&&p[s]&&c.push(p[s][0]),p[s]=0;for(l in n)Object.prototype.hasOwnProperty.call(n,l)&&(e[l]=n[l]);for(i&&i(t);c.length;)c.shift()();return m.push.apply(m,o\|\|[]),a()}function a(){for(var e,t=0;t<m.length;t++){for(var a=m[t],l=!0,s=1;s<a.length;s++){var n=a[s];0!==p[n]&&(l=!1)}l&&(m.splice(t--,1),e=r(r.s=a[0]))}return e}var l={},s={1:0},p={1:0},m=[];function r(t){if(l[t])return l[t].exports;var a=l[t]={i:t,l:!1,exports:{}};return e[t].call(a.exports,a,a.exports,r),a.l=!0,a.exports}r.e=function(e){var t=[];s[e]?t.push(s[e]):0!==s[e]&&{2:1,3:1,4:1,5:1,6:1,7:1,8:1,9:1,10:1,11:1,12:1,13:1,14:1,15:1,16:1,17:1,18:1,19:1,20:1,21:1,22:1,23:1,24:1,25:1,26:1,27:1,28:1,29:1,30:1,31:1,32:1,33:1,34:1,35:1,36:1,37:1,38:1,39:1,41:1,42:1,43:1,44:1,45:1,46:1,47:1,48:1,49:1,50:1,51:1,52:1,53:1,54:1,55:1,56:1,58:1,59:1,60:1,61:1,62:1,64:1,65:1,68:1,69:1,70:1,71:1,72:1,73:1,74:1

Chrome Cache Entry: 665

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1902)
Category:	downloaded
Size (bytes):	2006
Entropy (8bit):	5.314199167619472
Encrypted:	false
SSDEEP:	48:slPzJhaFBhh69XAarBhh6KwQh6SrN0fv5lXDRaDW9rkP6yp+IlAMrHnL:stzJ8PkXtPhOTDRaDWVkP6ypDl/
MD5:	8180422BA814CD41B4B05109907485A8
SHA1:	A8D801B15DEACA3F305AD6383CBD1AEA4A5E11D1
SHA-256:	9055813997AAC5F29B8FFD38B964776F03F8DE37B0CF1DB2B16AD4309C3E6C69
SHA-512:	E9D964164D1B12C07CF82C341312FA259021186BABFFA9FC249BE759C130F65493E327BEE45E1594775D7C99F8E8260239921DAFA20AE67056A970C52ED218D2
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/google-topics-api.20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35.es6.js
Preview:	/! 20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35 /..(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-topics-iframe-${100*Math.random()}`;function s(){try{if(!TRC.topics_sdk)return;a(TRC.topics_sdk)}catch(o){__trcWarn(`failed to save handed Google Topics at local storage: ${o.message}`)}}function a(o){try{const t=[];for(let e=0;e<o.length;e++)if(o[e].topic&&o[e].taxonomyVersion){const i={i:o[e].topic,v:o[e].taxonomyVersion};t.push(i)}if(!t.length)return;TRC.pageManager.storeValue(e,JSON.stringify(t)),u()}catch(o){__trcWarn(`failed to save Google Topics at local storage: ${o.message}`)}}function c(){let o,t;try{if((t=(o=TRC.pageManager.getValue(e))?JSON.parse(o):null)&&t.length>0)return t}catch(o){__trcWarn(`failed to read Google Topics from local storage: ${o.message}`)}}function l(){window.addEventListener("message",o=>{if(o.origin!==t&&

Chrome Cache Entry: 666

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 667

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	277120
Entropy (8bit):	7.999309652970665
Encrypted:	true
SSDEEP:	6144:S4PmT/tfj8IaYmm82FRVHulwV8Kmj6usFbl:S4GtAKm8TVHuGN+6usFZ
MD5:	69359F920E7CD49241ACE3A91BC90B50
SHA1:	353C89F73F26F89D0AAB142FEE94F0721B202D0A
SHA-256:	6054B9A16DC224E71C0F55849D3F4BFC3DCEA2F804C7E88EC0785FE5FC7F654D
SHA-512:	752719C3BBB353CE37B3C982D8F6BF70B03D225FE6556DA21885F14ECDD769178D07688AE6C32BE9578490431FAE7623A1491E2C35664BF76255612544653366
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|."....b.....qm7".1dLSnH..iqY&....Z...J....E,q.....H..3.%F.N.5.4....F...v{E.S...5../O.]..v.\|..!.w........Z.A:3/b...f..y.>?a.p..(j.,....9...:..R:.....G..@.u.&s{.n.....#.._?..4.d...}....R....)rI....d.n..2....t...e.g...../..&0..Ziu.`...K...x.....[..gU...i.=5.....5.z....y]o5...%2........?.....j-9.U..$.......).F^....^PI.!..[ $D...<...E...f...'j.;!B.~"/.....\|.WB..M2.u.._. G.....vy.T........#..-.6.5.D..ex...z.1..,..OT..g.xe.;^V.......j:Cv.[O..bj.R...p..S.......h..$}.?..b.r..PS..&P<...?.t.a.\...Pni-}/.+.T.x...K..Wz.p...n...y.N..D...I".....qq.,....L..CK..rp.q..?./..S1C.89#f"..B.H<.#..30

Chrome Cache Entry: 668

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1022
Entropy (8bit):	7.435876359142679
Encrypted:	false
SSDEEP:	24:ztFSRTa0TF1hZYlWXwtlufLarT8D6ekbI1OlKnbHlatW:ztkRTaMf9urThdbIwKnjlas
MD5:	B6B5E2B6A90BFE4CD91C383B3D33EF41
SHA1:	38B15B05EC050D2792DEE60DD755E0476BF4CFD7
SHA-256:	C248A70B7B242A65D4220283205745C8712252C4FA6ECD5B5BD56F90B3057833
SHA-512:	FDEDBBC03387B3E011F777C5C2FCF04A0A65D77126A7D45D9DA57865AEDE771BE1215E1C7796CC73680BF4D7876A2E64EE41AAB06E28F819EE9ECDECC998B5F4
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fbe863210-34b6-11eb-9fb7-2187cff1c470&client=76f99bdb8f78cd44cc0b&signature=cd7d9f6e5bc98fb19e3761f13bce648092a434ce
Preview:	......JFIF.......................................................... .... %...%-))-969KKd.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw......... . .................................................................!Ba.1"A..#2q.................................................!12Q..."qa...............?.`..\|..h..gH.o.1u.}..;.&>+......]....e......nWS%E.!..w<..)....Tz.Z...m]J...TU.I.f.n)S.E.!..t<..)...!.Xz#R.z..YR....T.d.7..;.Km."........B..A.a.5..w..j..7.c..._c...".q....".T.].....> .#A.(..f..........@"..!.f..f...s\|H.y.\EGIe+.Wv..#U6v.^./.X..?V.A.3.6.9.......g..x.^.....(y...x....^;.v..M.u.A.Vb..O....jK.SJQ.. .:.L...._...e3.@d+. .ac..s+.E1.m....@.Q.....G..m5Z......N......L.h+#..V.2?..#...y...t...j...T.............._=T..9+.....i.&(..!)....+F...b..>7#..UV.q....6].....\W.bN.A9.G....:.6..K..*...0Uc.#.......$7{L.R.i.!/.:...../.k)..?j~......#M.:>.....G.R....c..bD`.g..~.\r.[v....\..]....b0.X...aYnWS.=....w<uG....9.T{'H[.E#{-U....X.a[...m.Ox.<U7...?....~...

Chrome Cache Entry: 669

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1116
Entropy (8bit):	7.488508359164234
Encrypted:	false
SSDEEP:	24:h0YAlh+bHgasfQk8iTiNeJpP09WxPfk+Amd3Xt56A5c9/:eYGqg90iUUfPAy3d56AM
MD5:	92071BFE197DADC7D6E4CBF61D9F1FD3
SHA1:	1FAA16CADE2C29B9BAF5BA33A18B4B9D5526297C
SHA-256:	37F3C0849FC54B51D5B74BA39DB8E8A6F0C647552BB94B3E4E40CC622D224C0D
SHA-512:	AF55FADE212C44263AECD2F1588037824D65B7499B61637782533A2EB9FE580D7DAA380FB54CDF10BD0EE5DFCA5DFC9F3D86BBB0562331A283903FBD231C19D7
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F05264ae0-2b91-11eb-b77b-425c560e375a&client=76f99bdb8f78cd44cc0b&signature=105afc7a48dc8079c60c5060c13a01867cea77cc
Preview:	......JFIF..........................................................&....&,%#%,5//5C?CWWu.............................................$ $.5--5@99@QMQjj....... . .................................................................!1Aaq.2.$QR.....................................................!1Q"A#2q...%Rr.a............?....:.k.;m..[..... O..b.B...~.e.{.-.Z.....#x....OWr.................R7..$...4Jq.j..hV.WU..L?....V.)^....H...X..p.Pt=..Ks..T9.x.a.3mQ.f........t=q.... .`SGX.+.u.tY.y.......G.\|.7.w.."x.j.t........M.<..4....;..U!~......._.../.GSw.(...O..u9~\.F...Yt.=.SQ<4..<.-\3...O=./....w$/.2..Nu..SF$..rM....h.[...}..Ws.C...H.j..S_....H..w9p.V.....E=.S....2Yo...d$/`{j;:....:..$l......r......u?..ke.K_.h(..L.xW....8.R...d;V...X...Jn....-4...?...D\|....>=.._.......z......RS.d..&..@.Q.c.b....Q...<zz........t...O...5...V..Yv...Z.W_*$.....F....<)...p.\..].o.p....U.~F.......-m.,u..z,.;.\|.....R.q...ww...`.....C....Yb.Zn...J.y`.I.^b.......e......}.....j..;q.C"I.

Chrome Cache Entry: 670

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	7.596436994244262
Encrypted:	false
SSDEEP:	24:ztFE6xOVjRJk9jkSupGnPEbcD8To8ZQVxLdWjfXGWV7MEa2m:ztC3Rqj+pGPOcD8fSV+jfXGWBCV
MD5:	F721CF57548E40CB0F7E8ED0934CF1F1
SHA1:	2CF8D835FDB58A658B9074DCCB89CA66D52E9B2C
SHA-256:	6BD7C68C3A96C7ED2357B8072C073D55175FFF2748D62AC50B6B8B76286BD486
SHA-512:	7E34D1C7BAA68C5D2D8DF1329F2ECF1F2ECCD49E46360835313F64457A07160570CD7B5E77DF05AA1246920E253857464C3656EC7D41ADFF545959A36E5ED879
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=ac1c86f1c864869accf8544da530e03be9b801e8
Preview:	......JFIF.......................................................... .... %...%-))-969KKd......................................!...!.1&""&18/-/8D==DVQVpp....... . .............~...................................................!#..$1BQar................................................!.."1AQa2Bq...#............?.t.}.....G2=.m..b.\|K`.....t..4....lg.rhrH.\..@.......d.ooc......M..":1...(.g...3.%.?.4..n..$.....X.F.f..8..f....n&NA9.ug....8...N.0...>....p...>3M.n..u+bv.Zb..E.-~k.... b.....V../..v...jv).a\a..P..N.r..e.O.2..l.V5,e...Q.......I..E..{..5.'.,i`K.lg.[....P.w.....s.a.K..r.....i....Y.....s.J..T...5...S..wn$..v..K..Z...-.K.....A62.N`B..G............9<.'./.'Pe...d....L.O...Sv8...{.P.d."...H.X.B..=....Y.m....H...$%fI6.N2.n.o/.}.a..,IC.f.4}.a...$.+.FzFK..cA-... !..y.......X,.x....9...\|.v-z..LC....W.:B.XA...y....@`:.76....py..<..;h...i...0....u#.....[zX.;....J].\..9..!#.... n.2.....~..X...\..6p=..j.+.]....x.`F.....M8...A(%*..1...........Y.:h7.01.......

Chrome Cache Entry: 671

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2074), with no line terminators
Category:	downloaded
Size (bytes):	2074
Entropy (8bit):	5.260719431857589
Encrypted:	false
SSDEEP:	48:CEUG4rNVxugJTY7rRKLNqpH7q7HwDOq7br2yOuQ6qh:CdrNV0gVWvbq7eOq72yOdh
MD5:	93D5BB91C9A48C4EDBC164A65354B00C
SHA1:	EA8D8A5F20B4061A7581135B465F7D81F431390C
SHA-256:	E17075CF2F747253CB3C737891BE0F417B8F4330DDAB9D53013BDD4EBCA568EE
SHA-512:	3F0F5D520F75A443304ED277F73F050698029942A1A01B9B65A8F0D38846B7DFA04D126685A75436BC3534D94DD0C9B1BCCC6DB2C628C58FF74453FA92FD9D22
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/ifs.js
Preview:	!function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)},f=function e(t,i,o,a){if(c){r[++d]=a;var u={namespace:n,id:d,action:t,key:i,value:o};return c&&c.contentWindow&&c.contentWindow.postMessage(JSON.stringify(u),"*"),u}},l=function n(e){for(var t="".concat(e,"="),i=document.cookie.split(";"),o=0;o<i.length;o++){for(var r=i[o];" "===r.charAt(0);)r=r.substring(1);if(0===r.indexOf(t))return r.substring(t.length,r.length)}return""},g=function n(e,t,i){return f("append",e,t,i)},p=function n(t){if(t&&"string"==typeof t&&-1!==t.indexOf(e)){var i=new Image;return i.src="".concat(a,"//trc.taboola.com/sg/taboola-ifs/1/um/?uils=").concat(encodeURIComponent(t)),i}},m=function n(e){if(e&&e.success){if(e.wasAppended&&e.value)return p(e.value)}else window.__trcDebug&&window.__trcDebug("ifsDebug=".conc

Chrome Cache Entry: 672

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 348 x 306, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14835
Entropy (8bit):	7.954001043786994
Encrypted:	false
SSDEEP:	384:gEqF3cONAG6VBnj+PKWQ6g9ixMO6pCnMGAq0M+/o3:ydcoF63j+izwDnMGR0M+/m
MD5:	530BCB090A875C0F904C395456A90B43
SHA1:	136F8117B89320679380320668FD69F5331DE8D7
SHA-256:	2D11F8B1A72D1D9AECE3A6DDA3FD06F48ED5131CF15EEF6D9046FD3F94663EA5
SHA-512:	0A88F05E1B3BCA7672E2C52FD7BAFB852902D17DE0835BB933958AA3B1295664BD46C66619FA883246E98914F1AE148AA31C23FCF6B7FEC00B61750E0EAB1407
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png
Preview:	.PNG........IHDR...\...2.......h...9.IDATx.._...u.OU.eK..-..%.%..J2......T....V.....4.6A...B.x.{A.I`x..E.X...H....G....E.@"ee...(.U4$..g8......s....T.[].].]]...fw.[].....w.=.!.f...~?....(^..+$rB...#.f5.....-.!.Z..m..#,.~...rNF..I./h..\.j\|.....Gi..uO..kO..-.G...e....;L...;.....@....V../.......g..........Z..........z........Y .Z....K..b{.j.H....0E.....A~.'&g)K.......g{..^@..&...L..?.....%.K"....6.r.Jsx....&.....D..l..O3.D..3.@.....jEE.,.....p.L\|...Z...ZH....1E+......vX..50.s%..?..w..m.b.:H....+..=p. ...............\...?'.s{..%p.).e.M.=...O.u).X.9.&.#.=i.].rN.#........\.n&....\|.:..q.....$.,...8.e.d..Zg!....=.EKN"...D.....i....<ZH..}..U~...}.u.a\|.u....Y.X[..^IHj....&VHr.T.BP(.T......X......88,..=2.6C:.v.....UF.>E.MF.."..C..J..../.........Cg...\|.G..p....5...o.L.\|.]..m..l1.W...}..`..J".g..Sm.Y.....".X.H>...k..I..@..7..z,......o..O}..7.............N.t{,.sd/..g<....&:b.8..u......(%.[.D..F.....g..J.....N~..2..C.~....7M]....Q-.H,2.3]..<#./.]0@.........

Chrome Cache Entry: 673

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4554
Entropy (8bit):	4.61581982544064
Encrypted:	false
SSDEEP:	96:GR7IX8Qj1CfMYSsR5ZMs0cMI+HJsPG565qANdsz/ttmdIKvawtBWRXc:C7IsQIJTxFZWaR5qANds/t48wrwc
MD5:	AA22084964A4A1B18A96B1448C098B4D
SHA1:	EFF4C9397998BC864D2F2CDB12F28D9CB05B6850
SHA-256:	488571C74C4E4896506507920E5D1F5949FA2CE060CBD42E7759C09BA5E5524F
SHA-512:	AE7BCF153F6B0D0B26D2E8A37ACE1B7096FED9705569CCECBFB909A416C5EE8589CFCE9D65DE823CF0A1456F73C52E9F8EA531D31968BA2D22E2FF86A597BE26
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/ProductCentral/logos/AOLadFreeMail-logo-new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="231px" height="26px" viewBox="0 0 231 26" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 53 (72520) - https://sketchapp.com -->. <title>Artboard</title>. <desc>Created with Sketch.</desc>. <g id="Artboard" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="AOL_AdFreeAolMail" transform="translate(38.000000, 1.000000)" opacity="0">. <g id="Group">. <g>. <g>. <g></g>. </g>. </g>. </g>. </g>. <g id="Shape" transform="translate(2.000000, 1.500000)" fill-rule="nonzero">. <path d="M56.4,21.2 L54.6,21.2 L52.6,16.3 L44.75,16.3 L42.8,21.2 L41,21.2 L47.95,4.25 L49.45,4.25 L56.4,21.2 Z M48.4,7.35 L45.35,14.75 L52.1,14.75 L49.05,7.35 L48.75,6.45 L48.4,7.35 Z" fill="#363636"></path>. <path d="M6

Chrome Cache Entry: 674

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2225
Entropy (8bit):	7.710089969141368
Encrypted:	false
SSDEEP:	48:4DN+uVh/67HJc/ir3s53XI/MNFmkw0+doA/jy+:C/67pc83s53XI/9m+dDj
MD5:	A46E72A8049D91128EFC6CFD99DA2FD9
SHA1:	A438E63A59C794EA28843E851F10AB208BED0132
SHA-256:	90304B45E030D768663C56455DAC4258A7629B388C7CE172687E4D296B33D0DC
SHA-512:	80BBDA605A4CCC91FAF07831738A48FA0C41CBD425ABC80E552B5EF76798AEE60160A9A1F499A4DAF4B94EF28300A912168659F0BB40B25EB7D39EDDBED39595
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCFF0_QHZWgDjeadZBQlLag--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhornets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=69eddfe94a1ed0b365b7c3ed51b1ba0235428ce4
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpLok.............]V.......qm.........................ni.......yv................TM\|.......\|.......pl.zw.......................}.......e`.\|y.kf.^X.gb.id.gb.............c].fa..........sn....kf.......wt.....}.[T.rm..}............`...9/t".c.\|...a.x......`%.fE;\|..b.<s4)p.W~0%m.Gw. fxp.<2paX../m8/n..a.....a.....d+"hJBw....#h+ j#.c..e.n.pi..,k...}v...........NE....6+q...<1v-"l....g.d]..w..P{.7pPHz.(j...).i.Hx.z..e..;rB9s.....b.......?tjb.....'i.9q...QI{.Jxrk..m..Mz?5x.......d..Ky.4o.k...!.d.]........LB...c...J@.zs.......XN.............rj..6p.a.UN}._.G?v.......S\|ZT.....i.F>u.~.>.....p.....G>}...I..nf....4l....)j......@8r...8.n.\|..~.]U....^V.......2(o0%j[R.T..)c.tm....`.......&#h"..1'j...5+mMFy.p....@6y...JP..Ly.T}SY..v.QJ{".d.....TK.....w..x..3n...........Wf....tRNS..6..&..9..D.[f` x.../..........r.R..*?.3.....................l..................................................................................................................

Chrome Cache Entry: 675

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 676

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 677

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26895), with no line terminators
Category:	downloaded
Size (bytes):	26895
Entropy (8bit):	5.30832063472068
Encrypted:	false
SSDEEP:	384:ydepTjJ4n/kMLdf2HA7r3sUKkQXyylZoixK+2EmiwbikIcYH8vdzo8ClHXiCptlm:ydAb1kAUKkSllf8lzodXtuTK2
MD5:	8155781AB74E51EEE2EAD2C1D5902E63
SHA1:	5679A128CE2702F782C9F3F46D16D95C387B52EE
SHA-256:	F4AE8A2C83E0A851FD331BBF34D7A6F9184B3E31B6F2E681E8377FB8A8EDC10F
SHA-512:	BDE3D3A037944032E9822E1F538F958A63582B1E6850BCA2B17BF2E8075FADCDAE6056983327D56B98C6B5684CDB3D49DD82CD8046804C2BB7D28E52C22DCB24
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-1167.min.js
Preview:	!function(n,e,t){function r(t,i){if(!e[t]){if(!n[t]){var a="function"==typeof __nr_require&&__nr_require;if(!i&&a)return a(t,!0);if(o)return o(t,!0);throw new Error("Cannot find module '"+t+"'")}var s=e[t]={exports:{}};n[t][0].call(s.exports,function(e){var o=n[t][1][e];return r(o\|\|e)},s,s.exports)}return e[t].exports}for(var o="function"==typeof __nr_require&&__nr_require,i=0;i<t.length;i++)r(t[i]);return r}({1:[function(n,e,t){e.exports=function(n,e){return"addEventListener"in window?window.addEventListener(n,e,!1):"attachEvent"in window?window.attachEvent("on"+n,e):void 0}},{}],2:[function(n,e,t){function r(n,e,t,r,i){l[n]\|\|(l[n]={});var a=l[n][e];return a\|\|(a=l[n][e]={params:t\|\|{}},i&&(a.custom=i)),a.metrics=o(r,a.metrics),a}function o(n,e){return e\|\|(e={count:0}),e.count+=1,f(n,function(n,t){e[n]=i(t,e[n])}),e}function i(n,e){return e?(e&&!e.c&&(e={t:e.t,min:e.t,max:e.t,sos:e.te.t,c:1}),e.c+=1,e.t+=n,e.sos+=nn,n>e.max&&(e.max=n),n<e.min&&(e.min=n),e):{t:n}}function a(n,e){return

Chrome Cache Entry: 678

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4200
Entropy (8bit):	5.214369103140414
Encrypted:	false
SSDEEP:	96:n1sPLkv8Fa4tr8hjIr8EJhWkvHcpOU4r8EzaPScSMUEGQiNI/G8kvinaI:n1sPRQ4tr8hEr8Wh+4r8VNLiN8GIaI
MD5:	2B69355347E119C78D63C4D9AE6951C4
SHA1:	9299CC0C37E1B9F0BCA8F4A2283C0C755A2FCDFF
SHA-256:	4C5BCBC777963EFD53847A7F5FE37330626DD7262F6D45DE326568FDE087F707
SHA-512:	01E59C45A86D3E4E040977B611FFC664A2FD33B3AA6533337A37481BE5CA9323FB38565440605D70C9083DE754706B6D1BF629197C6DE23EE5E1A82CB78C0658
Malicious:	false
Reputation:	low
Preview:	{"data":{"response":{"articles":[{"id":"9554440b-868a-3ce2-8845-c23a5a43da56","contentType":"OFFNET","title":"Celebration of Life for fallen Firefighter Trevor Brown to be held at a Virginia church","description":"","summary":"The ceremony honoring his life will be held at Cornerstone Chapel in Leesburg, Virginia starting at 11 a.m. on Monday. Officials say there are anticipating this to be a very large event, with fire and rescue personnel from all across the region attending.","provider":{"displayName":"wusa9.com","url":"","sourceId":"wusa9.com","logo":null,"imageByType":null},"previewUrl":"https://www.aol.com/m/9554440b-868a-3ce2-8845-c23a5a43da56/celebration-of-life-for.html","canonicalUrl":null,"clickThroughUrl":null,"thumbnail":"https://s.aolcdn.com/images/dims?thumbnail=400%2C225%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F947a2a581181f453dd547910f34e733c&client=76f99bdb8f78cd44cc0b&signature=e8ff0fbbddfb61f8e03dfa2ca4a02dac2b832fd0","isHosted":false,"categoryLabel":"

Chrome Cache Entry: 679

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	5.084962500721158
Encrypted:	false
SSDEEP:	3:YEOBHw4cccMGDe:YEOB2hMGDe
MD5:	A4D4E122734C951F9AA0463DC77BAC08
SHA1:	99A7F450CD219B1E9BB4A4B4009DFA469FEE6579
SHA-256:	63C6C9C73F13D5D923A330EE9F5DD0CF858DFED0BC9FBA4AEE723CA8A79C4466
SHA-512:	A95C03B381F3B85E1E59A2C4D516A90ACBA7C478EFFE902FE8A70EC94C2FFC52E08826F50397816D10DA3E99047B6ED503C5E9315044994C3B937624D9F27127
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A"}

Chrome Cache Entry: 680

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 681

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 682

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2225
Entropy (8bit):	7.710089969141368
Encrypted:	false
SSDEEP:	48:4DN+uVh/67HJc/ir3s53XI/MNFmkw0+doA/jy+:C/67pc83s53XI/9m+dDj
MD5:	A46E72A8049D91128EFC6CFD99DA2FD9
SHA1:	A438E63A59C794EA28843E851F10AB208BED0132
SHA-256:	90304B45E030D768663C56455DAC4258A7629B388C7CE172687E4D296B33D0DC
SHA-512:	80BBDA605A4CCC91FAF07831738A48FA0C41CBD425ABC80E552B5EF76798AEE60160A9A1F499A4DAF4B94EF28300A912168659F0BB40B25EB7D39EDDBED39595
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpLok.............]V.......qm.........................ni.......yv................TM\|.......\|.......pl.zw.......................}.......e`.\|y.kf.^X.gb.id.gb.............c].fa..........sn....kf.......wt.....}.[T.rm..}............`...9/t".c.\|...a.x......`%.fE;\|..b.<s4)p.W~0%m.Gw. fxp.<2paX../m8/n..a.....a.....d+"hJBw....#h+ j#.c..e.n.pi..,k...}v...........NE....6+q...<1v-"l....g.d]..w..P{.7pPHz.(j...).i.Hx.z..e..;rB9s.....b.......?tjb.....'i.9q...QI{.Jxrk..m..Mz?5x.......d..Ky.4o.k...!.d.]........LB...c...J@.zs.......XN.............rj..6p.a.UN}._.G?v.......S\|ZT.....i.F>u.~.>.....p.....G>}...I..nf....4l....)j......@8r...8.n.\|..~.]U....^V.......2(o0%j[R.T..)c.tm....`.......&#h"..1'j...5+mMFy.p....@6y...JP..Ly.T}SY..v.QJ{".d.....TK.....w..x..3n...........Wf....tRNS..6..&..9..D.[f` x.../..........r.R..*?.3.....................l..................................................................................................................

Chrome Cache Entry: 684

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1727
Entropy (8bit):	7.841642834649501
Encrypted:	false
SSDEEP:	48:neqelHLIHEOuwXcmPqGrdiGaasVuyt3mfcNDXFBgdS:ndelHoDfrTtsVzycBFBgo
MD5:	999D1B3FF54C1BE003B5178BC20314A7
SHA1:	A707A9D53C0F4D81CD529BDC5BD3E25AD87BEE1C
SHA-256:	BF6625A8DEAABA65EBC070FF4E4FD6BC4900DD2C044369462DFB8DC137E41AA6
SHA-512:	CEFAC1A4B571BAB2AB927F4D46E1C67FE24DF2FB9AFDCBF09F4B919054AF451BA93309DD166796F909F231FF18ADD41F2994A7FA2655F2DD0F9D890F1E243DFF
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6sD.zWqcBkR1AuMMt3SD7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpistons_wbg.png&client=76f99bdb8f78cd44cc0b&signature=892e3f77c39c570076c33bd3d17c3a3d077eaff1
Preview:	.PNG........IHDR...2...2.....).x....7PLTEGpL...........................{......................................................B........?W...8..@X.+F....p...0..j\|.)D..1....Ja.\|.Ga.\q.:X.......Le.......$G.j.....Qm....Ph."F.%H....>[.^s.f~.....B.......C`.....\|.. D......6O....(C.h{.Lb..2......E.....t.....,G.y.....Pf..........">.gz..4............5....Yn....4M...........H.$@.....=].>]...F].H_.bv..............Vl../..:.....Xm....x........(C.&A. <..6...../I.;T.<T.....Mc...BZ..=V.5N..r.....w.....3M.7P.l~......9R..Vk..l......\p....CZ._s.ex....n..]r..\..W....tRNS..!..E..........m..N......0.n.....IDATH..g[ZK...Db.=.a.....0.hT4..A# `.5jP....bzT...S..r{.?...<(.0.............G.R.)..qq..)..$.g.@brZu...KNTU.%'..$..._^!.....@d.<A..K...L....\),((,..........w-....xK..\~.8....&...w.....J.+C.x$..J_YSKW....E.<F.O..]..{..u.....~Lt..hl...{..JC......V.nR.A@.R7....9....-......^.J;.;../.(MtN.E...."#....o.....'.w.....t...O.h&..o.M.o

Chrome Cache Entry: 685

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16218
Entropy (8bit):	6.016593537652323
Encrypted:	false
SSDEEP:	384:5ncgXoazuIVEwN6lVHgoLFIT6a9l7My6Vhfyc+pMD8VJR9fCYw:GgJiGEwN6HHNs9l7Mhfy/uD4R96z
MD5:	D97C17AF507059BDC8EF883072BC987E
SHA1:	D5AF76F0C03F2780084DAA57949ACE93CCFE2FF6
SHA-256:	4B41BEBF699916FBD5BC5F0B8BAFB3502C0DE613E65AB3873265BD963AC8A474
SHA-512:	F293CD2CE9FAF690B98C4C9D016142C8E0AA3E5891D37DFA70B2C87ED02F31D0F03D1D51E262C889498F23962175A7723CC009BEE009A2577BFB22D320023B66
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"TwflZaPcKd2o2OMPx7e3qAI","injector_basename":"sodar2","bg_hash_basename":"hhT7r2j7IM84IjrHPq4DliozylkjplqSUN38T7c3Pqk","bg_binary":"rCbrPbiO3cq0WZ2TAvaDM2V9n0U7Q8GVIR8GUAoH/W1IcxxuSOcxtzd2Lnm5BBAMSB0i0KNThhxJbSo05OI5nwL60R49p2TKFxylkVkg7PwcVMb4/aTePmqhYGpR2trXhmiymMRx/ELvXApuFiSPxcZw+K3uAtvHiCuJgDM+iyrG8agdIcTHilTZXrHf+KSTGC6T7Yic3v8VtySBLPGbzajVrzvCjEGIPAfaXBBAvLks9Zt+oo7O7k5BUezUsX+zrjyW8Z+goXUxo4LS5dpAEXsz1DsEIkxdJtzBqNJiDWcwub6MauMuZrOzoaRUY2qmUhFAaXGPv9kGeNKAjScycelS+swiCGP8xoj415ortEzI76LQ5SBRkGVSkf9DcuVNJazCSrdj0ya7qlJq5vJqdGCuwk/8G9focFQv/GMmT+cuTJDzo3/tjK2zWvOk80hPHwQdC0Q0mzuCqU8yDsnSVqYxk2VwF/GqitX8v9nC8I/Q+N494dNWtUrsEsIHRylBnSgy0kIhBDnVUtgzaxtQiWnptzPAk7fquBmHvFpLip4oSaNx/nLXea60AXgQ5vj2nxD59qVaRpBrNeSd2etuohPxhCi9YjddmDKg/wj7F/FzE55TXpgM4xpMmB4ZI0cksO7gl6TYzemvyHGIm/vUeljhSQUIoz6SSwxue6Wft28k/6aE5n+ERLsGr2mchsrXgqocPJ4nbhPKRUHs4MYa70rNsDxjCQRLWjg07AAZWC+637Oaqoh/AtC+DosHMm4Z5JDKlUviuRqCn5AABz+iqJMugGQmbmRfE1eiOU0bwH2NPsg7NTEsfq7FiS9FpCGUbkoY4hteVj0Zo8KgE

Chrome Cache Entry: 686

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2425), with no line terminators
Category:	downloaded
Size (bytes):	2425
Entropy (8bit):	5.6749070412774465
Encrypted:	false
SSDEEP:	48:CcOS3DdjKS3DdgS3Dd2S3Dk/agmMJOBtsGJda0BBNCC8t5n5lSMqB0Qecq:ClYd2YdgYd2YcvgsyI88tbtDcq
MD5:	26D1431BA594396D52B347936E0D7446
SHA1:	1970503F353561CD9DA793B3D92CF430BC8B35DE
SHA-256:	38160B98BDFCDFAB4F9BD4D3DE7B9FFBABC061FE136343205FDACD0729E2F254
SHA-512:	E0FC32622AD32C7ACEC5E1DDA9D3C063AAC1E4CA3F567A20A9AE4858C82F395C0B2603B8D1D2F9CFDD7DFD64F813998A8177FC1B74C5F9ECF2AF64A3F891C898
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=32039267&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID');PubMatic.loadAsyncImagePixel('https://c1.adform.net/serving/

Chrome Cache Entry: 687

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39556, version 1.0
Category:	downloaded
Size (bytes):	39556
Entropy (8bit):	7.994365010599843
Encrypted:	true
SSDEEP:	768:KIPqKTvPJmnf2eE9UAZWjtnZoyChhyfFrCgRJnpW4WdeON3A:KmZnJbdiHWRQ
MD5:	E92E9C8CAAF29C4446167F6F01A78E96
SHA1:	31AA8716B886B57EB918D3F89502A438B926AD6F
SHA-256:	A83C3F260B750DFC47E4E5024EDA4B4F80BE0C0A3E0AE5111A3B0A799DF64448
SHA-512:	8AC8892E82090675DB74EEBBA6FD767B648E1E6CCE0015AD3EC2450F7F67675344DB07395C66B6009677C4AB6D74EAEEB3A4B7266DA0460816C7D5645BB26BF1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/fonts/opensans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2
Preview:	wOF2...............\|.............................b. ..P?HVAR.x.`?STAT.$'..../V.....X.u....0....6.$..8. ..~. ....S....6.....mf.+.".8...9?2.l.@.`6..?..!c... ...&..v<B...j....F.Qz. .I.K..q..V....3z...r..h...?J..+.`N.w...U.$O...Q\|F..6.(..o..........W..;..Yl.u.$e..p...C...9..%".D A.$X.......W.:k)...8k;.vc.bt+.."..@..yr..........nA,.......j.sfi.......G_..1...lc..D.aL.&..p.D..sw.N\qU.........m.....2.....0..... .3.!.Q@B.....?.$F.IB.@...P.......3...5.tTP?^.x'0.._.....v.D1q..H..j6..H.!.....9..O.'v.B.kN..)N..<........\6..J.4..$<.~\|%..e.n......A!..Y..8.).....)...".N......$...&........#.....e,.P'a...g[..q...F..x?+.^Ul.3F... .&3<m..of.h.U..k.........T.D.$Z.H...w..s....JkZ....NH.H..n...#....._..c.;...6D.Z#uB......J..S...).W...C..........m..-.J.....`."......@.....R-.U..P..l..{ksqcQrhI.W...H.t....F....U...k..L..v..RS..y.H.@j.8....v... .....I..B..jc:9.......w.}...M.2.....E..G..{=..X...x.c..D.]...u...l.=bJ.p..'. .?Y....;c....u.--..1R..r..alz...f..T......`.].l.

Chrome Cache Entry: 688

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	201920
Entropy (8bit):	7.999143414466546
Encrypted:	true
SSDEEP:	3072:1ybEPMu1B6VJ0I7R5ltF5qgnxFuKuC0bTyWOcLy50qo/7SgTMtrPBg3GKfjCXk8I:1TFuHldy+EuApqo+btruNfj+jM
MD5:	80BB6EB1BD83A1741461B24C97E04182
SHA1:	4181E543043AE60BACA2D2B2EBDF68A3C52E6B65
SHA-256:	382FA70B7B580930C1EE8F41A259D3B5460CA6BC33C16C73041B591365AF9AAE
SHA-512:	09A46CBE058D80443863D0BF9DD259A55DD4AE086BB9E8282E4C3B5281CFA98ED18D026A75FF840EFFB8D17F30CB3E89EE44A37C8C2879CB2CE9E70CE8F0CC5F
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment0.ts?akamai_token=exp=1709530992~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=7534bc794ac65c76a4c3cd4d86ac72de97dc36896cc1e4fb92e407fe51e1d398
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|..`...../9..j..wUw..q.&8..w.......c13.S..qA R...........-..."..#..PPF......L..%.!..P.T.........npp..f0......E..#..S..".X.........^....2..`.Tz..4.m.j..\7......u~...T.....1a.M.:P....c.n........{...N_51?I..5.....b~A.....m#.9...ky.+..Zv...fn5.l2.ub.}...?ek{.v.uqE.F..Jm..o..%..3.8\U@.<.HP"....;...ma...y..c~.gK.?4..7v..u..3.....gom<1.o..t.......eO.......`+....5..1.H..]....%.t..D.d..MbG.i.{..3..6^...#.pA....c...U....q6L.....R..b.....,{.m...g...N.e..AD......O6..vk...I......2U]...R{*........-b....._....X2..JP..^.9g.d....\..G..(...K......vwR....].{2.d....@.6H.. ;.xjA.y.....IX..Y.A.PS..]x.o.YBW'.YK....

Chrome Cache Entry: 689

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4627)
Category:	downloaded
Size (bytes):	4628
Entropy (8bit):	5.208752554575453
Encrypted:	false
SSDEEP:	96:BImIY2oDo1cGmwekI55l+2XGFRtm3Payw:BImf7fw3I55lBWU3Payw
MD5:	857D1A718F7AEB43B03B79B7CF3CB0DA
SHA1:	28D87C8738D868A13F6067BF20EA136AE028C4DB
SHA-256:	64274E15AAABEFDE05A780997FF204A5E45A6B540F0E8A0404C6E7EC20305D99
SHA-512:	C9341D0B2DEEE917D36FB393F5F1B28AA99EA829B962203467418329FAF5873F0039FC69E312E8E619DD017F7999CAA85829591DAD9A7C74C4AD3681D3E18183
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/pv/perf-vitals_2.1.1.js
Preview:	!function(){"use strict";var e=function(e,t){return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12)}},t=function(e,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){if("first-input"===e&&!("PerformanceEventTiming"in self))return;var n=new PerformanceObserver((function(e){return e.getEntries().map(t)}));return n.observe({type:e,buffered:!0}),n}}catch(e){}},n=function(e,t){var n=function n(i){"pagehide"!==i.type&&"hidden"!==document.visibilityState\|\|(e(i),t&&(removeEventListener("visibilitychange",n,!0),removeEventListener("pagehide",n,!0)))};addEventListener("visibilitychange",n,!0),addEventListener("pagehide",n,!0)},i=function(e){addEventListener("pageshow",(function(t){t.persisted&&e(t)}),!0)},a=function(e,t,n){var i;return function(a){t.value>=0&&(a\|\|n)&&(t.delta=t.value-(i\|\|0),(t.delta\|\|void 0===i)&&(i=t.value,e(t)))}},r=-1,o=function(){n((function(e){var t=e.timeStamp;r=t}),!0)},s=func

Chrome Cache Entry: 690

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5778
Entropy (8bit):	4.0305539921544815
Encrypted:	false
SSDEEP:	96:avfqh2eGTBoaX4wBPFU2e419aj28g8iHNkR+uX2a5hJcNP2c6DzKV3t6Ueu5DErI:yqh14BohwBPg419AMHaYufJckc6qV3QK
MD5:	0F121237872CCB64CF52B3C4A2405745
SHA1:	0675A14DB97BDC8287FE23ECC67505FAAFAB402A
SHA-256:	DEBF3438D86E63280DDBE393891CE01DE87157C80DE51F3766B462A792CCFE44
SHA-512:	3E7C529D9171556943BC29FE7DCDAD4F18D8544D5B1D04C923DE99F1CAA02991CABBF99404335DAD72F4E6A4D7E9BD96C909D2B8C9F7676BCB66EA11AB05C478
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 85 12" style="enable-background:new 0 0 85 12;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#A9B1B9;}.</style>.<path class="st0" d="M11.2,3L9.4,2.6L9,0.8L7.3,1.4L6,0L4.8,1.4L3,0.8L2.6,2.6L0.8,3l0.6,1.8L0,6l1.4,1.2L0.8,9l1.8,0.4L3,11.2..l1.8-0.6L6,12l1.2-1.4l1.8,0.6l0.4-1.8L11.3,9l-0.6-1.8L12.1,6l-1.4-1.2L11.2,3L11.2,3z M6,1.8C3.7,1.8,1.8,3.7,1.8,6..s1.9,4.2,4.2,4.2s4.2-1.9,4.2-4.2S8.3,1.8,6,1.8z M3.4,3.4C4.8,2,7.2,2,8.7,3.4c1.5,1.4,1.5,3.8,0,5.2c-1.5,1.4-3.8,1.4-5.3,0..C1.9,7.2,1.9,4.9,3.4,3.4 M38.8,4.1v3.2c0,0.6-0.1,1.1-0.3,1.3c-0.2,0.3-0.5,0.4-0.9,0.4c-0.4,0-0.6-0.1-0.8-0.4..c-0.1-0.2-0.2-0.6-0.2-1.1V4.1H35v3.7c0,0.4,0,0.7,0.1,1c0.1,0.3,0.2,0.6,0.3,0.8c0.2,0.2,0.4,0

Chrome Cache Entry: 691

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7175)
Category:	downloaded
Size (bytes):	7218
Entropy (8bit):	5.267880351052856
Encrypted:	false
SSDEEP:	96:3h4CW67adBlLbkwCp4DScH95qQsAYK7wT4ACNa8Chk4bnPVLUGZpTl7wzfrcvYOX:3z+P/BCpJm5GAYK8EAiVCh9bnPhXzLX
MD5:	A077410E98AE768976C06F12883E53D6
SHA1:	E2FE31759E13637A4E5CA6DD6E92B1749F6CFE20
SHA-256:	52976F8937E5F2AA3AF2B17404A347DCB4722A0ABE3BF4F492342C17F04AA1A3
SHA-512:	D63EF6768C6B0A8AF63405035F6B5B8EC16B2EF3DACD179A63BFD144A000747B8B9450874BC7B9F8DDDF87988A2625CD07C80037E06DB1D2551E2600EB2937F2
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/finance_banner.a077410e98ae7689.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e,t={9356:function(e){function t(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}var n={rapidInit:"rapid:init"};e.exports={events:n,rapidReady:function(e){window.rapidInstance?e(window.rapidInstance):document.addEventListener(n.rapidInit,(function(){e(window.rapidInstance)}),{passive:!0,once:!0})},ylkStringToObj:function(){var e=["itc","cpos","pos"];return(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"").split(";").filter(Boolean).reduce((function(n,r){var i,o,a=(i=r.split(":"),o=2,function(e){if(Array.isArray(e))return e}(i)\|\|function(e,t){var n=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=n){var r,i,o,a,u=[],c=!0,l=!1;try{if(o=(n=n.call

Chrome Cache Entry: 692

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1926), with no line terminators
Category:	downloaded
Size (bytes):	1926
Entropy (8bit):	5.170716383595185
Encrypted:	false
SSDEEP:	48:cnx3U5etD0kdW1V8wV9zO+s+JbLo1nDCsMIz+kP:cnxf2V/V9z4+1LolGTq+Q
MD5:	3E53667C2A5A713FBD3BF11E4D92D6EE
SHA1:	F181F27355E62701200CB78FF75D7CB665AC4FBB
SHA-256:	0755270477FB2C390A79BD63FE18C6DBD8B910A54D7419CD039AF91D97607D1C
SHA-512:	99C09634AF32913D5FD771F10BDDC43EE38E54E14D085048499D8DCF3867798416EAC14F4E6801EBB7ABBA1EC611FE9A2DF2C53AEE11E83D7782515783BF6A42
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/benefits.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.benefits=function(n){"use strict";function t(n,t){var e="function"==typeof Symbol&&n[Symbol.iterator];if(!e)return n;var i,o,r=e.call(n),c=[];try{for(;(void 0===t\|\|t-- >0)&&!(i=r.next()).done;)c.push(i.value)}catch(n){o={error:n}}finally{try{i&&!i.done&&(e=r.return)&&e.call(r)}finally{if(o)throw o.error}}return c}function e(n,t,e){if(e\|\|2===arguments.length)for(var i,o=0,r=t.length;o<r;o++)!i&&o in t\|\|(i\|\|(i=Array.prototype.slice.call(t,0,o)),i[o]=t[o]);return n.concat(i\|\|Array.prototype.slice.call(t))}function i(){for(var i,o=[],r=0;r<arguments.length;r++)o[r]=arguments[r];n.store.debug&&(i=n.logger.tag("benefits")).info.apply(i,e([],t(o),!1))}function o(n,t){void 0!==t&&(n.innerHTML=t)}function r(t,e){n.dom.applyFunction("".concat(t," .benefits__desc"),(function(n){return o(n,e.desc)}))}return n.store.once("PAGE_LOADED",(function(){i("Handling %s event","PAGE_LOADED");try{n.dom.applyFunction(".benefits",(function(t){var e=t.parentElement.id;e&&n.r

Chrome Cache Entry: 693

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvavRBUmjm-48vag0WYZinDGAY_aY4Te4oKfMPDqb10Gy9-QHAzSQx1Cz7rqxsPHS_ccqBAHw6A2dR6wTl9cEdtSmywTqYZb27mmnjWgy7q29nZykUYRJYPACmpVQ52vKRbMcNKkWI&sig=Cg0ArKJSzOyqb9kCtvFDEAE&id=lidar2&mcvt=1054&p=120,855,370,1155&mtos=1054,1054,1054,1054,1054&tos=1054,0,0,0,0&v=20240229&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3459255604&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=544120600&rst=1709508402844&rpt=7209&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 694

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4879), with no line terminators
Category:	downloaded
Size (bytes):	4879
Entropy (8bit):	5.441854327036334
Encrypted:	false
SSDEEP:	96:cpa3GgK3+Fp+tKgMXCcmCZk1gDoS3lx36pvG+QVLGh+77dlW/nxGyss5:cE3GgKuFstKgMyMk1gF3KdG+yu+76nxJ
MD5:	1C2F8EFB7D84787B1E275CD09D52F71B
SHA1:	7CE3E64D242F003409823034821EC3EF8184646D
SHA-256:	99CCB0B1E65E8D81C7E179625DCC70018B6CCCE08E18A943F7625F017A10847F
SHA-512:	CC045B5F9A046836E1DD72BA39880C17DBBD258965F1FFD54B1C9CCA15C37CA2099AE9AD8F7BCF56562039A053B4CD310B61F4C73A56131AAAC8CC614090E33A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/footer.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.footer=function(e){"use strict";function t(e,t){var r="function"==typeof Symbol&&e[Symbol.iterator];if(!r)return e;var o,n,i=r.call(e),l=[];try{for(;(void 0===t\|\|t-- >0)&&!(o=i.next()).done;)l.push(o.value)}catch(e){n={error:e}}finally{try{o&&!o.done&&(r=i.return)&&r.call(i)}finally{if(n)throw n.error}}return l}function r(e,t,r){if(r\|\|2===arguments.length)for(var o,n=0,i=t.length;n<i;n++)!o&&n in t\|\|(o\|\|(o=Array.prototype.slice.call(t,0,n)),o[n]=t[n]);return e.concat(o\|\|Array.prototype.slice.call(t))}function o(){for(var o,n=[],i=0;i<arguments.length;i++)n[i]=arguments[i];e.store.debug&&(o=e.logger.tag("footer")).info.apply(o,r([],t(n),!1))}function n(){o("Handling %s event","USER_DATA");try{e.rapid.initializeViewabilityTracking("#footer","footer"),e.rapid.initializeViewabilityTracking(".tpl-footer","footer")}catch(e){o(e)}}return e.store.once("PAGE_LOADED",n),e.store.once("PAGE_LOADED",(function(){var t=e.dom.getElement(".footer__disclaimer");if(e.

Chrome Cache Entry: 695

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1999
Entropy (8bit):	7.198267211328256
Encrypted:	false
SSDEEP:	48:zteE3rXjKOYdksjhQAs6BjZ4dfkhlUhfNiOf:zs4/tSksjhpBjXhuB4Of
MD5:	C7FE143394F0CA830DA15BD381FD532E
SHA1:	1480723474B0E5B59E7DC567F51C0ECC97AE025C
SHA-256:	2C99D58BC873746D6F5EA997CECD3FC7E4E974C432033D8E9DBBDA0DFF685100
SHA-512:	0F4B5043E2176259C551BE359B5EF926D804515B9D22D119B41381E8D858417222242053066A10E031883E4F16D21DCE60FDD11B4C2A1C5B2CE7894123907F5F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FMHkI0ocTdEcipo8RUUVItA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhawks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2c0289aeb083f0491025b87ca62a5aa4ef58a39e
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................................................................................................................................................................................:>..........;?.<@.BF.?C.X[.CG.^a..........ad....DH..sv.tw....NR.........kn.WZ.Y].hk..........FJ....................GK....PS....^a.rt.z}.HL....JN..RV....LP.TW...dg...=A.......=A.nq.................................OS.AE.}...............]`.PT.@D............`d............\_......or..............eh.....x{..............TX.fi.......UY..........>B.wy.tv...........[_......ps..............mp.uw....gkjg)h...htRNS............L... .....a.........p..%..;.39l..[..........k.....x.B.~C/d.E..{+..].."..R..........W.Y1.6......IDAT.....@.w......].[g.v......~...Nu.:g` *6.n@E.....p.......qx.#

Chrome Cache Entry: 696

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 697

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1920
Entropy (8bit):	7.759003138160018
Encrypted:	false
SSDEEP:	48:5VCBwNRi4frMQuawTKBGhXDkraUR1UPujALsqps7mNe0:5VCBwfTOTtXA5R0L1ImNe0
MD5:	734C0F53F0BC346A49492A12A8817A12
SHA1:	C97A137828004AC677A9A61D414FB1C2C1633F6F
SHA-256:	54EFDBA33B834BE22B80F642413CD3722E046CE70C05CA40875462BD2A75DD3A
SHA-512:	64F83D4389D957972AFB0801C019EF11ABF1909C4B4B3BBDC56A261CAD177F341CA5EFACAE3C9FD3157B40065E431BF03A574D8FD4FDE87D0E26DA7B610D8183
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................................................................................................mfo...........................................................................~.......................A....."..7..@..6..>..6..:y.4..<..=..8..@..5..8..7..=..A.."..?..<..9..>..=..9..7..8.;WV..~.5..?..:..;D.,.!A.8S..@....:..#[./.."..:b.0L.-........;...Qh......_s..;.....?...Ia..?5.).Mam.2&.'r.3..;?...$.Od..%.as.,J.........................A\.D\....?...>W...i.1,.(\%;.$FD"4.jz_.0r}..5RVdjg!;.dw\|=Tu.3.s~.1N.&E.p..Pf.bt.G_.Ym...Pf....z....}.....x.......s.MV].....?.!@A1?Q..~3L.{.....av...5QT-?...')4.gz\|]lg.1.<Y.ct0.).F_lx}.Zk.4R......uI[ET[f.3r.F2CJ.3L.s...JY"8P,>{E.@W=....._tRNS.*N.b...gp`'...m..2V.Yx07..B.;.......?.....fF...t.^..H....R.... ...................=.!..............IDAT....et.W.......{.................w....s....sW ..%...=....8..).X.

Chrome Cache Entry: 698

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.3125
Encrypted:	false
SSDEEP:	3:HpMyp0KthR42YY:OQzfYY
MD5:	0F9A4170D81655DFC80EF2F0E14EB103
SHA1:	B088391A82CE18146A5A5836D218863589DBE3D2
SHA-256:	D464CBA01864CDD2CFFB7A1AD8B161C8BC1D9110C67809296F566F1C17F89742
SHA-512:	3A23CBF51B97BD0E8A5194061A63CBA5478D54879A7DCE5A725AFE9BE14CACAD4D17ABF3F9ECA92960E389EC96EB141BA12CEFED61A22BAF30ABE0FC1CBA147E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAniJWOfP6gwyhIFDeeNQA4SEAkMUWkV477X7hIFDc5BTHo=?alt=proto
Preview:	CgkKBw3njUAOGgAKCQoHDc5BTHoaAA==

Chrome Cache Entry: 699

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55836)
Category:	downloaded
Size (bytes):	55879
Entropy (8bit):	5.296345562699049
Encrypted:	false
SSDEEP:	768:oG5UArcyfyTg/Ey+WJjktTtPCMpcOI03yiINNWGR/Poav9P+Tsi+EPoODaByPn4c:QOA+uplIV/1I+ONbHEUiW3cwLmb1Wp
MD5:	C992EEAAE25373E1F09E28DB96DA126B
SHA1:	95914BC9E079AF832C564166AD4DFD901FAAC9C0
SHA-256:	E7FB58226499122F97DAAC3E9D35811D8C8749AB88196446E9958389201303A0
SHA-512:	ABA84B75635600CFC336E93634FB24F5FE5DF9FE64FD2F649840B900177DD40A5C466B630CE0903D640D082BCE6851D4DA944E813704181498C6E8CA899ACCFA
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/benji/benji-1.0.170.js
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}},t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),i=["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\."))),s=new RegExp(`^https?://(${t.concat(i).join("\|")})(:\\d+)?$`);const n="initialize",o="initialize_ack",r="initialize_i13n",a="intersect",c="render",d="resize_ad",l="start_ads",h="tab_focus",g="index",u=!0,p="bucket",f="cobrand",m="commerceArticleType",b="extractedKeyWords",y="hashtag",_="lang",v="0",E="testid",w="ncid",S="fr",I="pg_name",A="type",k="benji-premium-ad",C="abp";var R,T;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct Sold"}(R\|\|(R={})),function(e){e.AdTech="Ad Tech",e.House="House",e.AdX="AdX",e.Unknown="Unknown"}(T\|\|(T={}));const B={FeaturedBroker:{size:[758,198]},FeaturedBrok

Chrome Cache Entry: 700

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 701

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	32281
Entropy (8bit):	4.5377915994954545
Encrypted:	false
SSDEEP:	768:qt68uqUhC3c7cJTiMmypcocQcBc5cHcZcBcfcick4cr5cQcAcIcRcwc8cfNcjcIW:g6cUhCL3R6zE
MD5:	2BCD33ABCF1D9B53E39084BEF961E404
SHA1:	D03ED6E7B587A9FFEC31D7CE468FEFCC763BC3AC
SHA-256:	1ADDFAE65F5AE5F79529B5D18E1A3AD6BFA2D6C11107725EF2377B4C040119BC
SHA-512:	D32EDA524708E5367B560C48C534847F36C94D2C1E23CD7CC6F74B1F92AE6272785708A275F8A67CB3C381F19564D7406B806F7C32317F9988BC84B3836F2351
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/kj/js/dispatcherWidget.js
Preview:	(function () {. var __extends = (this && this.__extends) \|\| (function () {. var extendStatics = function (d, b) {. extendStatics = Object.setPrototypeOf \|\|. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|. function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };. return extendStatics(d, b);. };. return function (d, b) {. if (typeof b !== "function" && b !== null). throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");. extendStatics(d, b);. function __() { this.constructor = d; }. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());. };. })();. var WidgetMode;. (function (WidgetMode) {. WidgetMode["AutoHide"] = "autoHide";. WidgetMode["Overlay"] = "overlay";. WidgetMode["Stick

Chrome Cache Entry: 702

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	535
Entropy (8bit):	7.383788917574239
Encrypted:	false
SSDEEP:	12:6v/7O9b/bQvkGnBByiwDiWY5y28VR0nbO6KhRtKr2i2v:Ij9RWYQ/UnbbWeiDv
MD5:	491574B00CD8FB418215DEBDB2DCA2C9
SHA1:	86BCC1181EC66F23FD9F9C324154CC5E7863A4DE
SHA-256:	E5BA76000CC58D5157DC91DA69FD9703DE9DC6BF96A973EC44A215984115BD67
SHA-512:	117C3DFC68EF3D217B6AEC527432E541963968AE519D3C0B21323876D66239583DA51689B78A9F62A35DFEE136C6EE633B899B451E056F187DF1F4DE5C8493CB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTEGpLF`.:V..u}7T..5B.....GS....8E.CO..Kd..XeLe..JV....NZ...A[.......\s.^t....w..}......Sa.....-:...#B........"0Yp......)G....1N....q.....'5..Oh.k....aw.y..7T.Hb.......#B...lx...........@[.........gr.Sa.6......tRNS...1.....1.1..............G.n.....IDAT..%..b.0....E.s'!.............._?6...0.}j:.>.W....D.@O.0<....s.....%X.......y.3..6($Fa.I.;.+......'Jp.............l..#.%..pBZ.....a.q..]...T..A."?.....\;.....K.....mV.......u]..1adZ..Uj.0.-.>_.`...G..........IEND.B`.

Chrome Cache Entry: 703

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=10&ns_st_sp=1&ns_st_sc=1&ns_st_psq=5&ns_st_asq=5&ns_st_sq=5&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=9470&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=9470&ns_st_dpt=1649&ns_st_ipt=1649&ns_st_ap=9470&ns_st_dap=1649&ns_st_et=22398&ns_st_det=1649&ns_st_upc=9470&ns_st_dupc=1649&ns_st_iupc=1649&ns_st_upa=9470&ns_st_dupa=1649&ns_st_iupa=1649&ns_st_lpc=9470&ns_st_dlpc=1649&ns_st_lpa=9470&ns_st_dlpa=1649&ns_st_pa=9470&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508440737&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=5&ns_st_dpc=1&ns_st_pp=5&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 704

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	69
Entropy (8bit):	4.08823329132516
Encrypted:	false
SSDEEP:	3:YBE5IARvuB3A5LWApzRSsW6JNuJ/Y:Yg9RvuRmSsWz/Y
MD5:	E05A5246E399F1BE5BAA8309150041D5
SHA1:	413B435FFF2BBD183A827EC8D00F643B0B603C88
SHA-256:	BEA9C036CD82AE6476D536B8EF33FF05B1424DF92895E2A8CDE46777CF6C574B
SHA-512:	23C9FD78491C4D95436194D083F23C36EE9B3E5C9BCAD5B6B89AB579878BC215D0DB6FE82D840756838B21230DCA1C137F58BF7C20B296F1012DB2DECC3915CF
Malicious:	false
Reputation:	low
Preview:	{"data":{"metadata":{},"response":{"isAccuWeather":false}},"html":""}

Chrome Cache Entry: 705

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 706

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1047
Entropy (8bit):	7.470961026151864
Encrypted:	false
SSDEEP:	12:wPGHQCo4AN+jF/XiQrTsfaQz2TFCfssEFwZZ2TFMYmp1Dudp/jZh2OJsTe9VSe7c:wPX+lOaCkCfslFwZZjY46Z0PZE0
MD5:	A1496DA93A25B70BCEC1511E3615D45A
SHA1:	9633EE2A49FCBAEA0AF00A227EC961E125703738
SHA-256:	7ACC36EF6732D8F06A604FA32710860A94443841C237E033093FBE2192296200
SHA-512:	135A43A5A1038031B71658701ABDC3A91C8C5C501F50378A066EB336D3B0C0F3361BA0F5F84FF3923C80A4823E4676E48DBF5D3A124B6FA325CF174135B17115
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.............................$......$ &...& 9-''-9B747BOGGOd_d......... . .............{...................................................!1a"B...A.................................................!Q."#..1a.A.............?.;w{v...6l~.......ciV.3..W.....N.2k..0x.]r..p(..2\..]!.k..O.EP.}......Ff'...M4.1.;...cY.]b......'...b...a.Ef.....<l:N..(.......r:'..".....Z......a.q.[f.5...i.s)I@...3s.:....Z.H..w..R....~..Gvf#..G}..2M...h..q..C......R.S..+.5{.e../.h.!.. .r.d.=...qo..!......>;.....m...ds.i%...?..x.5...$...P..+.....M.........k...gB].R....9h./P...W...<`:.B...o..z..._R...N....Jpa."b..:... .wsk.....b<g.qS.(k.s... ....D.8.1. ~.#...\|.`['.....$...6$..dp+4..........._...^..U^,....}q.2...U...m....sV........._zJ.z.ZU....y0D......F#9'$.l.c.}M..n.......$wkD.I\|....%R...r<0......lh..{.I..(...\|...1.."..ki\1..FJ7.q.[.:.....f..xI.F...2...8.......g..g.=.......A4...f?

Chrome Cache Entry: 707

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	11598
Entropy (8bit):	7.955372967113303
Encrypted:	false
SSDEEP:	192:/8KZKPR/H7IhxWkNpoVQmZTCMxuRdkn7feK/m58Qll:/8tZP7wxFTSTCMxIdm3euQH
MD5:	5B97CADA95C2D86DE0E78D3767E91753
SHA1:	AB67D872A806D2E2F2E2E9B972AE80B4F89A694F
SHA-256:	BBA19150ED232FD1BB79AD896EC786972E4833782E10D1BC5C670C8151B28BDF
SHA-512:	24753685938F2FF151BC972C6ABDA82814877B6615619241328DFF75EBBCCF79A42F0BC380F508DEEC184610DECDC74B7C5AC8B3CF44D6B31DF9A2D6068615FF
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F0e7c99eede3c65dbdfa94e708cbe3f3a&client=76f99bdb8f78cd44cc0b&signature=6501e3a1ec216a84f598237330a2a286f6998c01
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4..................................................................8(o.$..K..GO..&..Y........}.,..[...0...JY...scM..>.......y....J.....Av.%..._WwwW..hp..k..,.9....y.j..l.{..q..g...k...p,.?,...-C.b?...?..w...6..n.Zw...Y.KO../f2Mc"..[....j...g..k.......I9.Yw.WmK...8..p.> fs.i.>.=....cK...'..5...X.........3..^...HGy.L2..[X.L.2..=..~..W..@..Ab.vb.w.;...t59.....f.Zm.k.PI..o.Bp8...V...y..(...E`....:.x...1.k....P..j.\.........!ZT..m..;o..vD...y.P..y3Kt..8.....r.P.t...-.F.._..^.+....v."?.J....m...T.4...i.v......nB...lO:.j...5..1.].z.>[^GA....M....1..Q=S...P........>...N.Pc.8....g.x.s........&#..4..>X&.......c.....aj0q.5.....-..].!...c.!TA.h..}.}..P.H..0AI.4%.F]...@KO.5...-..b.c...L.)..hF..s.O5..U.A'.!U.9...q....$\.Y.z..:....i.}!~.y.iH..t.....nWw...........`...Y.}....R.L._<...

Chrome Cache Entry: 708

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (8369)
Category:	downloaded
Size (bytes):	8375
Entropy (8bit):	4.938986718408426
Encrypted:	false
SSDEEP:	96:rZD2NL8TnrzVQUOcMv3SkSLlS2zBGUJDC33BdLTaUOFuer2yymSn3rFq:1Oo5XU2zYSFFbr2ylYq
MD5:	72532AE716008FCD89700B170128D1B7
SHA1:	5339A7758DD1504BBF93576D7D4763F4E627EB22
SHA-256:	39666DD6C751375D8A257D2BA07D321EF84E3A99FFB3B12FED8289EBC38A5D67
SHA-512:	D7A994AB223A39AA6274B68FEF1CD28A8701BD74E6266F96451CECB34074E6350B2A97D51C4DC7A9A40073099D70D8F7747769BD96646414C1C21D336FFD54D9
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-bc-playlist-ui/5.1.1/videojs-bc-playlist-ui.css
Preview:	..vjs-playlist{padding:0;background-color:#1a1a1a;color:#fff;list-style-type:none}.vjs-playlist img{display:block}.vjs-playlist .vjs-playlist-item-list{position:relative;margin:0;padding:0;list-style:none}.vjs-playlist .vjs-playlist-item{position:relative;cursor:pointer;overflow:hidden}.vjs-playlist .vjs-playlist-thumbnail-placeholder{background:#303030}.vjs-playlist .vjs-playlist-now-playing-text{display:none;position:absolute;top:0;left:0;padding-left:2px;margin:.8rem}.vjs-playlist .vjs-playlist-duration{position:absolute;top:.5rem;left:.5rem;padding:2px 5px 3px;margin-left:2px;background-color:rgba(26, 26, 26, 0.8)}.vjs-playlist .vjs-playlist-title-container{position:absolute;bottom:0;box-sizing:border-box;width:100%;padding:.5rem .8rem;text-shadow:1px 1px 2px #000,-1px 1px 2px #000,1px -1px 2px #000,-1px -1px 2px #000}.vjs-playlist .vjs-playlist-name{display:block;max-height:2.5em;padding:0 0 4px 2px;font-style:normal;text-overflow:ellipsis;overflow:hidden;white-space:nowrap;line

Chrome Cache Entry: 709

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13552), with no line terminators
Category:	downloaded
Size (bytes):	13552
Entropy (8bit):	5.193169886549725
Encrypted:	false
SSDEEP:	384:35SEHg6tw8SFplnwGoIl+KSoUK+wTzxevlhRawt6wB7VtEs6mRgDdQ9Ux39tm:JSujSFpln/+K2vnRawt6atBW4Ux39I
MD5:	808AF2D936DDA9BF28A182C7CA2DCCDE
SHA1:	DA95F589E5150D364212A3BBD44D4EECCC719532
SHA-256:	676EDE8A71E37FC4FAA8032AF7802962B7DE6039B31479938185DB6FF7744803
SHA-512:	B47E95109ACA0ECA6DD6133A6A438055AE516FE9CAC9ECF304505D7C183E31D14D166B9C56F6F1F52A10516FD02F1FB75E72503B19D80EC0A316DF44AA410982
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-rapid-1.10.8.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-rapid"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(){return s=r("./src/rapidInstance.js")}function i(e,t){if(!(e instanceof t))throw new TypeE

Chrome Cache Entry: 710

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	63343
Entropy (8bit):	7.9910897855999785
Encrypted:	true
SSDEEP:	1536:ejyanxSDH5VlM36gPygxiUv+X4SiYtCXPnJdpEmYH1AQZFcP:ePxgZzM36lgxisVc2PJdpLP
MD5:	BD02C3EC913512C33090C7EB04A5C1D9
SHA1:	8B858B6BC649627EEB2BDCE227B857384ED12672
SHA-256:	B14075B8E6BCA0E1572C73DDA728913B717D8B96D052FCA89B16436B9C5F76BF
SHA-512:	BCBFABF1ED194576541B1DBC6B3A08034BCE2A3FB2AC05F98C40B4E6069C94C7CBE76ED7F645BE99BB26CDDFACBCAFF420C55A96FD9B265E04835FC39BD06E20
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/16829959635891446852
Preview:	.PNG........IHDR...,..........mz.....gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 711

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	277120
Entropy (8bit):	7.999309652970665
Encrypted:	true
SSDEEP:	6144:S4PmT/tfj8IaYmm82FRVHulwV8Kmj6usFbl:S4GtAKm8TVHuGN+6usFZ
MD5:	69359F920E7CD49241ACE3A91BC90B50
SHA1:	353C89F73F26F89D0AAB142FEE94F0721B202D0A
SHA-256:	6054B9A16DC224E71C0F55849D3F4BFC3DCEA2F804C7E88EC0785FE5FC7F654D
SHA-512:	752719C3BBB353CE37B3C982D8F6BF70B03D225FE6556DA21885F14ECDD769178D07688AE6C32BE9578490431FAE7623A1491E2C35664BF76255612544653366
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment4.ts?akamai_token=exp=1709530992~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=7534bc794ac65c76a4c3cd4d86ac72de97dc36896cc1e4fb92e407fe51e1d398
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|."....b.....qm7".1dLSnH..iqY&....Z...J....E,q.....H..3.%F.N.5.4....F...v{E.S...5../O.]..v.\|..!.w........Z.A:3/b...f..y.>?a.p..(j.,....9...:..R:.....G..@.u.&s{.n.....#.._?..4.d...}....R....)rI....d.n..2....t...e.g...../..&0..Ziu.`...K...x.....[..gU...i.=5.....5.z....y]o5...%2........?.....j-9.U..$.......).F^....^PI.!..[ $D...<...E...f...'j.;!B.~"/.....\|.WB..M2.u.._. G.....vy.T........#..-.6.5.D..ex...z.1..,..OT..g.xe.;^V.......j:Cv.[O..bj.R...p..S.......h..$}.?..b.r..PS..&P<...?.t.a.\...Pni-}/.+.T.x...K..Wz.p...n...y.N..D...I".....qq.,....L..CK..rp.q..?./..S1C.89#f"..B.H<.#..30

Chrome Cache Entry: 712

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	310587
Entropy (8bit):	5.025696230852238
Encrypted:	false
SSDEEP:	1536:5MIYiMwbzzSIaRUh9xklwm+Tlw8Yw9ZMfrG/:9bPJ
MD5:	22FB406D30FF5624D9C441109977A2F3
SHA1:	1B3F976E20196CD8DADC59680E40F1179846DD3E
SHA-256:	56C2EC4D71D22E2FFA6BB2CFBFCBC691C62174AF6AB27B615DBF0C8472AE37C3
SHA-512:	4D76E617E8B42B1D0EF75098F8928658A1D037948B6164EC8DD0F23425F42BCBA3EB83AB663718F94334606F848F86F43FC4A1AD02F05585998C60620777100F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/stream.22fb406d30ff5624.css
Preview:	.m-video-wafer__player--container{height:350px}.smartphone .m-video-wafer__player--container{margin:0 -10px}.smartphone .m-video-wafer--grid .m-video-wafer__player--container{margin-left:0;margin-right:0}.m-video-wafer.unified_player_video,.m-video-wafer.unified_player_video_show{background-color:#111;color:#fff;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;overflow:hidden;text-align:left}.m-video-wafer.unified_player_video .m-video-wafer__wrapper,.m-video-wafer.unified_player_video_show .m-video-wafer__wrapper{display:-webkit-box;display:-ms-flexbox;display:flex;margin:0 auto;max-width:1440px;padding:25px}@media screen and (max-width:753px){.m-video-wafer.unified_player_video .m-video-wafer__wrapper,.m-video-wafer.unified_player_video_show .m-video-wafer__wrapper{padding:25px 0}}.m-video-wafer.unified_player_video .m-video-wafer__wrapper--desc-open .m-video-wafer__toggle--more,.m-video-wafer.unified_player_video_show .m-video-wafer__wrapper--desc-open .m-vid

Chrome Cache Entry: 713

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2112
Entropy (8bit):	7.4644232945919455
Encrypted:	false
SSDEEP:	24:e9PoZPuSMxg7EbJRpXko2Q6tPaNK8mgrSGMZ0AcLw/hS6KLrLvllcu:edCdM27EyftCNK8mgWJZ0AbZZK7ku
MD5:	10460CAA4146B9D9A12AA9D195570901
SHA1:	157855B5CE6CBD5020FD43EF2CCB099305D0AAC8
SHA-256:	B9B127FD542DAEA4198302AC13E6734C9C995536A466EE6331F7653F1F2FC776
SHA-512:	2C5FDE9DEB4CFF5B7C0F21D53F4C8AAFB1901449BD2668FE31CB5F71EE8319A461393182484A44A205540050AC94BB27EFFE1A9638043E25716032AAD29E2886
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FmYPNdnSol61pq90EZA9nxA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fclippers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=c32b7cbdae600a46f74e47f8b8b2ce729197d76c
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................................................................................................."....B.a{.r......p.......$-..........dwVq......&...[v...(...#.#,.v..&/.j\|cou.)2.+3.!CQXEc.......hty..../77FNP]clw\|...KY_%5=..............-=E...]io;JQz..:B.......Zgm............u..iuz............9IPIW^amsESZ{........x.....2BI.,5..,<D.......'0.........Tbh...[hnR_f......fqw......N\cM[a............................'7?=LS........l..`lrr}............{.....0?G~........5EL...HV]Xdj.............):A...LY`"3;oz.!2:VciYfl...Pm....................u.....>MT......?NU.D\..]r............Jh....Si.gz.l........fy0;.....QtRNS......s.........}...\..S..=...'.-9.........LO.p..........w.....\|7...e...i.]Ha.D.....IDATH...XSW..........n..^v.a........0".Q.A..AP(X...2dh..*...X\....N..}//.#.P../y....

Chrome Cache Entry: 714

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	457
Entropy (8bit):	7.299960261495616
Encrypted:	false
SSDEEP:	12:6v/7ehuN3w/ceK0xisiruQLtsFmGarLd1sAx:HuNgEh0xtiFBsIG4S2
MD5:	12B179DFAC257BA3CF6EADBC3D4F5057
SHA1:	D0993279B43D64470FFC2DD424759683F7B16A65
SHA-256:	17977224589434F01D00AF1410495F767C9C04C10FF85C3D5D4C2EE156EDB040
SHA-512:	A9EA14CF74307493197715BD83C767FBBEB7F6A977D39DBD184E71CEF8579E3C4FB28A6E4B79327BBC340E3477989EB87E6965866FBD3AB164C168522E4E071F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31
Preview:	.PNG........IHDR.............(-.S....PLTEGpL"''?GP3;D'17/5=!)0"0..... 2:C2:C...-7?9;BIPU.!)(18......-6?18@...................rvxilq...............%.#1........RW[/59[^b..................`cccfg.........q.......tRNS........1.1.....1....[).....IDAT..-..B.0.........B.Q2dC...fL}....\|.X..B.U...u. .;.#v......a(..16....RM..U.......Z......D.TV....".....'H.1.;....i....).).S.._..6.t@...W.sYq!v.@o.@.Kp.......!.....{-kJ....f.~.@]..c......IEND.B`.

Chrome Cache Entry: 715

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5543)
Category:	downloaded
Size (bytes):	5590
Entropy (8bit):	5.1124404451174925
Encrypted:	false
SSDEEP:	96:3hDId95qnrwCO7Z4ZqwHwBlML0bdqq95qW15DCpn3nSS9dT:3Q5OkCj6uLE5jJCpn3SS9d
MD5:	26C9B9EE98384AC4A431ACF585E366AB
SHA1:	912C984501780B4ADBAA0A7803413BB8DC5F8E2E
SHA-256:	067639977D7B4270CCA5A05D9B2385F48EACAB3EF6BFE6C7EEC869C25F5E586F
SHA-512:	0DDD678FA9C8B03D35D0FCFA2A8F2A1E9929BC43AC286AFAAB23CD53552A9B8EE9F20803A0626E01D951C1DE60E3332DCB0E99624B847D1EBEC5A63CEA67BA60
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/video_player_wafer.26c9b9ee98384ac4.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"use strict";var e={d:function(t,r){for(var n in r)e.o(r,n)&&!e.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:r[n]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}function n(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.definePro

Chrome Cache Entry: 716

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (34209)
Category:	downloaded
Size (bytes):	321672
Entropy (8bit):	5.297281076519501
Encrypted:	false
SSDEEP:	6144:LLJLILsKLU5aK5Sl5SMLkLdLoLnLES0V7LWXC7d7GFBodKdIX7gNQvz1WOnHuvqT:L9sZQ5t5+5l450bkhd7GFBo3X7gNQvzj
MD5:	BB5F3EC116C99A02FE8B73B1A4A388F9
SHA1:	A23B95406166D443AD02A58D82E3C2C434098841
SHA-256:	5DBCB6179148A8AFA7B0113542E7E99A33917089BC83F29D64C67CE755B200F6
SHA-512:	8C467F6F8DAB807A43E53FB2EC176E45B4C85C6C9A0B0C246DD33DAC5D3E3E93793A852B5E56D55D0B7E94FC55B7499F95C886E67B760E6E4B9F5D1F86887298
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/yahoo-aol-network/loader.js
Preview:	//AB_TEMPLATE.//ab -> 9......var _taboola = _taboola \|\| [];var TRC = TRC \|\| {};.TRC.perfConfOverride = {'logTimer': 50000, 'logLength' : 5, 'traffic' : 50, 'measureEnable' : true, 'measureTimeToSend' : 10000, 'measureInterval' : 10000, 'disableRawDataSend': true};...........................................................................................................................window.TRC = window.TRC \|\| {};.window.TRC.version = "20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35";. ._taboola.push({overrideConfig:{global:{"enable-wait-doc-state-complete":true}, systemFlags:{loaderType:"doc-client-width-4_var", experimentID: 15532 }}});.try {(new Image()).src = "https://cdn.taboola.com/libtrc/tr5?abgroup=doc-client-width-4_var"} catch(e){}./! 20240303-6-RELEASE /..function _typeof(e){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&

Chrome Cache Entry: 717

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20625)
Category:	downloaded
Size (bytes):	31364
Entropy (8bit):	5.5671864214807165
Encrypted:	false
SSDEEP:	768:evjhoMtCGsOpYfkKz4wDQjZvy/KQWwY4RXrqt:e95tCG9YfDQjZK/KQWwY4RXrU
MD5:	D64ADDEFC4218F07D5C2A01DF10F5663
SHA1:	6E53190F521969C8049E11F5B89BBA3BBFA5DA45
SHA-256:	80D872A9A6663F42B78E4DAD7DA8ED335304249A13A9D8F5362479278E375E7F
SHA-512:	E0983C04B913F9EF667DB85191465D94209017C6ED0FFA97398B44A7F1AD22EB7A14A6B77419CF767D0EF75D03A82C25D772E4E2577A0F774B384B7FC305F9C1
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25036%2C25278%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25033%2C25274%2C25276%2C25071%2C25202%2C25003%2C25245%2C25127%2C25006%2C25204%2C25126%2C25007%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":"e","coc":"NA"},"cs":"8","lookup":{"mn":{"name":"mn","time":180,"cookie":"data-mn","urls":[{"type":"other","url":"https:\/\/cs.media.net\/cksync?cs=3&type=yhb&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redirect=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dmn%26ovsid%3D%3Cvsid1%3E%26axid_e%3D${AXID_E}","eu_url":null}],"pvid":25001,"isBl":0,"g":1,"cocs":0},"tlt":{"name":"tlt","time":45,"cookie":"data-tlt","urls":[{"type":"other","url":"https:\/\/eb2.3lift.com\/getuid?gdpr=${GDPR}&cmp_cs=${GDPR_CONSENT}&gpp_sid=${GPP_SID}&gpp=${GPP_STRING_142}&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D%3Cvsid%3E%26type%3Dtlt%26refUrl%3D%3CrefUrl%3E%26vid%3D%3Cvid%3E%26ovsid%3D%24UID%26axid_e%3D${AXID_E}","eu_url":null}],"pvid":25006,"isBl":0,"g":1,"

Chrome Cache Entry: 718

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 719

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	693
Entropy (8bit):	6.920719556719218
Encrypted:	false
SSDEEP:	12:6jQtFfsDvjQtFfswVz9pggyv4z+93CSNDhcsSIHkIT2mhyO3r4xdi:ztFGstFFjyv+idQY12WyO3uo
MD5:	94D97E37D6FAE7AD498A7A43B6EE966D
SHA1:	6556BBCDD8F29CB7EBCE7485E38A95F653DFF097
SHA-256:	EF2C1892FBF103B484B5C3D76E3B9C02C53A9291CE080F46CCE9E3CD79464CBD
SHA-512:	B693E35FA206A381A84DD28B1953234238B1C0E8A442B1E60CA0412CE8F62F7F71E4191AC8DC221900232230D365EB0E1AAFCBFE395BFC45AC498D994B58797B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-12%2Ff32d3a20-a01c-11ee-a4fb-2a31dca05260&client=76f99bdb8f78cd44cc0b&signature=d701f74e6d8efcc3b78ab05548e3fc9c7dc32afa
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................................ .... %...%-))-969KKd...... . .."..........y....................................................1!..."Q#UVq....................................................!1.A............?.?._e.6.4...sUA.......q_....R.l.....f.v...6...M...a..1.\|.{.7.......V........z,u...2.\.~k.C(9....f...[.....1....}.L2.....m......B.OEEO.....8...q.L..P.j....%L.08&.G.MdjZ....x....5.pd..+..i\..P......\`..&..hg...u.........M.\{..l!n..+..n...G.\|.....1!!B.EEEL...{.......ez.......`....].f...........R..u....&j.._W[........... ..s.I..c.6a0........}Yt..\.r4N.........X..

Chrome Cache Entry: 720

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 721

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2269
Entropy (8bit):	7.777898774453334
Encrypted:	false
SSDEEP:	48:1xlZ83SWtpsnWACTzmKa6Rm0anargwZB673kx9UvLcWERWw:1m3nkTCTzmN50dMwK7+wLuAw
MD5:	78A028B6BCEB6F1C49AD89D6C4043DCC
SHA1:	F1FE3332FE2541A81FD1D32D375BB8AAF29A9455
SHA-256:	6052C4DF04424554C910C444B97F48D14272FE0087D9C6A44AEAA7CE9C20F7C0
SHA-512:	09C273E60B4B7305172641E89CAA8BCACDAC98CA6420914E220ED0974F73F9CED9C5503273B53972EEC76DADD2A623206F5A5DC17BE7550B640D86D0F4E0D96B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'."@..'.#2.....'.:0.#2."@.#@..'.$@M#9....'2=C;p#5k#6F":.,>..((4=.41.#3."?.">.#2 ">.)?.h-V#8..(\|#4("=G":..'l#5.S/..(.&?.,+6=.+...$2nd6.Q/JK:.G0.$@...q#5.=0..(a[7../.9<.(.,.'?N#9.+7><..'.).?.(?.../.#1>0:<.01.RP9%3={m59@;.,....+.^Y8.p4.(d]7..>qe6.@Z.p-zl5!/>..u3f^7.+?..1...5=<.,ka6AE;..1.-Jyk5[W8./>..0>C;....,YU8CG:.(./1.&2FH:.).y3..0+=XHJ:.T/VS8Vdyz..JZpv...v3..'.,.-.}2US9L[rBF;.+$2>..-th5.MM9....-..(.....).(....'D../K.,.w3..(h`7s......).G.+.+1..(.?0.o-..%C.q-...EUl.r4%8S4F_;Ld....)P_u..<..-..M........!4P..xFNN..O....+}n4VT8.)..0..0...G0..2.).H0~o4=NfTbx..2.+H(;V.............\j~......8Jb....}:....)tRNS..........ZP....z+.....{..-.R..,...Y.5..,...cIDATH.Vg@TG.>@...h0).g.w.8D..Ho.W.A..E.)..Ec.....Xb..].)..Kz.......;..5.........~S...d............. .m..`[........h......=..s

Chrome Cache Entry: 722

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=1000009&c7=https%3A%2F%2Fwww.aol.com%2Fproducts%2Futilities%2Fad-free-mail%3Fncid%3Dmbr_rusacqdsp00000691&c8=Remove%20Banner%20Ads%20with%20Ad-Free%20AOL%20Mail%20%7C%20AOL%20Products&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508439911
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 723

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=7&ns_st_sp=1&ns_st_sc=1&ns_st_psq=4&ns_st_asq=4&ns_st_sq=4&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=7815&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=7815&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=7815&ns_st_dap=0&ns_st_et=20198&ns_st_det=2984&ns_st_upc=7815&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=7815&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=7815&ns_st_dlpc=0&ns_st_lpa=7815&ns_st_dlpa=0&ns_st_pa=7815&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508438537&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=3&ns_st_dpc=0&ns_st_pp=3&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 724

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10804
Entropy (8bit):	4.481624126994836
Encrypted:	false
SSDEEP:	192:v6+WE7QxvAjShzwzb7M1/myAYUNNdZnvGuQTF4U:v6+Pkxv44q/EH10U
MD5:	2928664FE1FC6ACA88583A6F606D60BA
SHA1:	2F2FE1CBD0563B3CE3EA79FCDF1549ED244B3993
SHA-256:	A26FC5B38380272C92E9019A2EB8B45542A66814B3E2B203772DB8904B9FB99F
SHA-512:	7D6F8B7E54A4DA3CF81C767B4AA40C3B04BAFE35F2DD77B85944DE4442F0B1DD1A8EDA0175DEB4652CF055094ACDC0D4B6E38ABE51C52A3DFBF887481315B347
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg
Preview:	<svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40">. <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title>. <g>. <g>. <g>. <path d="M110.13477,0H9.53468c-.3667,0-.729,0-1.09473.002-.30615.002-.60986.00781-.91895.0127A13.21476,13.21476,0,0,0,5.5171.19141a6.66509,6.66509,0,0,0-1.90088.627A6.43779,6.43779,0,0,0,1.99757,1.99707,6.25844,6.25844,0,0,0,.81935,3.61816a6.60119,6.60119,0,0,0-.625,1.90332,12.993,12.993,0,0,0-.1792,2.002C.00587,7.83008.00489,8.1377,0,8.44434V31.5586c.00489.3105.00587.6113.01515.9219a12.99232,12.99232,0,0,0,.1792,2.0019,6.58756,6.58756,0,0,0,.625,1.9043A6.20778,6.20778,0,0,0,1.99757,38.001a6.27445,6.27445,0,0,0,1.61865,1.1787,6.70082,6.70082,0,0,0,1.90088.6308,13.45514,13.45514,0,0,0,2.0039.1768c.30909.0068.6128.0107.91895.0107C8.80567,40,9.168,40,9.53468,40H110.13477c.3594,0,.7246,0,1.084-.002.3047,0,.6172-.0039.9219-.0107a13.279,13.279,0,0,0,2-.1768,6.80432,6.80432,0,0

Chrome Cache Entry: 725

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	403840
Entropy (8bit):	7.999487422710902
Encrypted:	true
SSDEEP:	6144:FLlmH7ByvBsNtUPbm7CFUa98Lo+wAXr2wqhR6s3E4oD4RCaB5amaeSN:jABII+PM9agaS2wG8sUZcRCW5a1eE
MD5:	1CFE6DCB114FDCE84FAD4AF520E52635
SHA1:	8C3B6C1AF2644C88AB4A1A0BCCA56C40EE08922C
SHA-256:	EE7DB6EC8E00B77ED86FEA2957DD38F5E34743214C28399F6CDCB3A159543FC6
SHA-512:	4CC6B5579A81CF67BEDE0BF44B3942EBFD0611EB12C6ADE422E2ADC79E1B92D25ED32A01F7C3F8B812933B013291E208A87B1659209B1813DB32BCF9B0088127
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment1.ts?akamai_token=exp=1709530992~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=7534bc794ac65c76a4c3cd4d86ac72de97dc36896cc1e4fb92e407fe51e1d398
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|...q"..I../....M.8.T.p.......J..d...._.....u.X_...XOY.......u..s6).'.7;.p..........=\|.:r...t......"zXk.@......l?.....z........7;..gC..e.+.....u.`.Q..p.rX...cW......x_..T.....U._,G.5...1.).Xr}....'....&Eh.../...M.s@....%0........}.z)...3F.....Ja.............<p!...Av!....{..4..&.;EH..im.0.a..... .+\.PK..y.>..v..\&S........'=Y.m.)K.?.....Z.&l....:7.&.....)8.v3...[..q..B..#Ee!O~.z..F. .,..]..+Y..'.f......z.......{...T.Q.m.T.....8.&.%...D.>...a.A...b.l...d(...{R.)(..a.5 V/f....u..]Bm.9.......<....}.I..J....I..f.....M>.:.R..H.-..y}.c......,...=...kcB....Q...K..-._.6o..c.A..pR..t.............[.L

Chrome Cache Entry: 726

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 51100, version 4.262
Category:	downloaded
Size (bytes):	51100
Entropy (8bit):	7.9961896247971715
Encrypted:	true
SSDEEP:	768:yg6kf4WUPC3bp0c6AeNwDXFjR1J6cdNJwaHkjQR5xzvp8SgzPqIBUcrIQqdoAw3K:t6kfGC3xe+5jV6clbtRnOFOfd6YF
MD5:	0CDBBFC728AC34DB132F284A7066D40B
SHA1:	5468D48F59851ABD167A651514E4B50A5515794C
SHA-256:	B67FE134E78EE1F90AC5F92733C450FD178B02384539BED3FA283797010196BA
SHA-512:	473B01609935C375CFFEDAF6BA1D2E8083351385461CEAD3C5ABC066BA9B852C39EBBC82CD4039D09D392312DF88B67E0572B893E5D33207E8B7F95D5C4F86F7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff2
Preview:	wOF2.............a....C.........................@..V..v.`..R...`..f.6.$.....H.. ..6...[.........V..}?.('......s.\|.cU.%x...v.V..........d!........v.6......(.(.6P...x...!..N.Nf...}.7.....VLX.\|Q%..6..S.![W.q1...?g.^.....f3\...B..yK6.....f.._eN..x1.l.j>.u.y.&.....$.U(....N.M.6.I..1.8.+..5..D%Q.......;..vY'Js=..6..i..[..M.#.I......`./U....,...f....M...Os....Rx..?.H...?TR..L...1R.G(..p.G._..x...TU...g!.C....T....V3..F... .......4. G... .O..i"RB+bh.....4... X........Gi.X)....4I....%..^.......b-..S>c...aS..76...D.f.....`...~:`i.......<.H.3c.p...rI&.X0..3..6D......b.......b....E.x...k.*..".<.b....@..k."D...X......D.1#.$b........m......w.....n}].Q...Cw.......].r.^..^j.w... ....#...?...H:t..Li..W..q..t..$........l...}k.7..M...qU......Scw..~.0d)@.....)..C....-M.!9.........?...(...<...w..Q..vF.(..O;...Z.C........8....hM+..lrt.V.~....P_.9,.yN"......s.]k............b.^...w @M ......Q....XI.^.E...P...<...?.}BGh..9.K2..L.%r..J.x...>U..6...>&H.. d.

Chrome Cache Entry: 727

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1346), with no line terminators
Category:	downloaded
Size (bytes):	1346
Entropy (8bit):	5.247990455125931
Encrypted:	false
SSDEEP:	24:cnfnPBM646om5QNnSetDJatOATxuhh5wKVkhCyTGbR6NUAlfaQIDZabZSXFTAg+c:cnfnP6Nm5QNnltD0gAwwoSGbU+8CQkZn
MD5:	B6D30FFD6761D33EE5863E4A68D5D300
SHA1:	832BDF655E1091FF9386EAE849422B182FBDDD58
SHA-256:	C7719B1B3B3A01FE9912C019D9F5AF9EAF4404C15299577607703477C6478F13
SHA-512:	F91631EA316EF65229E9704A4DD7A7EC8D4C617576E5C64DD2DD5B6F44414A9D6D3005A69E77CCFFCEF7FD6B13B862F8F1A60B7277B1E4260B66EDDCEB5A5654
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/hero-figure-text.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.heroFigureText=function(t){"use strict";function e(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator];if(!n)return t;var r,o,i=n.call(t),a=[];try{for(;(void 0===e\|\|e-- >0)&&!(r=i.next()).done;)a.push(r.value)}catch(t){o={error:t}}finally{try{r&&!r.done&&(n=i.return)&&n.call(i)}finally{if(o)throw o.error}}return a}function n(t,e,n){if(n\|\|2===arguments.length)for(var r,o=0,i=e.length;o<i;o++)!r&&o in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,o)),r[o]=e[o]);return t.concat(r\|\|Array.prototype.slice.call(e))}function r(){for(var r,o=[],i=0;i<arguments.length;i++)o[i]=arguments[i];t.store.debug&&(r=t.logger.tag("hero")).info.apply(r,n([],e(o),!1))}return t.store.once("PAGE_LOADED",(function(){r("Handling %s event","PAGE_LOADED");try{t.dom.applyFunction(".hero-figure-text",(function(e){var n=e.parentElement.id;n&&t.rapid.initializeViewabilityTracking("#".concat(n),n)}))}catch(t){r(t)}})),t.store.once("USER_DATA",(function(e){r("Handling %s content: %s

Chrome Cache Entry: 728

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4314
Entropy (8bit):	7.486643886358984
Encrypted:	false
SSDEEP:	96:/nknmWIPuGc/ACHKH4SHxosNvthKOh09bngwaxYyKO:vknTGgqYSJhjnwaxY1O
MD5:	F0D2BA5C63AB03F3B53158F293F651C7
SHA1:	600E7400BC2DF013B93550486DB7889DCF9D2277
SHA-256:	D0ECAEA4F4B91A678F16B572DBE3C9DC7212D1437A97A31F84AE74C167D5A4DB
SHA-512:	9E58C6DFAC93CED5CA727AAC72D2D24F9A081D5215DE4A2EA4EB911625CCD787A526A79D24EB398862CB970AF10E8BD036F4876C1ED0EF4FEA618671D6C008A6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/assets/images/ybar/aol-logo-white-v0.0.4.png
Preview:	.PNG........IHDR.......<.......Cj....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmp:CreateDate="2017-06-09T15:02:42-07:00" xmp:ModifyDate="2018-04-18T11:44:37-07:00" xmp:MetadataDate="2018-04-18T11:44:37-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:4ec8550b-d37d-469c-af51-09b33be501a0" xmpMM:DocumentID="adobe:docid:photoshop:8b12166f-90af-ca4c-b9af-5168be9814ee"

Chrome Cache Entry: 729

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1059
Entropy (8bit):	7.519320190040557
Encrypted:	false
SSDEEP:	24:ztFEA7O0XlfR05QSc8RzXjpcDovRd23aA17lmJJSD0+T/z:ztCAt5elcCXjpcsJ0laj+T/z
MD5:	CF5119C058F932076546D867A49182DB
SHA1:	7F505B9DE930DAD93DF8B51EFFCA768888A85B2C
SHA-256:	A7EF42B26CAA749AA2C08CD2D7FC0371EA99E70164E27ECFD3779CA41E905B8D
SHA-512:	34111E5E51B0120E9874449A4D29A3157FDA5853E58AA9C28CBF28B17E5F48FD084761DABFB10E60EB7E5A90BC10EA8A72CB242ACAD093DED3357721AB56B8C3
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-12%2Fc9eafd50-7bd3-11ed-aebb-a0692bf76bce&client=76f99bdb8f78cd44cc0b&signature=be733232ca102f238005d227e03dafbaceccffe5
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................."......".$...$.6&&6>424>LDDL_Z_\|\|....... . .............z....................................................!1A"2Qq................................................!.."1A...a2Qq............?.-...e.. e..D.....0......v\|W.?Y..i..2.H...89.q..X......Ny......[.'S1bN.\|nx..vaE;.8..J..r....\.....}.=...1...}.....e..b?XB....OT.g.:._....Q..Zw;.-..T..L.b$.O..X....M.NI......_!......f...y.$...&.S......#.Lv........Z..q.F...>..ua......S.R..WBG8%..nI=[==q.....G...K[..#....E.~.l.N..F..;.s.Z.O....yI.q..W.E..m...".<.y....S..9/..F......p.\...sP.......n}.v...h..(R.../63.OO4P...).h..X.UR.@.ns.,Y.$.+.dS..n~w.;.V9.?n.6.'H..w2.`z.C....I\|..r?.I..S...;O.......x.o.G{><A.......?t>..E...d..w.K.I...2.j.W.+.)f.)S.R.G..:.$2J.=..,...+....=.n...U.....$.!.&t........S.y/.>./H..2b...?pd.Ko....Urc...=h@ .....h%UedH#...{17fdm.....v..#U.J..+.*x...7...7mQT..

Chrome Cache Entry: 730

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1837
Entropy (8bit):	7.81059795605347
Encrypted:	false
SSDEEP:	48:8RpWGlCuhUznu0P96Cdc2cvI9+3u3G1imCBg45wME+:8Rb5Uznu0P9Bd2A9zG4mCBg4uME+
MD5:	2D31C6A99E63D38B32AA0FDAA1100445
SHA1:	32809162012A2A7350C7543B3AF0C906B442F87A
SHA-256:	D4FFE6BC2B576A137B920DE9849A33B92F703B26F950DC3D27F6E9C10C0D3DC1
SHA-512:	7B1B88D18DEB9DAD10DF5D48F998CAA8D4A06F3BDB3874B583A83456BEFC94C72075DCF32C22571411A744FE5EB25732CE1D7E25D5881270193349B9EFA63064
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..................r}.u............................................cou..................}..u..........<KR............[gm.............\io..................................................".:>.....$.$-......."..$..#..4$4<...+2.27.49.9>.7<...,.'..'....:>'7?.3./7...W%,.."..%ny~JX^.38N$+.5:...ESZ2 (..$.8<p)0s~.."+..3..&.49....7;.(1..(.7;./4y1BPW....16.6;...Xek)9A.7<.#+.+44DK.."'8@.!).05\&-d'.........%.9=4 (..'.9=b'....%.&..$P^d~..U%,..#:IP.&./>FE"u0...,<D... .%...\|..couams...`lr......K#+...y........%5=t*00.'..$Ubh...\hn.06<!).6;}+1@")./5.,2...>MT[&-7 (......AOV........#.&............'.&...49.5:./5.......-5......!2:.,2.........6:....:>.......%.,3....6:?MT..4.17...Z&-q)0q\|.fqw.09...v.._kq.28...mx}...H#+Q$,HV]l(/.....#".&....38...u..j(/...............Xg....?tRNS...............t'xOL....\f3....u...FG...........H.G........9.......IDATH...gXSg.....m............(A..E.k....H."...a(.. "K.(h.."....{....k.....y.}.s......WK.S..<U..B

Chrome Cache Entry: 731

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 732

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6303)
Category:	downloaded
Size (bytes):	6339
Entropy (8bit):	5.237655007061846
Encrypted:	false
SSDEEP:	96:3hFq2NJFg795qny6Zf13hAt2DCpPvfwHYah+ocXGiMGpq7b8cdaeB:32ce5OfZNI+CpP3wHYayXGiJpQV
MD5:	87313C9F56A825EFFF2E5FE5DA4E802E
SHA1:	37AA6B437595482D5A5F444744E807FAB8623337
SHA-256:	D318178E1150F5001DA2065D6612790CB71E7024949794FE80B7A14B8C57E0D5
SHA-512:	B49F9BDE3E39B343DC206962E0700EA3010DED823EF538061D2DDF2F1C955229782640C853F07FC782CCE7236C6A6FCF714EBCC90B1361096D7AF260CBDA703D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/taboola.87313c9f56a825ef.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e={3741:function(e){e.exports={getCookie:function(e){var t=document.cookie.match("(^\|;) ?".concat(e,"=([^;])(;\|$)"));return t?t[2]:null},setCookie:function(e,t,o){var n=new Date;n.setTime(n.getTime()+864e5o),document.cookie="".concat(e,"=").concat(t,";path=/;expires=").concat(n.toUTCString())},deleteCookie:function(e,t){document.cookie="".concat(e,"=; Path=/").concat(t\|\|"","; Expires=Thu, 01 Jan 1970 00:00:01 GMT;")}}},2830:function(e){e.exports={debounce:function(e,t,o){var n;return function(){for(var r=arguments.length,i=new Array(r),a=0;a<r;a++)i[a]=arguments[a];var c=this,l=o&&!n;clearTimeout(n),n=setTimeout((function(){n=null,o\|\|e.apply(c,i)}),t),l&&e.apply(c,i)}}}}},t={};function o(n){var r=t[n];if(void 0!==r)return r.exports;

Chrome Cache Entry: 733

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	539
Entropy (8bit):	4.9325882804128085
Encrypted:	false
SSDEEP:	12:hYyzFSHq2Sszvr2FIEDdJf4xJqbIEvqi3i8SHq+Qd33qJmW7V4NGL:hYyzoK2SwvrmVdJfG+/iDKhVMnV4Nu
MD5:	2AA7EF0B22F0B66CAFBDAACFF599771D
SHA1:	79933B3A90D25AC8F7D2223A274792244DA81F4B
SHA-256:	9CA89731319743AABEDC04E5FD134EDB79EF0B3E761587958ACBD9BA21D0093B
SHA-512:	AFAD8749CCC5C697DBABCCA7E6DD1BB0BF3A77D1D11F0C875A6A8E5FCA46447C71D4EF494D603A054AA9B01D7BCBFB87DB432B4F4197C72B246457EDF12FA85F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="UTF-8">. <style>. html, body { width: 100%; height: 100%; margin: 0; padding: 0; overflow: hidden }. #pframe-root, #pframe-player-container { height: 100%; }. </style>.</head>.<body>. <div id="pframe-root">. <div id="pframe-player-container"></div>. </div>. <div id="pframe-overlay" style="position: absolute; top: 0; width: 100%; height: 100%; z-index: 100; display: none"></div>.</body>.<script type="text/javascript" src="pframe.js"></script>.</html>.

Chrome Cache Entry: 734

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1047
Entropy (8bit):	7.470961026151864
Encrypted:	false
SSDEEP:	12:wPGHQCo4AN+jF/XiQrTsfaQz2TFCfssEFwZZ2TFMYmp1Dudp/jZh2OJsTe9VSe7c:wPX+lOaCkCfslFwZZjY46Z0PZE0
MD5:	A1496DA93A25B70BCEC1511E3615D45A
SHA1:	9633EE2A49FCBAEA0AF00A227EC961E125703738
SHA-256:	7ACC36EF6732D8F06A604FA32710860A94443841C237E033093FBE2192296200
SHA-512:	135A43A5A1038031B71658701ABDC3A91C8C5C501F50378A066EB336D3B0C0F3361BA0F5F84FF3923C80A4823E4676E48DBF5D3A124B6FA325CF174135B17115
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-09%2Fc1ee04e0-4dcd-11ee-97bf-83c5420da580&client=76f99bdb8f78cd44cc0b&signature=914d0608eb4f953292a2fc317324e981b551aa42
Preview:	......JFIF.....................................................................&""&0-0>>T.............................$......$ &...& 9-''-9B747BOGGOd_d......... . .............{...................................................!1a"B...A.................................................!Q."#..1a.A.............?.;w{v...6l~.......ciV.3..W.....N.2k..0x.]r..p(..2\..]!.k..O.EP.}......Ff'...M4.1.;...cY.]b......'...b...a.Ef.....<l:N..(.......r:'..".....Z......a.q.[f.5...i.s)I@...3s.:....Z.H..w..R....~..Gvf#..G}..2M...h..q..C......R.S..+.5{.e../.h.!.. .r.d.=...qo..!......>;.....m...ds.i%...?..x.5...$...P..+.....M.........k...gB].R....9h./P...W...<`:.B...o..z..._R...N....Jpa."b..:... .wsk.....b<g.qS.(k.s... ....D.8.1. ~.#...\|.`['.....$...6$..dp+4..........._...^..U^,....}q.2...U...m....sV........._zJ.z.ZU....y0D......F#9'$.l.c.}M..n.......$wkD.I\|....%R...r<0......lh..{.I..(...\|...1.."..ki\1..FJ7.q.[.:.....f..xI.F...2...8.......g..g.=.......A4...f?

Chrome Cache Entry: 735

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (958)
Category:	dropped
Size (bytes):	13114
Entropy (8bit):	6.028397213875072
Encrypted:	false
SSDEEP:	384:wSSGzQ0SlG+G7KGcZG1ynGy7Gd2GsgGcDGLG3SGMiGf:w50OZx
MD5:	AA5A431DF3231DA8C4A9FFCB0AAD6A0C
SHA1:	DCA5D21C6BDB00596C8330D23694F9E0A77C9E3B
SHA-256:	CE9E816DF013BCCBE89B610810920F84B4B2D184AAF8DDFD298D6298C0738D8F
SHA-512:	3C654AF2F5F4C363028546965FA41F938FC1AE3A4270E33F8BCC5B09A7162D95BACE83AEE693F0129CD320539CC0CEEE32C75792FE37EF702A055BD1AD575DCD
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/7139b460-ef2c-4a3b-a845-c37a669ecaf4/6s/rendition.m3u8?fastly_token=NjVlNTVmNjRfZjM1YTBjYTEzZTlhMjM2MDY1OTIxN2UxNDk3NjgyMmY5MzA5OTZiOTJiZDRjY2M1OGU4YzgwOGU3NTY0ZWE1Yg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ".#EXT-X-MEDIA:TYPE=

Chrome Cache Entry: 736

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42356
Entropy (8bit):	5.351903146875997
Encrypted:	false
SSDEEP:	384:nvWe2+5f0QjvAcrU1WivLqHeXDZYZ8IaGRRyr4lH7xlIuSULCrYc9ahi0:++B0Y7remNZ0GP57xeb38c9ahi0
MD5:	A7830EC310497514636A3160AB50BA4D
SHA1:	C12D14F05047107B1509E58827BC040248A16575
SHA-256:	8E2B415197995065A91926F5C7AD3DD672DC9B75AB31CE09BD39AF85233A8C17
SHA-512:	60456673227A48DF5F2B5F31E6FD17F07194160B8449B1D2B4444522FC48FCB1756597F5BC8BEDD4D6AE188757FB450EF807EE2E4498BB44B971AA2401C5D7F3
Malicious:	false
Reputation:	low
URL:	https://ncp-gw-video.media.yahoo.com/api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-aa-2&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage
Preview:	{"data":{"curatedVideos":{"streamInfo":{"returnedListCount":12,"requestedCount":120,"streamType":"jarvis","snippetCount":12,"queryProfile":"assetlist_single_feed","id":"JARVIS:curatedVideos:assetlist_single_feed:null","jarvisFeedName":"main","params":{"feed.main.pagination":true,"feed.main.pagination.snippet_count":12,"feed.main.dedup_uuids":"","feed.main.count":120,"feed.main.stream.asset_list.listAlias":"ymedia-alias:playlist=aolcom-homepage","feed.main.stream.asset_list.variableArr":{"streams.blacklisted.enable":[false]},"feed.main.dedup.enabled":true,"feed.main.stream.asset_list.listId":"","feed.main.filter.contentTypes":"video"},"streamName":"curatedVideos"},"listInfo":{"info":{"id":"cb43b5d0-9b51-11ea-9de6-a66d97c2b28d","title":"AOL.com Homepage Video List_122123","description":"Main PowerBaby Module on AOL.com Homepage"}},"stream":[{"content":{"id":"3caca4ca-191c-3933-bab5-595ca1d1495a","title":"Winter storm wreaks havoc across Sierra Nevadas","description":"A winter storm is sl

Chrome Cache Entry: 737

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.592811285920767
Encrypted:	false
SSDEEP:	3:YQ3/eHir7BAprRHBScVHHEBVLwWLW6n:YQ3OYcVEzwMW6
MD5:	B9F3E8D248648AA0465BC0CA25DB1B9A
SHA1:	131916DC335D2049990369D7011DABB2388DE339
SHA-256:	B549887C4FD1C0354FB7E65DFE578DC8894162674B1B63ACED6BEB077DC8A63D
SHA-512:	6061AD3622728769B79F36722F6B8836BC356BBAD692A3F9AFEFBFE7FD884501005C0B509CE2BE894A5DEDBC6F88C1B54C526EF0E0F51CF4A5730CAC32924FD6
Malicious:	false
Reputation:	low
Preview:	{"user":{"id":"8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4","isNewUser":false}}

Chrome Cache Entry: 738

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (992)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	4.973119096643199
Encrypted:	false
SSDEEP:	24:NC8kC5SjC84HdFftPC+CWCgFbCt2CDwcC2sC2ggoC2uCsfcClOCgFHcCejkkCejD:NC8kC5aC8KdFf5C+CxgBCYCzCzCxgoCF
MD5:	B45BC946A2261E63DCDFC3FACA752FF3
SHA1:	148A799B97CBF85A713D3C49E199ECB232408665
SHA-256:	B3395510D2BEF53E87B963DA4321117796E85FAEFD7EDC25B9EECBE203248177
SHA-512:	BCA9C3E9A871DE8C0368329DB176C510691A1532977C17F14EF877EFB6617863C87AD4B19600F269DE3FCFD3B1F696AA793A69A665199C25C60843E917742C60
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-overlay/3.0.0/videojs-overlay.css
Preview:	.video-js .vjs-overlay{color:#fff;position:absolute;text-align:center}.video-js .vjs-overlay-no-background{max-width:33%}.video-js .vjs-overlay-background{background-color:#646464;background-color:rgba(255,255,255,0.4);border-radius:3px;padding:10px;width:33%}.video-js .vjs-overlay-top-left{top:5px;left:5px}.video-js .vjs-overlay-top{left:50%;margin-left:-16.5%;top:5px}.video-js .vjs-overlay-top-right{right:5px;top:5px}.video-js .vjs-overlay-right{right:5px;top:50%;transform:translateY(-50%)}.video-js .vjs-overlay-bottom-right{bottom:3.5em;right:5px}.video-js .vjs-overlay-bottom{bottom:3.5em;left:50%;margin-left:-16.5%}.video-js .vjs-overlay-bottom-left{bottom:3.5em;left:5px}.video-js .vjs-overlay-left{left:5px;top:50%;transform:translateY(-50%)}.video-js .vjs-overlay-center{left:50%;margin-left:-16.5%;top:50%;transform:translateY(-50%)}.video-js .vjs-no-flex .vjs-overlay-left,.video-js .vjs-no-flex .vjs-overlay-center,.video-js .vjs-no-flex .vjs-overlay-right{margin-top:-15px}.

Chrome Cache Entry: 739

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 740

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	460608
Entropy (8bit):	7.99950731725927
Encrypted:	true
SSDEEP:	12288:2OZZ9jUAtQucZGYZ7cdzTIyXsdFQ5eSbUU:2OxiGYZ7cd3TcdSbUU
MD5:	D6A84028FEFDD42FEA7C01C32A4BD880
SHA1:	5D5AB130A519CED16F1C2E6FC5F34E072E059FB3
SHA-256:	811AC97FDE24C23B5EE56580BFA353B2232EC0B1D8ABADFDE9F0A5E5B994D5E8
SHA-512:	D46DB2E9427A76A4056F3E7BC2EAE018568646D98A49BF59683219BE15F0656F11251E395090A51B82838210E83E0D2122B48A0C158D921D4075E27C47397345
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment6.ts?akamai_token=exp=1709530992~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=7534bc794ac65c76a4c3cd4d86ac72de97dc36896cc1e4fb92e407fe51e1d398
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|.P.M.X...7.-......u-'Y....p%...As...*$..t....z.\|..S.#..../7...:...M.k........z..#e.^x...Sf..V.,...........C..K.(.....M...<.&Lyw.E[.....e....[}o\[....9.;[.G..0....+1.,.PP......QrR..Yr../.......g^)f....mX..<....+...v.&j].....a.B#.`sW.O.\|e>n..A.j...gw......xM..S.i..i$q{..p.....!...&.D.;D...)....b.R..yf3.[.:E.+.}.$..ec.\|6..UT.....@.~.-..J.M......)kj.tR...M.....3V..c...w9.#.:.E.......=0b.t...<..b.yx%..P..:%#p...0.w....<...O....I...'.........W..m:.S...Y.q..H7..q....b.b^..x4...}hH..Y ?.@...NH..oTC8aU.5.#.6....1..@3.....^i..{O@{a..-.K.%.A...../2......Sj..!\..".I.9Q..X.ro;y'Q.....I.w...'I...4.

Chrome Cache Entry: 741

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (717)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.219841148069385
Encrypted:	false
SSDEEP:	24:0pRlddWZgvIlRkJo/Vu6MO3RctoHwIfATqckxg7iQD8rnaS4NM:0RddRvIlail3u21fATqc50raRNM
MD5:	FB5A4594B9FFEF704D61BB6E6F80F145
SHA1:	B5CE60A22B42FCD31FE8B2810AAA277D545BE43B
SHA-256:	3C30F0F816ADA3A1410045D740A98E4D2FAF07FC74FFC0430678B21ABBD05138
SHA-512:	77C63E1249E4BDF2DE43C74531A64E0AFE7305662BFA46252C432318B374CE7B0A6FC24645A5FDD5E9A4B18D4D924BF74E970B6E64D20B45DFBA263E51AD5FB4
Malicious:	false
Reputation:	low
URL:	https://tsdtocl.com/
Preview:	<!doctype html>.<html>.<head>.<script>.!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=localStorage.getItem(s),o=i?i.split(t):[];if(-1!==o.indexOf(c))return n(r,{success:!0,wasAppended:!1});o.push(c);var d=o.slice(-a).join(t);localStorage.setItem(s,d);var u=localStorage.getItem(s);return n(r,{value:d,wasAppended:!0,success:u===d})}catch(e){return n(r,{success:!1})}},s=function t(a){var n;try{n=JSON.parse(a.data)}catch(e){}if(n&&n.namespace===e&&"append"===n.action)return r(n.id,n.key,n.value)};window.self!==window.top&&window.addEventListener("message",s,!1)}catch(e){}}();</script>.</head>.<body></body>.</html>

Chrome Cache Entry: 742

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	14242
Entropy (8bit):	7.958465608670452
Encrypted:	false
SSDEEP:	192:Tcwg8CN2mmQzPjJFByJuzAVAWBAo5dhplNz+8cDxkE41WTgFmq1o8NbvbAlIxbcv:5tCN2GjJFBUuzA3AodRxHmq1zAacb/8u
MD5:	A8627F1AC5929771004F34183A37B487
SHA1:	8040BB3EB6C01BD7C71C648EE86B1A63D4E8E01A
SHA-256:	0931179B7DD07B7E1CBBACDE9DD6263E34351580C1422F24D01F43155415AF9F
SHA-512:	BCC108F693E6293BFF51DD263CD2E0F7F3824DDA22EBC2602EEAA1FF47F206D006D80102B2058489DAC62501AC3CB65A4ECCB43570FDD77CE222C5F3C794DA37
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/40s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/40s/match/image.jpeg*~hmac=2c12fd53a5be89030cb5cbe3864c86aaeadc25b8667bd273e2560f2d6f9a0332
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE..........."........................................I.........................!..1AQa...."2q...TU...#3BDERS.$&6C4bdr....tu................................0.......................!Q.1.."2ARq..#a....3...............?....']G...,'LB..'M.p.$. .t.eR%..IL\.^.FnD.u....Z..L.....R.Dd.....,.!.U....(Rn..H.#/N$r..Ss}..3u.LY... ..`.&.k.f..<.=;#4w.8...[.s\E0.!.z...)....9..>.....T...$.Y.d.Ia..N..@.I c.N7D-...!.v.8:.....q..+....\..H.>...h....\..!.T...;.5..v.Q..5.4...v...?..V.'..3.......ES......s^..W.p..6g..7\|.........N..X./J:..y.:..4..Z...l.^o6.[.MK.rN..y.c@......F6).y.p..G.....z8)Gw....m[)..&\|.....{s............ML.t...#Q..VK]._om./3....?..Y......t..K.d..)[9..I....Hw...<2wS1.....49..@.a..KN....'.N...L......K..?.?P.H/4..uL..<CG..$m.2l.pH.#.,.j.....8.5.M..w$....$GQ......~./3..3........6P.I.O8...Oh..{GDF2....4.k.

Chrome Cache Entry: 743

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	102656
Entropy (8bit):	7.998319833391219
Encrypted:	true
SSDEEP:	3072:W179hYc+B/IqxhyT5TiFAdrkmyZciLOGd4BiIBM18o:M79hYc+hekmYcpGdw+t
MD5:	E50C5490044142C5E072CC8B5ED665B8
SHA1:	C6C6347E955E6B0265DC277121E36DDC98A534A8
SHA-256:	DB6CFDD2A355A0A2F2E4970AAE9196106518D2E5A88ED03D9AC9CDE691CC36C7
SHA-512:	C3BB1DA7959F512EAA888CCA19BEACF58D4B8DB4FB6D1439ED98909610FF96556166235C5529DDDE480D2422ECA27BD24D0D3876F49A4446E4ECB8CE8F4DEF21
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI....P.i...+2-.........7.$.C.......+~8..k.iw.2....L..<..W....9.....v.`......C........W....se......P."r..9.......dat.]..:.^..7..3W.'R....N..k..@.QA.....r\|....&..AA'J......h.....@..bWqT.....!S..c ..R....YK.K]+.%7....E...?.D...4......u..+.%O.k.2....m..l<~J.W. ....Z....+p..H....t.v...B...\|....\h.6R.................T9m......:AI......V.;2q_x>.@.A}Mc....3.G.j...[.).\.A.....b-Ut.#.....'....U.%.......{uV.O.(...C.......#........>.5..7bd.T'..X..1../Y.L....../m.).j.S..*....Pl..Z... ..(L%......]..h.#A..c.o.[.]!...F..........(D)?..4..;@w...r..m..J...crX9...C...".y.^\|8Z..!...cR....fXH...C..........C.Fg.s..).$..#j

Chrome Cache Entry: 744

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240228/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 745

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2304
Entropy (8bit):	7.626038296463054
Encrypted:	false
SSDEEP:	48:ZuuMRHUA3DpKX+4Epe5eYMnRpGxNYDTwsxD2esSILSGJvmkO:ZSRtDpKXJEpeTMnKy/w8B92Vmd
MD5:	6814B14222BFF2D882F811C571A57C6F
SHA1:	04D222B7F5B1E54F570233286FB057551F95AE53
SHA-256:	A76F0377A183E5D4336F954012B75E506595A6D36A127F118B2E564EDB3BAE86
SHA-512:	FEA5024D44F062DD356E87F59C93AABC91A1A86F31274C605D2BD2D08F8F5A3F047AB9F451D02C923E02FAF92F544BB80A46273ED3EC5974AAB42D5F02F1D9B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.....................---.....................$$$..........................................................................................(((....................."""......%%%......,,,777............................................................000...&&&..................yyy........fffSSS999..................###YYYaaalll.........FFF..................@@@.........xxxuuu___UUU......VVV...rrrQQQ...LLL...{{{......**................%%%......eeeBBBnnn......MMM......!!!555>>><<<....................................OOO......ppp...)))......bbb...qqq.........,,,555&&&...^^^///......ddd...JJJ......RRRDDDggg......```......(((vvv...}}}......PPP...hhh...]]]............:::......HHH...CCC777...222...000............iiiGGGXXXjjj.............................ZZZ...zzz..._A.....YtRNS......-.....`!B.&.o...0{@l.I?..1cj5S.LE...O...h#...........~..x...p..Z..w>...9...........VIDATH...XSW....{....v..n.@BB ...I@F..)H.(S. 2d(2..'..g..T.Umik.}.e!D....r.

Chrome Cache Entry: 746

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	952
Entropy (8bit):	7.44337387509704
Encrypted:	false
SSDEEP:	24:ZIQZjQuJsSm6Dw4XyVq5iI7UabYDOZab3CzM:ZIQCEtDDwk5ib+/Za7CzM
MD5:	3C40FBFDF168E3E082389CBEFA1BC22E
SHA1:	5A1C4EA23F6320E6FF92A0ADBCFC6BEC92A1F5B5
SHA-256:	9847ACBD607AAB62B3DAE12DD0CD0C47A1B8DB738A7C98804ADF403F53D00C07
SHA-512:	3ED2F065F22192A6CC6ACFEEF4F6A782326D0EB1053D261DB04B792ACFD3D92A715E043640FCFC79EF5F2CA1DDE0C8DAD2075F6E181FDC58C0DA7F4933BC3E68
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=ae507cb078909cbed31627771fd05c3f42bd428b
Preview:	......JFIF..........................................................+".."+2(2<66<LHLdd..............................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|......... . .............u..................................................B.!"a...12................................................!.1Q".A............?.+...?.............Z....+.....U...[.+.\.....#..%.:.$,<T...2.o.~MVZ.t.v{&[__..s4....k...T.G ..J.,%P..GT=...u.!..e......g.Z...K(....B.../X.,.........E.'....:.h.B.}..........o..6exJ.!.U[..A..8....a.....H._uh..}......>:.o.e'`.?'M..X......O..4v.v\|nW5]]a.\|...3..E.&8...>...e.M+m..t..&\|..XN..v....74....;..3...)+~."L....V.....b..}J..K)^..=...l...m.?...=+.."....e&.......#......~.j;.y#.gw.....Z.....V\|....z...L.T.~]eV.--.B.......3.wr.bld..Jcv'f.....~...V......{u.U[..........&...{...c ...nJ...%A..K*......?..2.....ZV.Q@...od..$i..<pf.....KH<....,...j...o.r...#!...XtBL...m6....r...%..9.TtB?...}...9..\|...>..U..tB...

Chrome Cache Entry: 747

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1182
Entropy (8bit):	7.5201658977339205
Encrypted:	false
SSDEEP:	24:wP4VO7vvldNiDLk0kBMFPuIXhfZ8YrqbT20RMVLcFqAVtpxtrOIr:N87vvbNF0NmIL8YObq0+rM7
MD5:	62673EB3F4F65DB0FD7B37AD94813B02
SHA1:	1A952E24251DB23A5FF7EB6283B6511CD4980E28
SHA-256:	F7E4E987CE794D57A5DF5904B15F1B54B421A94A864ED5655C4EB7E381BF4537
SHA-512:	1B5F2A078B7F8BE958A94EB659EDDABECBDF0790A20DD77BD5A76FA63A45155A3C20A550F0C6A173C60F3F26303F09C6F043996ABE8203CDFA51DA4E49B04072
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F41d3b880-3404-11eb-937b-3aacf54802f7&client=76f99bdb8f78cd44cc0b&signature=ab41e87f69cf3babf4095d9b8ba35b1a6bbdb360
Preview:	......JFIF.....................................................................&""&0-0>>T............................................+".."+2(2<66<LHLdd....... . .............y................................................!1"A.r.ab.................................................!..1Q..A.."2R............?.y..m..... ........=..LU....?8.d#..oMt.n.lX,....>...W=.q>OJI.U./F..O...g.c.$f.V..F...Z8..9.u.n{..\|^....!^...a.S.)..9.u-..o!K5...c..M......d...d7x.......Oi.m.p...&..\|:Uu/M6...r.Y...C..lK.]...y..V.B..7..@S..Iz....N...$=m.fC'.....,..:P..yhA2.T0.R.R..d.......B.....tM..\_CJ.@..d+.I!.:^].7;..5.k,..^......_:.{/,..pn...(.U..R-.6...E.A.M..j...IiV.@x.<...:.....Crk.9......J....R._,.....2..R..m}..b...n..Q...z....>RxH..V......A}M......+H..[...\O..QLn.S..1.......^....Y..J./vH...5OI..m7..M.5T..2u.....+J.x....j....o'.W..2.Zx...<..\......o..<.Y .....2i...A.z....D4.N.-\|.\.....^S....7".....\...).x...{..Q.....#.;..A5"q\|GM.q.,.r..#.'.y..X..1.]-g.E/*.{pH./...me(_.2Q..

Chrome Cache Entry: 748

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	51013
Entropy (8bit):	5.363772273268973
Encrypted:	false
SSDEEP:	768:EoVRVtdFtXGtpfM5kT2xNGYUJmmp09TFUVdUv2dnEAxPPLaz7O3OFDN:vztNGtFMHr3wp09ZOu2dnEANPLyP
MD5:	FB768EB931769915B1A5ABFA1373AFF8
SHA1:	3CFC091126D53F7E2C0FD61C60212DDFE1920A89
SHA-256:	ACE9BD21E8309F189AA46FD127EFD1CE47126D3614BB042D64A885D38D4F3EDC
SHA-512:	9E1A1D559F11A82EA57DFA1E58C57AD4FA197B8213F0AF5661AE0A4B7A704A503C1AA2A7002568A65885895F52DFE1959DFBC5AF7BB8AC9C9A7097F90A5F52D2
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/analytics3.js
Preview:	!function(){function fe(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:"aol_utd",filter:function(e){e=e.match(/((?:\\|\|^))gd#[^\\|]+/g)[0].split("#")[1];return 24!==e.length&&console.warn("_utd value may be malformed"),e}},RSP_COOKIE:{log:!0,key:"aol_rsp",filter:function(e){e=e.match(/(?:(\&\|^))sn=[^\&]+/g)[0].split("=")[1];return 24!==e.length&&console.warn("RSP_COOKIE value may be malformed"),e}},GUC:{log:!0,key:"_guc"},OTH:{log:!0,key:"_li",filter:function(){return"1"}}},m={},e=(this.getCookieByName=function(e){return m[e]},this.setRxx=function(e){var s=-2,t=(document.domain\|\|"").split("."),l=t.length;function c(e){return"."+t.slice(e).join(".")}function u(){var e=c(s),t="rxx",n=m[t],i=(n\|\|(i=(new Date).getTime()-14383872e5,n=parseInt(Math.random().toString().substring(2)).toString(36)+"."+i.toString(36)

Chrome Cache Entry: 749

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12312), with no line terminators
Category:	downloaded
Size (bytes):	12312
Entropy (8bit):	5.305003773789506
Encrypted:	false
SSDEEP:	384:nJdChASFdH2/zuE8iZEqFNmhsbyqUiUBYUfIjLoAY+AYSw:JsaOeesbSYrf
MD5:	7B82BFE71F7D243B6A17B01ED7161EE0
SHA1:	9F7A126CAC0B4809A103D215FBF2CE06CA273184
SHA-256:	308E174A872CBCCD1A19461A6C7E855A2BE0E57FEE9F1A1219DF8BACBA8D5E67
SHA-512:	3F0DEAF98AA8B512F7C4C484C65614FB0FB5B2273E8F1B481DA53D91856577607560F260B0C9311274732BFFEEA00CC83489B053A60FCBEB27BFEE3105204678
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/en-bundle-14.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{15:function(e,t,a){var l=a(34);e.exports=function(){$.ajax({url:"/api/products/featured",dataType:"json",success:function(e){$("#featured-products-container").html(l({featured_products:e.featured_products,i18n:{helpByProduct:"Help By Product",moreHelp:"More %s Help"}}))}})}},16:function(e,t,a){var l=a(38);e.exports=function(){var e=AolHelpGlobals.product&&AolHelpGlobals.product.sku,t="/api/articles";e&&(t="/api/products/{sku}/articles".replace("{sku}",e)),$.ajax({url:t,dataType:"json",success:function(t){$("#popular-articles").html(l({assetsUrl:AolHelpGlobals.assetsUrl,productSku:e,featured_articles:t.featured_articles,i18n:{recommendedArticles:"Recommended Articles",popularArticles:"Popular Articles",updated:"Updated",keepReading:"Keep Reading"}})),"help-central-aol-mail"!==e&&"help-central-aol-mail-verizon"!==e\|\|a(9)({contexts:[{name:"mobileaolmail",targetElementId:"aolHelp320x50-context-container",height:"auto",width:"100%",r

Chrome Cache Entry: 750

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 751

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8402), with no line terminators
Category:	downloaded
Size (bytes):	8402
Entropy (8bit):	5.293629491968292
Encrypted:	false
SSDEEP:	192:Rg4KScEc4DOw24TWZzhgn9oG4p4AewgEkebwkoGj3Gm3P36ATynVYKu6vuo:iBSDhaYTWtW9Lw0ej3fryVYKP
MD5:	115656CFA3586F5DCD18F2DCB953D015
SHA1:	40A3333AF005455A10BC669E3885F083C7E3161A
SHA-256:	723EE5056E22DC899DFCB5E8B0ECE4FE519EBA984B5A61178F77CC21C5F75C7E
SHA-512:	FB7CCF143066D0299EF68A3E849F5FE37C2D2BB15E5420F6041E01C06340FB52679618778E875D47CEF6F6F76D46FE2BAE4374C4E6CB30FB0CC74B8F84FA7873
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus.js
Preview:	(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const n=function(t,n){for(var e="".concat(t,"="),o=(n\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){var r=(o[a]\|\|"").trim();if(0===r.indexOf(e))return r.substring(e.length,r.length)}return""},e=function(n,e,o,a){(a\|\|window.document).cookie="".concat(n,"=").concat(e,";Max-Age=").concat(31536e3,";Domain=").concat(t(o),";path=/;Secure;SameSite=None")},o=function(n,e,o){(o\|\|window.document).cookie="".concat(n,"=;Max-Age=0;Domain=").concat(t(e),";path=/;Secure;SameSite=None")},a=function(t,n,e){try{var o=(e\|\|window.localStorage).getItem(t);return n?JSON.parse(o):o}catch(t){return null}},r=function(t,n,e,o){try{e?(o\|\|window.localStorage).setItem(t,JSON.stringify(n)):(o\|\|window.localStorage).setItem(t,n)}catch(t){}},i=function(t,n){try{(n\|\|window.localStorage).removeItem(t)}catch(t){}};var c="opus",d=function(t){for(var n=0,e=0;e<t.length;e++

Chrome Cache Entry: 752

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	304
Entropy (8bit):	6.624410242881031
Encrypted:	false
SSDEEP:	6:6v/lhPf5guVu+u0pyM6YqOoq2lg+9ugLDz3Cqh3UH76zEj54/zUapjp:6v/7JW+tz6WzO4gDjrzY8DpN
MD5:	F80320B7587D5726FC9C575CE8380237
SHA1:	2BCE57CE612EB458C4DAF111B45E53192FAFE74C
SHA-256:	85B6D77868D96A3C1E58BE58978E25FB24FEC4A8E17197C8B3556B919D7BF665
SHA-512:	545B0598BB64F572F74F2EAEF7BE0E6EE340D14E237776593EB176F7266B0ED55A015CAE7DEFC4CB069DDB13A48FB18D76A94810D9B140DF5754FB145F986714
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d
Preview:	.PNG........IHDR.............(-.S...TPLTEGpL.............................bb......88.ii.....++....KK..ww....VV......kH......tRNS.........1..Q]....IDAT..e.Y.. .@..*.l..v.{N.db......%.u.R0.3y8.4...?.... ..w....(...l9..=.\|.+7~a..U...[.d..T`T....vM%..K..........V............?-...v......IEND.B`.

Chrome Cache Entry: 753

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenPGP Secret Key
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	4.0
Encrypted:	false
SSDEEP:	3:Ja4Fzf:Pp
MD5:	6626573EF18846D45690B362A392D01F
SHA1:	AC7FA98D1C6706542ACD4BAED3D44C7C6FE15878
SHA-256:	44355EE5A31EE119F735B7F72FF8073B742A2CAEA0ECBC91D44D5C567D6557CC
SHA-512:	998A82AE67C61ECB95F399B7C1BFED342A00B00D779444FAE905B40CB24E3F8403271782EE947145325BE1E16F8DC97DF241329153849A4EBE3A13DB276B1C52
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNzBfMzczNzJiY2Y5OTgwNzIyYmFhMjJjMjE2ZmIzZjJiMTdkNzQyNjBkNTk1YzM1Yjk2MTUyOWU3ZWIzZTQ1ZDhmNA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ
Preview:	...T...../.I7...

Chrome Cache Entry: 754

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3
Category:	downloaded
Size (bytes):	32876
Entropy (8bit):	7.955962044542817
Encrypted:	false
SSDEEP:	768:/8crNhUQVrzy5hk3I8bRN/Mnfc0P1/qX22/K4KK0EUlNr:/8Uhs8bfMnb/qG2/bK7N
MD5:	F037C63994AD5D6119F36567CAEAA070
SHA1:	C8CAB51B0E67D1848896C69AEBBE646E011E3406
SHA-256:	311C1DC1A0C740AD22097F94FE8D65E5C3C718A9FE38FA0231B0C550A43F10A7
SHA-512:	629CB4E7C098DECC6E154461B3191EDECBF33A208264666C41244B247AA1B7C3F2173EC754D06BCA5FC782609C0CB57A574A0D506684B02ACC8C0879DDD72F09
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2F462e6bf0-d9a6-11ee-8fdb-97e4a78cac99&client=76f99bdb8f78cd44cc0b&signature=80f3b8ccdec8c8efc49aee8b4ef4a62513d778c4
Preview:	......JFIF....................................................!...!.1&""&18/-/8D==DVQVpp.......................................!...!.1&""&18/-/8D==DVQVpp......... .."..........2...............................................................u..Q..........2I.1!.d...@....3=.$l.O...V<2....,f...Zd.4.Fe...L..w7I:.9.u'q!$...%...\|..H..1...t.q.i..`4(vB.U.l...:.f.1.EM..{..t..4c..C.4V.b...}+....u. O.-..hH.,.....f..I.U...)+... 4s..'32y...g.FF.`..Z.G.n.E6iF...s....l.b.T....[..\..f..K..uz8a.....7.....X..], t(.%.s\|.j.....X.P..p.. .9....F1.....2h.506.:9...-..h.....!.f.S.N...Z.7.i..f..H...E.2AU...kBH... Cb.s5.ZQA...U..#.t.\...5....$.X.MT..{.4.O..9`.J.....}.r...r...........Kz.CQ..pfY.t.3.F..m..A.q.8&.I...<VM...~....P.............p.bB.a+SE].-.em.6.....9^.2.1^..s..UY.!.sC........G<.#...$......\7..F...ET.w.....Qr..5o`.t.F....F\|..B.3H.^^..4&.a9..(...f..cHr.U7.fN.L......\|B6_..a..5[ ..\|..kN..f4...%.e.3.X.j......k%.R.Q.r..r.$H....C.[.Dek. ....(.:HB@..-a...-...R..i.Ws

Chrome Cache Entry: 755

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	10088
Entropy (8bit):	7.95253893746316
Encrypted:	false
SSDEEP:	192:/8GWfjOfky3aS0+oI9EV/8BJePEMc7vCp9DRrvvFARpWXlrjJXP1bUH5jUz:/8Pj5S79EV/8BJeMMaChjFAp+lrj5PVz
MD5:	FA1778FBC0A931DC76D48F4C45CD77C3
SHA1:	4F6CE7EF83C6D1C3AE798776B41824B6F274D033
SHA-256:	D4E4D2BDA11237CA03563442F95B48644DAA00FA2E70180B26BE6E5F247E45D1
SHA-512:	6CFBB90C1F12F68C7D0AB2A30E06B5CDA1FA067BA5F3801DAD49FE85914AA3E84C695F37C96A310657AF55AD9199B309D87BB0DB93823FC721D373023F5A2685
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4................................................................7........3..^.a......h..[.8...P7.....nt.....WA.:.....VI.sW..K..V......Oy.K.3.,....\|...\|.A..j./j..W...L..........\|.>.IJG.9_.m.g.1d=:n.......(!W..j."..\|..<.J.Z.=Wj.u9v..+....._j.....6.P.e..GB)...#..`};0i.9........3-..(.\T.f."...#.Z......d..'.....\.J../(./..........i.]._TR..3.l..P..d.q.....gw>Wuo0.......a.....f.I.Y...w..M........Y......S@..y..dC3.h.{.{.m.s....9.sQ[.....k...8.Lm..>...[.0([..Y'^7o.&.k..#..8..$.e.a......+..k.lL.Z...3W.U.&<.y....2..b.....4..)nL4}G,..(.].9._7V...5.cf.m..]E.=S{\.."....y>..Uo&..H!...a.Z.&....Y.S..n..;8..).!..N.s..'..BqU)....!.=...........`....\..nu5e..]y..j.<..r..#.....e@.`...r..T.\j.@..%Z^5X2.&\J`&.e.../].\|...L.^I6...oK..O.g..x^..^...'\.JLl..q.../......+0./.n...,...g..'L.NV...

Chrome Cache Entry: 756

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3328
Entropy (8bit):	7.9073035026964895
Encrypted:	false
SSDEEP:	96:6xOWKNAghbnUwL0H8W7x5FlQ4uyWxPkpBjhwIiQRcIW:6xOWGAWbUaujPGyLpBjhwIi6e
MD5:	99F89D94EBCFF9A04EF4C4174C7BC13A
SHA1:	E3C04F617638DD5E9ACFB7E3C970B7CD2A72DC21
SHA-256:	E4D7AD9F57F6CFAB7610B8B0855C7937F5EC119BE17AC6CF6377553C5E735F98
SHA-512:	2529E4430753AD3D8CC53A3E16141BF46C18849E699F09E5B91A1F5864CAEACA0548042BF8884B7CFC033765031118343E15125489F270A5E0F9949B407432BD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/adbuilder/gemini.png
Preview:	.PNG........IHDR...`...`......w8....sRGB.........IDATx...lUW...+....q..S......`esB.......!@[hg.Nc0sn..iD..B..qA.1.....9..7.t..B..[.l].@.~~......s.y.O.$...s~....;...y}".jkk.G.%yyy./_...s#..jjjNE...)\WW..x<....[u...X.t......a...]A.~...........?...Z...).\.pa.@.....2..!..0.G...,m.S....\|. li.r...../P.x...5..../..:....D..].../.~BI...gz..@.._.N.o...4.J...........C..m...z..=..r..Y..... ;..$..q5..a..j)b.....&c\|.m.N.b......7\.t.Id... ...\..\|.nD...,@....\O....s.~..V.(......yk\|oy.....3lL.i........k..&...S...`.fs...+.u..;}...2./..%..b.v.........^.((.\|EE.........L.m..k...oU(!..q...P..\|..3%.L.s.4On.Ia.....N.M...<UK7.}.y.Y...]tI.$.v.9w.iW.M..eJ.[.J..a..7.K.[}..%...:m......$.....&.$t..v....1.~.-}.N...q.!.q.`.tG.+v...C.&......[n..i..G.ygF..\`&.....p..^vJ.....0...m.....+s..m...!.....$.......T.D.8..0.G..r......nM......\|....mXn.K..-[.0i..j'......A..d.=.O...0....lq./P..%.....$.\u.\|.;."..f)`.%h..yj..\|2....7.[6gH[I...\|.i..P*o..)....{.6.x<....\|....\|+3

Chrome Cache Entry: 757

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10192611&ec=aolmailrtg&gtmcb=2055888851
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 758

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2058
Entropy (8bit):	7.693955237627686
Encrypted:	false
SSDEEP:	48:rHNIWaW0UOi6P07xPgH+zGA4INM4oEF8DiaCCgMu59:rHNna7UOnP01BiFIi4/UijXMu59
MD5:	347467D488FF05AD50B871325961E71D
SHA1:	F149355185F7C53BE9E2A68881F0CD4C73DC8898
SHA-256:	D44854FE8E0F29260968FC5D780E35116FBB83A1FF92BD288C1368D5FC650EEE
SHA-512:	1B82F66F571DF567B727CF1CA88164B39783FC1C922463B539C2C8139C4803CB18CEB849BDAEE10C6350CF19DCCC487D839478F160E4A7D281FDA21363A027AA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL................................v...........z........................Q..............p..b..\......y.........................................................e............q.........m.............v.....r.....{..k.............j.........X........................................................h....................................` .Y..^... ..(..$.` .."..7...i8!9)"..D<+!&#"..1.....H..!..W.K.. "##!..5..;.l..t..R N0 .."^5!.V .@![4 .K!.G!.R .\..I!..._ ..@.Z ..,.^..Z.4*....O .....L.]..B!.&"R1 .....{......r..N!.Y...v.U..]..[..i.vT.......U....^.....".C!F-!.._.L!...M!I.!.{.......n..@!,%"0&".b ]H.b6!..q;!l9!B,!\|>!.T V2!.w..]..Y..X ....!&!.\|..d..[....H....N..P.U>..Z.e7!gE....v..c.......X ...f...e...a ..4}L .w.y>!..A.m....xtRNS...6......&...f._?JvZ..I.S...........;....(\|..."3..L`..j.....e...9.........N.m....,.......n.....Z...U..............=.<...AIDAT....u\......1x78.!( .)g`..`...q}.y..}~..+`....

Chrome Cache Entry: 759

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	457
Entropy (8bit):	7.299960261495616
Encrypted:	false
SSDEEP:	12:6v/7ehuN3w/ceK0xisiruQLtsFmGarLd1sAx:HuNgEh0xtiFBsIG4S2
MD5:	12B179DFAC257BA3CF6EADBC3D4F5057
SHA1:	D0993279B43D64470FFC2DD424759683F7B16A65
SHA-256:	17977224589434F01D00AF1410495F767C9C04C10FF85C3D5D4C2EE156EDB040
SHA-512:	A9EA14CF74307493197715BD83C767FBBEB7F6A977D39DBD184E71CEF8579E3C4FB28A6E4B79327BBC340E3477989EB87E6965866FBD3AB164C168522E4E071F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTEGpL"''?GP3;D'17/5=!)0"0..... 2:C2:C...-7?9;BIPU.!)(18......-6?18@...................rvxilq...............%.#1........RW[/59[^b..................`cccfg.........q.......tRNS........1.1.....1....[).....IDAT..-..B.0.........B.Q2dC...fL}....\|.X..B.U...u. .;.#v......a(..16....RM..U.......Z......D.TV....".....'H.1.;....i....).).S.._..6.t@...W.sYq!v.@o.@.Kp.......!.....{-kJ....f.~.@]..c......IEND.B`.

Chrome Cache Entry: 760

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836)
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	5.1050354378080645
Encrypted:	false
SSDEEP:	48:YozhS8pvCw80kSqgutC9GmqiKdcNHv1u+xOs/WK+GbE1nY5:3hhCwQIN95qtk9fos8O
MD5:	915CCD933B879101E81B4465E2D17DCB
SHA1:	AA6BC3376FE1901CFD5790C92F4C3B3EF367A61C
SHA-256:	512C529C029AE33BF44423906AB18AD7BA05B7E2AD1F2FB93E5B782B2A496E4E
SHA-512:	F04B57D0BAE975F99E2E43BC07068BCCE61259E21A3492D0CA59D6F1C7D68F2B249237808142E9E67EA87BB2D9890128D2E5439C6CA5D40DCA661C0B03AA60B8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/notification_banner.915ccd933b879101.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"use strict";var e={d:function(t,n){for(var o in n)e.o(n,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:n[o]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};function n(e){return n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},n(e)}function o(e,t){for(var n=0;n<t.length;n++){var o=t[n];o.enumerable=o.enumerable\|\|!1,o.configurable=!0,"value"in o&&(o.writable=!0),Object.definePro

Chrome Cache Entry: 761

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=12&ns_st_sp=1&ns_st_sc=1&ns_st_psq=6&ns_st_asq=6&ns_st_sq=6&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=11422&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11422&ns_st_dpt=1952&ns_st_ipt=431&ns_st_ap=11422&ns_st_dap=1952&ns_st_et=31851&ns_st_det=1952&ns_st_upc=11422&ns_st_dupc=1952&ns_st_iupc=431&ns_st_upa=11422&ns_st_dupa=1952&ns_st_iupa=431&ns_st_lpc=11422&ns_st_dlpc=1952&ns_st_lpa=11422&ns_st_dlpa=1952&ns_st_pa=11422&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508450190&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=6&ns_st_dpc=1&ns_st_pp=6&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 762

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	706
Entropy (8bit):	7.548477864749643
Encrypted:	false
SSDEEP:	12:6v/7gZbenw27lf9jGpJ9c7MMGt8d/su+eMmy87Gk1DoQWH5C3bX3/s:tZmmpJ9z89jy8qk1C5Cj0
MD5:	B12B87CFFDAE1BC42B921FCF2BD9CF4C
SHA1:	C707F3E68D75D36B21C4D11945EC0F104D0BFEBC
SHA-256:	F6747270DB8CA343F3A491FC790D6DFB6FB051723BC222566A7D292E6F4A8726
SHA-512:	D0FC28243CD89CE5EFE47A4E37C8F2EE293441CB3E7F71EF9690C754B3ECE0AAE42390E670AB0577F2AC781EC73C2C5C6C466985A5DAA0C23F27109CBB71F9B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.......j....-PLTE/../../../../../../.....H.....k..............N.F.....tRNS..W.0.%......>IDATX..1O.1..Oc..&...0..'0."R...- 8..`...H...qUL....3..^.Jh.oq...\.......xu.a.kd.m.:.-..\+.+.yba...++H..bi{...X.6.v.#....%._ .[a.&.8d@...Y....q.@.2.8.i..9.P..y.Pr..2 ....0.k<.p.^..(.i....F.@.9.(....h..z..zt.e...@...zJ..d....@.....@.k..5K.nG..3..E.5=...-..0.g...........XuU.C...h.?......o.@...=D.?.....A.e.....#i...SMe..M.....uCh..6...uY...XX.....#...k'. L...w.v8g.$.02.........oW.<..k.P......0....'"..e.....uk)...I4.A.#.j..S..nr$..X'.6$.7x.W.O.;.-..Gjn..].{....Gi.Y.\|P?..B?.8.A...`O.8.n.h...b.d.....^.......&tZ.N..%>yE......./........U..2.s]...b9..w.C....IEND.B`.

Chrome Cache Entry: 763

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1480
Entropy (8bit):	7.630212275449081
Encrypted:	false
SSDEEP:	24:wP1Patdhl8mkeSUzQJI96EmEadRmkol+IvJ+BBAOFRpfdY2gKqEy8zRrRfV:Nx8e5AaDIM+I92XdXgKqX8zDV
MD5:	79AAB87C4D862190541FA781B46DD8AE
SHA1:	E08F1DE9384DFE823C2249C14FF50565F8E253CA
SHA-256:	10A659F38BAD59D2996EC05FA23B2B07FD25DF5833B50B1ACB20B2912566E368
SHA-512:	0528832CD4799FD00AEB74666397CC0B4A93FCEC0BC3B78947ADCF956E16069ABD6A69BC8C9B1FA145E85B1C82BA8A7D767D373A0DD62DAD6C1DCEC3951439DC
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . .............y................................................a..1A.!".2.................................................!..1A.aq"...............?.uu..)....k..y..%....a.....m.X.Z:Q.N8iXz.C...}..J)..%...<.J}..CA..S...k.U[..i$%G....i.C......Ha.yU...'U.#..e.2].4...~/....9.7:.i.UR:...B........F3).K.!....\|.Lvk-..IJ...\|+......=...g.........O..A.za.i..6[m........Z&>...ubv&.].....z.......4W.{v.....9.Z...R......C;.b.4.mm.n.X.0.....FS......y}&.j..+..rX..H.A.."..(..b...v.zq[.+...R@/2....4.R$.6.! \|j.....t$e.D.(....(Q...fdQ.....O.#FN.iXHZ)..............$..yPu...n.H,..5...<...Q...Q..6....]v...8.7.t...rw.N....8.s...W.S&..,rU.4.../..9RO<..u....y.....zJ..<.?.<..:...)..M."hYG......#.'-N.d.....z..C..Y[.......2.O..:.K'v.8..o].[@...n.....H.y^..\|...F.......k..G..c#.7wTo..?d.T.....Ojz.^S.....lsAP%......T.....

Chrome Cache Entry: 764

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2156
Entropy (8bit):	4.343163424788496
Encrypted:	false
SSDEEP:	48:fIB3UxpqdZMrtmQbfjyFHbx2aIb4X+HXR+bGVMG:edZ4JXyFHl8CGCG
MD5:	058EB33A1D275F055A3C550F0ACE4820
SHA1:	85C714A4DC82B10A67A6106CF5748197C1F555E5
SHA-256:	438F9CFD06E96007840E8E7186BD068A00E90FFA7258F7C1DDC3BD111DEB1362
SHA-512:	276C7E3CD14C7E7711A3616866115DE71B21AF1CBAD238695D42983651981A8878F26C0C208219831D1DBD65D4C1FC789D7E75C249E7743ADBD7EB5B88189550
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/tandt/AOL/LandingPages/ad-free_aol_mail/pricetags.svg
Preview:	<svg width="65" height="50" viewBox="0 0 65 50" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1_337)">.<path d="M62.6777 0H47.2015C46.1321 0 44.7655 0.581905 44.0335 1.34643L41.9752 3.42024C41.675 3.72357 41.678 4.21417 41.9814 4.51441C42.2816 4.81464 42.7753 4.8131 43.0755 4.50976L45.1401 2.42667C45.5811 1.96702 46.5639 1.54762 47.2015 1.54762H62.6777C63.1033 1.54762 63.4515 1.89429 63.4515 2.32143V17.8735C63.4515 18.5095 63.0321 19.4923 62.5632 19.9426L40.7711 41.566C40.4601 41.8615 39.9432 41.8538 39.6414 41.5536L35.5433 37.4539C35.2415 37.1521 34.7509 37.1521 34.4491 37.4539C34.1473 37.7557 34.1473 38.2463 34.4491 38.5481L38.5472 42.6477C39.0022 43.1012 39.6058 43.3302 40.2094 43.3302C40.8005 43.3302 41.3933 43.112 41.8529 42.674L63.6465 21.0492C64.4188 20.3079 65.0007 18.9429 65.0007 17.8735V2.32143C64.9991 1.04155 63.9576 0 62.6777 0Z" fill="white"/>.<path d="M25.476 6.19043C24.4066 6.19043 23.0401 6.77233 22.3065 7.53686L0.650687 29.4078C-0.228361 30.3

Chrome Cache Entry: 765

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1653
Entropy (8bit):	4.726874964247974
Encrypted:	false
SSDEEP:	24:IDmIXDaMsIXD3WIXDN0IXDZh2IXD/32IXD8esIXDSTIoWD8jg66/o66cbnXM1qKL:UmSaMsS3WSN0SZ8Sf2S8FSSToX/6Uwq4
MD5:	6BDDA2B37274EAED3FD8895766C49E86
SHA1:	C84EE0DE4E32CED5AE85512CA26B02EF5ABEC90B
SHA-256:	3BD42023325626FC71C851EF1F83A712012B15D0C553EFB5F66277EFC86549C5
SHA-512:	A7D7DE31A10E69EDF168D49DB6BA7870B3DE108DB6AB11C8EDBF93FD39A7A9CFEC34DAFD6822E3DE7EFF8CCE3438102792CB8AC1477E016F156194C6500CBA3F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/metadata/manifest.json
Preview:	{. "name": "Aol",. "icons": [. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-36x36.png",. "sizes": "36x36",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-48x48.png",. "sizes": "48x48",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-72x72.png",. "sizes": "72x72",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-96x96.png",. "sizes": "96x96",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-114x114.png",. "sizes": "114x114",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-144x144.png",. "sizes": "144x144",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-192x192.png",. "sizes":

Chrome Cache Entry: 766

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1563)
Category:	downloaded
Size (bytes):	1629
Entropy (8bit):	5.237381893019944
Encrypted:	false
SSDEEP:	48:QIpnkpY7oHYIT4L6nP6e5QHxjPuyD8x3Ma9BwstB:zpkVYNL6nP6JdAMU
MD5:	D342443B0BEC79F083AE8C9FE657371A
SHA1:	1FE74D1B0678646DB67893D435DE611706DD283D
SHA-256:	6A9CE2E0550680AAF3ED5DE5FF2E1FD9CCC5E6BFBA68AA9ED14F2E549253D3EB
SHA-512:	3A2E75B00BB26ADF73C6FDCF257BBFFC5B67E1515F0208B89385C9F62057B6BBCD965E1971EF710F7A31CD6DE03C4B9B9466A9C3F5370A6FAC639B217871F602
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/parallax.js
Preview:	/! For license information please see parallax.js.LICENSE.txt /.this.LIBRO=this.LIBRO\|\|{},this.LIBRO.parallax=function(t){"use strict";var e=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n=function(t){return t.constructor===Object},r=function(t,i,o,a){for(var l in void 0===o&&(o=!1),void 0===a&&(a=!1),t)if(e(t,l)&&e(i,l))if(n(t[l]))r(t[l],i[l],o,a);else{var d=i[l];!o\|\|"true"!==d&&"false"!==d\|\|(d="true"===d),a&&"string"==typeof d&&/^[0-9]+(.[0-9]+?)$/.test(d)&&(d=Number(d)),t[l]=d}},i=[];function o(){i.forEach((function(t){return function(t){var e=t.clientHeight,n=t.getBoundingClientRect(),i=n.top+e/2,o=window.innerHeight/2,a={speed:.2,break:768},l=t.getAttribute("data-parallax").split(";").reduce((function(t,e){var n=function(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator];if(!n)return t;var r,i,o=n.call(t),a=[];try{for(;(void 0===e\|\|e-- >0)&&!(r=o.next()).done;)a.push(r.value)}catch(t){i={error:t}}finally{try{r&&!r.done&&(n=o.return)&&n.call(o)}finally{if(

Chrome Cache Entry: 767

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 690 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48096
Entropy (8bit):	7.898215003733756
Encrypted:	false
SSDEEP:	768:UZAzrdxsPx2RcQokm++BCj6OxH3//wdbYEtZ/hFCnOZi7NdZwrCt:06rGxCNxX/4nLhZZi73ZuCt
MD5:	C2D3E450E3D2713695B001271660B07C
SHA1:	3EECD761C6A897025ED788FE0C9593891F083257
SHA-256:	70FD5611BFD459154EAB8B7C42538806C1D9CFBA2C266667543432411F5B19CB
SHA-512:	E66A6D698E954275CBA9C2AF09A6A213EC201B9FE1C5A010ACCF22D5AE7FC0BC50D2A65BA26AE9245A3E007E95C15B7594BCDDB747D9E637FDEE6E05B1F3F4BC
Malicious:	false
Reputation:	low
URL:	https://membership-cdn.s3.amazonaws.com/tandt/AOL/Exit+Intent/aol_add_free_mail_desktop_exint.png
Preview:	.PNG........IHDR................l....sRGB........DeXIfMM........i........................................................g.....@.IDATx....d.u.y....7czzz03.`f0.Fp$@..A.E.KJ.D..5......]qC.TPKQ...Q..I.....`.....3.}wUu.J.3..oVVeVWueVefeV.........~.;...T......=....q..........P.J@.(.%....Z.D.....M<.../[,.<...,w......%..3..w[V.S.J@.(.%.....P.u"0.~.....A.\....,D.....c...s%.....P.J@.(.%.@.7..oC.~u.m.e..A.Z..w..+x.....o...P.J@.(.%...H.Z.+..K.[...._.B._...W.J@.(.%.....P..H.o.._.u.P..R..../T....P.J@.(.%...@...F.V]h..YXc..Kw.mJ@.(.%.....P.J.U..\.g..Y.Xf'......!.q).%.....P.J@......2.A..).T...6%.....P.J@.(.V&@.J..P@1;...%.mJ@.(.%.....P..N.yf.(bY.KEl......P.J@.(.%...@....c..,;.M.(.%.....P.J@.......=.N#..%.....P.J@.(..8A!;.(...P.J@.(.%...@...f.W......u.J@.(.%.....P.[.@.Bv....f.{.....P.J@.(.%.N..Z.M.(.%.....P.J@......mw.t.J@.(.%.....P.$.BV..%.....P.J@.(..$.B.-...Z.(.%.....P.J@....J@.(.%.....P.mI@.l[.6...P.J@.(.%.....Y=....P.J@.(.%......<l:h%.....P.J@.(...z.(.%.....P.J@..%...my.t.

Chrome Cache Entry: 768

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50532, version 4.262
Category:	downloaded
Size (bytes):	50532
Entropy (8bit):	7.995865554461643
Encrypted:	true
SSDEEP:	768:567EFgmAkNoY842Mv/3rvxAL86QqRWL5DMnDGYPdV8uKLIrK50WEAqaEIu0PWjkC:5TF1/T842mbvmIhL+HtKc4LH40PWjkC
MD5:	6BC69312C74A1F1D8A57DE89E9B00CE4
SHA1:	3146B72E04C9BE2B0E19AC310E18AE29A0AAD257
SHA-256:	D269F58F7702BFE19D3BDC9616E00DC7B933481431E23441B7C88BE3097BEF14
SHA-512:	8BBE1421CDBC37E36E7865E647DC5DC57C29F7DA966EDC251E62AEAAB9A116FFD446CB7604B3105011741E7B40D8603645528BB53235DDABCB32CC57964A3F95
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff2
Preview:	wOF2.......d......\..............................@..L..x.`..R......}.6.$.....H.. ..p...[..r...U..t'.O........5....x..T1J......Hb.v.......b.y.H....T.......p7$JG6i..:..bydr..e.~#..,d.Le....X.v/..87..:...ZGQ....hr....o.T7.:.....g..I...z..T..WVI......G........r.Yr..ewaps...S.EJ..>.......f....DJv.T.y6..(......Y..;.A.WIF.....D%.'..9g.._.....;..!..h.[......H.!^.w.%..+"............S.T..v.XE..[.P{.UcU[....l. @ .!&'j{"...irw.KrQ[L.<...j@.......R./....Ok\|YU.3.g...hl.Jf..d....2,...an.S.DZ.R"Bb.0..`l.....QcoT.T..3Pi.1.NQO....o.7...hm{_??.'ss.U.Z.6..@...%9.O......dV8`..H,&.p.....oS5..9o\;.6N....R..A.Q.$..q..S...}....7..,.i....?.....e.n.A...\F9.U..8,.X.......".......F.....\..._1....Z.{...{..>}".....L.\&^&^'wr......N..A.*./..@N..p?c......d.....s...Rg.....'a....G....ht....R.T..J.P....J.R....g..-...b.R~...w]....@.AHLY.\............p,.%dKrdn.......:....M.A..G...`.4...B.........1/0.'..b........B.w.l.....}.. ...k...<w.0'..g......_K...L..'.@......m.;\.9,.

Chrome Cache Entry: 769

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (691), with no line terminators
Category:	downloaded
Size (bytes):	691
Entropy (8bit):	5.179908699095723
Encrypted:	false
SSDEEP:	12:EBj9kgz+dvqKfKKFxxRWy+7VEN+DNodP17n+B6RG5yX+muf:cj9nwvxiKDxRWVNorG6k5smf
MD5:	3C4921203DB8316AA4C29B974CF864AB
SHA1:	835CDA84BE4B81FEFF44B9BBA104F73F386EF23D
SHA-256:	4A03B0D0E8018C6B6A965387859E956274659516CC1C72348718D980AECFC059
SHA-512:	928C25507715774ACA0A8679F38156307B281521411357B0C81FC9DFBE4F807851FBE62A81FB320C076EA7AA2AB35C5873BE2833146856D51D5B5B70C477F1CF
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/tooltip.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.tooltip=function(t){"use strict";var o;function e(e){t.dom.getClosestWithClassName(e.target,o.TOOLTIP_CLASS)\|\|i()}function i(){t.dom.removeListener(document,"click",i),t.dom.removeClass(t.dom.getElements("."+o.TOOLTIP_CLASS),o.ACTIVE_CLASS)}!function(t){t.ACTIVE_CLASS="tooltip--is-active",t.TOOLTIP_CLASS="tooltip",t.TOOLTIP_CONTENT_CLASS="tooltip__content"}(o\|\|(o={})),t.dom.addListener("."+o.TOOLTIP_CLASS,"click",(function(n){var s=n.currentTarget;t.dom.hasClass(s,o.ACTIVE_CLASS)?t.dom.isInside(n.target,"."+o.TOOLTIP_CONTENT_CLASS)\|\|i():(i(),function(i){t.dom.addClass(i,o.ACTIVE_CLASS),t.dom.addListener(document,"click",e)}(s))}))}(LIBRO.common);

Chrome Cache Entry: 770

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.592811285920767
Encrypted:	false
SSDEEP:	3:YQ3/eHir7BAprRHBScVHHEBVLwWLW6n:YQ3OYcVEzwMW6
MD5:	B9F3E8D248648AA0465BC0CA25DB1B9A
SHA1:	131916DC335D2049990369D7011DABB2388DE339
SHA-256:	B549887C4FD1C0354FB7E65DFE578DC8894162674B1B63ACED6BEB077DC8A63D
SHA-512:	6061AD3622728769B79F36722F6B8836BC356BBAD692A3F9AFEFBFE7FD884501005C0B509CE2BE894A5DEDBC6F88C1B54C526EF0E0F51CF4A5730CAC32924FD6
Malicious:	false
Reputation:	low
URL:	https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8
Preview:	{"user":{"id":"8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4","isNewUser":false}}

Chrome Cache Entry: 771

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2323
Entropy (8bit):	5.073134355096355
Encrypted:	false
SSDEEP:	48:ByTCWL/TCkTCQMV8d1CWLR7LLO7aHtQFL0tTiA7Hb3+GHtQFL0y:g773Ha+wKb7jXwj
MD5:	9845F4F8FCA19653DDC63008DE59B3EC
SHA1:	80A36103AD1F062CD53F00EC40BAC8D9E05BB1D5
SHA-256:	14A44CC9A629912015AE348331FA19058B9F4E217225673316350F30E0BCD8EE
SHA-512:	E74C0D5D04029016BFA79AD6FB242A45CE79E0CF4B604C910DF9398FFE19B0488D5EBD4AFE0B50E73C0D4CBD6A5521F3B2C56A7CFDF2EFE06C435DB898F75AFF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/26-cloudy.svg
Preview:	<svg width="128" height="128" viewBox="0 0 128 128" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M60.8 26C47.2 26.4 36 37.2 34.4 50.4C30 49.6 25.2 49.6 20 52.8C14.8 56 11.2 61.2 10 67.2C9.6 70.8 10 74 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6 82 90.4 69.2 90 53.6C89.6 38 76.4 25.2 60.8 26Z" fill="url(#paint0_linear_104_169)"/>.<path d="M60.8 26C47.2 26.4 36 37.2 34.4 50.4C30 49.6 25.2 49.6 20 52.8C14.8 56 11.2 61.2 10 67.2C9.6 70.8 10 74 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6 82 90.4 69.2 90 53.6C89.6 38 76.4 25.2 60.8 26Z" fill="black" fill-opacity="0.07"/>.<path d="M60.8 26C47.2 26.4 36 37.2 34.4 50.4C30 49.6 25.2 49.6 20 52.8C14.8 56 11.2 61.2 10 67.2C9.6 70.8 10 74 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6 82 90.4 69.2 90 53.6C89.6 38 76.4 25.2 60.8 26Z" fill="#7DCBFF" fill-opacity="0.04"/>.<g opacity="0.4">.<path fill-rule="evenodd" clip-rule="evenodd" d="M88.0572 44L77.1215 44L9.98687 72.2391C10.1822 73.9284 10.5866 75.5642 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6

Chrome Cache Entry: 772

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 773

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37807)
Category:	downloaded
Size (bytes):	37932
Entropy (8bit):	5.357254099093462
Encrypted:	false
SSDEEP:	768:VaFBCv9Vug+prIIiZ+vEECg1rjsAEPLuhGTpYJrIDFeJ1:nVukBUjsAEPLrpYJrIDFk1
MD5:	235D7D2342A55C512BB28D2B6C89FF19
SHA1:	4940E9A98BDF5B6CE03C40567C67EF7E7657AF63
SHA-256:	B85A0C134B0A6321A3404AF0B9B264B781D23D621DD0AB5BA5A0BF2B681C6C22
SHA-512:	05D4ED3B57FCC623B1FD9AC1673A7F8B8EF13B4F622A19D5ED989584CB4911B6096C1B0AC9B8CE27F265CD3B3B89B719B79CAF8CB5BFA04944B7FE667D213EA8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/yahoo_sports_scores.235d7d2342a55c51.js
Preview:	/! For license information please see yahoo_sports_scores.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e,t={2127:function(e){var t=["img","link","meta","br","hr","input","iframe"],n=["svg","path","circle","rect","polygon","defs","linearGradient","stop","ellipse","text"],r=function(e,t){for(var n=!1,r=0;r<e.length;r+=1)if(e[r]===t){n=!0;break}return n},o=function(e){return null!==e},a=function(e){return e instanceof Node?e:"string"==typeof e\|\|"number"==typeof e?document.createTextNode(e):null},i=function(e,t){if("function"==typeof e)return e();if("string"!=typeof e)return null;for(var i=document.createDocumentFragment(),s=r(n,e)?document.createElementNS("http://www.w3.org/2000/svg",e):document.createElement(e),c=arguments.length,l=new Array(c>2?c-2:0),u=2;u<c;u

Chrome Cache Entry: 774

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2830)
Category:	downloaded
Size (bytes):	194272
Entropy (8bit):	5.528686267029782
Encrypted:	false
SSDEEP:	3072:LUBufEoR1uZboJE8QMHC/alPfB2HbcGMUzbdlnD5Vglg0NIduHG:ok1kbGOalP8BfdlnD5VOhNIdum
MD5:	B624BAB59E55EFFA196E1FFF1E338834
SHA1:	0C1F1095C409AD102201E2B4B77274BC9906CF8F
SHA-256:	175E975AC6E305F62C69E062F10B85FE67FC174DA3C008385759ABA6129D20AC
SHA-512:	6A50FCAE1DBB89444A85558AC331E8492275B55C9C67604FF8FC2E3F41E704BCE1A5BDAF240766BC111057792BA90C20D5DB8ADB45F7B7B2D3326207E4D7ABDE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-8867627&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){return a.raw=a},ea=function(a,b){a.raw=b;return a},fa=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Err

Chrome Cache Entry: 775

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3761), with no line terminators
Category:	downloaded
Size (bytes):	3761
Entropy (8bit):	5.174588727156002
Encrypted:	false
SSDEEP:	96:chnP7A+190RN/gZxPPJVgpggvWE9+S9SqOXC3d:cV7AgSKV5gvWEoS9S1ed
MD5:	33492FF0A954BB818685455CC95385DC
SHA1:	2606BC7EC02A0EB3020EC5BD95F109F1216756F9
SHA-256:	D007C5FA284DD12261667BBBCAA694CC97FDE82EB8D15E5595DF52347A413C66
SHA-512:	CA052343B3646CEC6BD8923A66482C54E0794EE94FE73AD5AB1EC0C43472FE51FCDC6E5577C34545D4E6C323377F245C8BA432C411ED2329DD063F052A87A095
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/comparison-table.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.comparisonTable=function(t){"use strict";function e(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator];if(!n)return t;var o,i,a=n.call(t),r=[];try{for(;(void 0===e\|\|e-- >0)&&!(o=a.next()).done;)r.push(o.value)}catch(t){i={error:t}}finally{try{o&&!o.done&&(n=a.return)&&n.call(a)}finally{if(i)throw i.error}}return r}function n(t,e,n){if(n\|\|2===arguments.length)for(var o,i=0,a=e.length;i<a;i++)!o&&i in e\|\|(o\|\|(o=Array.prototype.slice.call(e,0,i)),o[i]=e[i]);return t.concat(o\|\|Array.prototype.slice.call(e))}var o,i="comparison-table__column--expand";function a(){for(var o,i=[],a=0;a<arguments.length;a++)i[a]=arguments[a];t.store.debug&&(o=t.logger.tag("comparison-table")).info.apply(o,n([],e(i),!1))}function r(){t.dom.equalHeights(".comparison-table__row"),window.innerWidth>768?t.dom.equalHeights(".comparison-table__header"):t.dom.applyFunction(".comparison-table__header",(function(t){return t.setAttribute("style","height: auto")}))}var c=t.dom.th

Chrome Cache Entry: 776

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8390), with no line terminators
Category:	downloaded
Size (bytes):	8390
Entropy (8bit):	5.165277268889316
Encrypted:	false
SSDEEP:	192:622Cxj0Qqt1kwtN1Exwkf/3uTqnzCjMIRqLaA5pLH7VxOOI0fvryjnIJAcPWk:f2Cxj07t1kwtN1Exwkf/3uTqnzCjMIR4
MD5:	63032E2E060C613D70C714C7B8B6312E
SHA1:	7D1CB725A8CD045812C103AC588F2B3EB7974874
SHA-256:	BCFD6D03296660D75007FACA42DBCC0575308240E1EFB72A9D90A31365CF079C
SHA-512:	F82B4D2FD065F870B4368EE5EC8C9BA8B5BC48A00E9B04664B4F13992832FF75CFC322214167095FF0DB8A7D328F70C78CD1091351687275FE28EC403026D3EC
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/td-app-aol-production/assets/v1/css/layout/main.63032e2e.css
Preview:	.skip-link-wrapper .skip-to-content-link{width:1px;height:1px;margin:-1px;border:0;padding:0;clip-path:inset(0 0 0 0);overflow:hidden;position:absolute;display:block;transform:translateY(-100%)}.skip-link-wrapper .skip-to-content-link:focus{width:auto;height:auto;margin:0;background:#0f69ff;min-height:35px;left:50%;top:0;padding:8px;transition:transform .3s;z-index:1000;color:#fff;text-transform:uppercase;font-size:15px;text-decoration:none;transform:translateY(0)}.MainCanvas{box-sizing:border-box;overflow-x:hidden}@media screen and (min-width:1265px){.MainCanvas{padding-left:185px}}@media screen and (min-width:900px) and (max-width:1264px){.MainCanvas{padding-left:54px}}@media screen and (min-width:1265px){.MainCanvas.Newsletter{padding-left:0}}@media screen and (min-width:900px) and (max-width:1264px){.MainCanvas.Newsletter{padding-left:0}}.MainCanvas.reset{padding:initial}.MainCanvas.full-width{padding-left:initial}.MainCanvas.full-width.wide .m-AolHeader{background-color:#fff}.Main

Chrome Cache Entry: 777

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (22327)
Category:	dropped
Size (bytes):	45281
Entropy (8bit):	5.508272676279556
Encrypted:	false
SSDEEP:	768:tmC0rclpFqeEXmiJz05TGFE46A2CLf+hYNIKeF:ICHx470sk8+hYleF
MD5:	97226485DC50D0F14769DA86B0AADCFA
SHA1:	F7CB594315789CE00E4A0A243DD67828A949E6C4
SHA-256:	A80C1A25C9B130FE141F55FD3464FBCC11BCC52CF5E0BF227549253F9369AE58
SHA-512:	F72EFFA44708539926F39FFF2889CB5B2493F6C9136CC9331331072DA6CA9F5594E5B545CF31EC613DFA861317032BFA307AE1DEFFD4C267470BE68CFFA2BA2C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css"><link rel="stylesheet" href="/assets/css/"><link rel="stylesheet" href="https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/css/aolv2.css"><script>var AolHelpGlobals = {"brandId":"usaol","langLocale":"en-US","host":"help.aol.com","id":"home","title":"","uiVersion":2,"meta":{"url":"help.aol.com/","titleTranslated":"","description":"","icon":""},"brand_specific":{"site_title":"AOL Help

Chrome Cache Entry: 778

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1972
Entropy (8bit):	7.539604201044246
Encrypted:	false
SSDEEP:	24:Pxs2zV+4k+doK/rFS1QVvY0mSgjeA44xY5IzxSur+EMJCEKoQ+EJm5NC/J1:E9+Z/pSgY0sjBW0xX+EMgEXQL7X
MD5:	D1DB55C3575AF5D237EBFFE75DE882A6
SHA1:	FAA808E14E95486CDF8636E65B105D7E987F8D0F
SHA-256:	6DDC75CA5E8ABFA8BB41E08BC0F7EFB58ADA6EB971ACED085F5150513AE340C0
SHA-512:	EDBBDFAF5815161B248834854479B5B483B7AF19A93139D1ED7A269711718920348F315F3B06C780349DCBADEDB9FCEBD1E02D652A75DDD81A8A76F059D69463
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.......................................................................................................................................................................................[+.cqz......................_0......e.c5.uM.......i....mB....]-....{....g;....dr{..................k.oE.......................xP.......x........tK........^........qH.k@...v............................._1.............[....\|V..u.{T.......[,..`....b.................................r~.{........kx.ft}p}.......y........f9...........s..b4.n{.....yR................a2....~X.....l.qG.hv..........d7..s..p............j........mz..............................................................o\|....mC..........................\|.............s.$....>tRNS........v...J.!.o..$...u.&`,?..7.2..5.....Z..ET\ki3.gm...:....0...(IDATH..wT.G..p...FB.b.../......s..R.JS t...."E0.A...]..%.h.X.%.7RIbz1.efw.n.;....g.7{...7....v.[os.7/.z*MW

Chrome Cache Entry: 779

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	71121
Entropy (8bit):	5.906233001795633
Encrypted:	false
SSDEEP:	768:FvaydpBkSD+rF09mHXzV8yvVbk+lxkAhciw9MwvkhifMnh+IZdBk2z:FCcprUFBHXx8MPlvTw+wgnN5Rz
MD5:	EFD6461048F1C544F3F1183790CF1240
SHA1:	7000A047272F0A49E96CF729862739600D23D75D
SHA-256:	42365BC9CF087B973AD1A84FE0937AF32EF95F235AF4BB67C4A698AFD3569A52
SHA-512:	B7B8D5A120EC0A1D47DBC23A309389442C5AE2B844BA48E37BCE50C099B79835BA3FD64C9738BD2D9AE68292B7EF36E65C62052937049C160DA25988EF9FD497
Malicious:	false
Reputation:	low
URL:	"https://video-api.yql.yahoo.com/v1/video/sapi/streams/6eb22e94-b4f9-360b-9efe-9314028f9017,8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e,c3db04e7-3946-37de-9e67-03698b49bef9,50fcb985-df33-3558-865d-77035ff99fce,2d3534f1-addb-34bd-bf8b-476c6c63e7f2,dc9d9f9b-83fb-3136-a15f-b4c3ea328ae1,a6807d85-b340-3fab-9d17-ac1ddc74cbf8,519694c4-e078-39f5-a25c-a880feb8099e,23b205a8-99d1-3662-b169-2b335bd13ba3,c4030192-96df-34c7-8f55-f7df83598032,ca4223ee-c954-3bd7-9453-64a45f676a29?ad.pubfamily=aol&srid=3072249782&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=b9b3c6c5-2cd7-4937-8390-628222cda75f&region=US&site=aolhomepage&expb=aol-aa-2&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=93knqf67%2Cdexzzysv%2Cbwmsum1c%2Ct3cjguyy%2Cnv4g2qkv%2C3cg171as%2C6kh83y71%2Cfqbgknpp%2C6l5yyhbl%2C331yoakf%2Cfvtlzpgu&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.3.9&try=1&failover_count=0&ads=ima&nad=0&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aolfrontpage&evp=bcp&hlspre=false&plseq=2&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1"
Preview:	{"query":{"results":{"mediaObj":[{"id":"6eb22e94-b4f9-360b-9efe-9314028f9017","meta":{"attribution":"","description":"A Belize-flagged and U.K.-owned commercial ship carrying more than 20,000 metric tons of fertilizer has sunk in the Red Sea after being attacked by Houthi rebels.","title":"Ship attacked by Houthi rebels sinks in Red Sea","genre":"","embed_rights":false,"duration":22,"url":"https://www.yahoo.com/news/ship-attacked-houthi-rebels-sinks-075140381.html","thumbnail":"https://s.yimg.com/uu/api/res/1.2/zoII72XWtA6X45.L0mutlg--~B/Zmk9c3RyaW07aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/video.abcnewsplus.com/22d7c662f81ed7c72973c46ce5f31ce7","create_date":"2024-03-03T14:42:18Z","provider":{"provider_id":"video.abcnewsplus.com","provider_video_id":"107752708","name":"ABC News Videos","url":"http://www.abc.com","logourl":"","publisher_id":"7de8a6c2-ed71-345d-b8d7-ef4ce86f24fd"},"thumbnail_dimensions":{"width":368,"height":276},"credits":{"featured_artist

Chrome Cache Entry: 780

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	331264
Entropy (8bit):	7.999474461293056
Encrypted:	true
SSDEEP:	6144:IXK3MncL35z3gjHrNC+vlKFuy8DFn4UH6s8ksIBs/kkAR8s/9d60WR:IXFsliLNfvkFgDF1CIBs/kkg8c9/WR
MD5:	631A622DB89B4D56C4C9CC7938516EA5
SHA1:	04A8031E8F90CD664713E6B5BB11970B9926CA40
SHA-256:	337612D2394929DA57F91EFA7A7D27E252A6886ECE0B00453726CD3D8A0CB85B
SHA-512:	DAF42272C3B6BEF5D22A8C72955D2A306C4339301641B902C60E41E01D3A91D6911EA66109FECE5C253D0BE84FEE991D32A0F339A7BCF917E499F2E7D532DD81
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|Z.X.V....%..._..I......../.....G....-.+..h\8.F.6:z..>W.......)..9X.5.........I.h/D0\.=$>.Dj3.......a.!..v.\.......Ar....}T{r.1.$Ly.I..%\|8U...p...ltv..$^L.~.\.6.;..H..~...4...W.m...:...lp.ILy....2..bD.........e..c)G.G...GzQ....MY."_?......:...cS..k5...&...."O..U...fWu.]Pm..lc<OX_..zy.3.Z.....Hj....6.....smk..u8eb...:1..f. ..VE..!S...]..:m..UlCT.......}....[..V2.........`!.I.2..>.'..!.L...K.:..umZ<....f.x....bY>......).w.M.L:..W^.:H....<.y..N..O.m[......`D.y.C.......".Q....Jb.!vl.Ah...G#R.1h........p.]u..d.QI.+..].E._.!M{...y.?.j..B......2...g>."..l=0..p:........K{.D...Bh..9..u..~....8\|..

Chrome Cache Entry: 781

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 782

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (372)
Category:	downloaded
Size (bytes):	7668
Entropy (8bit):	4.818916405648157
Encrypted:	false
SSDEEP:	192:Uu9KYoiEAroQywuVYeCvGgPVoddpswcj2jA9qSt+xw:F9KjYe6do2jg2
MD5:	0AA710A63CEE632B2B8987C8E7715720
SHA1:	BEC570DE3EFB25EF892B1B7BF6930EAC57400671
SHA-256:	6BFBCBFE62A182C77A84F9BB31CD15199C5A6999DD00737F4EE1045258FF5872
SHA-512:	17D6013B3BA7F5242DC1E9F037DFD7E789681BEFC417DAAF7732C92D57C1A582CED2CE49726EFC334A2612EC6E76E28A5C228F1B3823D4C33C66FB4195DD3C50
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/ucreative.php?cv=1
Preview:	function isSet(val) {. switch (typeof val) {. case "string":. return val !== undefined && val !== "" && val !== null;. case "object":. return val !== null;. case "number":. case "boolean":. return true;. default:. return false;. }.}..function isJSONSupported() {. return !!(window.JSON &&. (window.JSON.parse && typeof JSON.parse === "function") &&. (window.JSON.stringify && typeof JSON.stringify === "function"));.}..//------------------------------------------CODE------------------------------------------.function isForceSafeFrameEnabled() {. return testData["fs"] === "1".}..function decodeFSC(input) {. // Replace non-url compatible chars with base64 standard chars. input = input. .replace(/-/g, '+'). .replace(/_/g, '/');. return input;.}..let timesData = {uCreativeLoadStart: Date.now()};.let isDebuggingLogFired = false;..function onLoadHandler() {. timesData["dfpIf

Chrome Cache Entry: 783

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4174), with no line terminators
Category:	downloaded
Size (bytes):	4174
Entropy (8bit):	5.1109024812236745
Encrypted:	false
SSDEEP:	96:3hqri9jq1YrOdIUcoySqNY3de1q1TrptsjQk:3mi1u6OQVdNYGufckk
MD5:	4FB1358C9D3CC812325612307C785B9B
SHA1:	4BC2BC28917303BF141E893C85F06597FD8AE2A3
SHA-256:	E6F4388CA6D5DE7ADD1CA5A0008E795D0E03713F98AEE077BB5E60DED026DBD7
SHA-512:	D5FE5EACC5606439E345EC4E94D9D1F4A5D6C7B312F9D85E3F4FF1BAE2C4BB78CCE0550DC77783197213EDFA89D7EC0FE338D148654A591EF98E8016AC1BBC12
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-bind-1.1.3.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-bind"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function o(

Chrome Cache Entry: 784

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2146
Entropy (8bit):	7.803986549167334
Encrypted:	false
SSDEEP:	48:U1A13L4D2n5fwLL6xMZrks16fRlKoEcqNQEAYsGtt:UyVLe2BQOMZ16TKlfrH
MD5:	424A00FBCF4278432F8F17C89DA589E8
SHA1:	4687755912B09E7CE10D9873D14F5B72D4EAA200
SHA-256:	E52BA3A3F6A3B8B2DB18BB024182544F9513A947F83D102D8D1BB7459BEBF16B
SHA-512:	2E9F2CB8CFB12D1B30F094E0024C610886E9233DC6C6239D34E363A375BC610CC09FC29FA63FDAAC0CED2DC5FF761C54E80DAAD81B5EE18EE6186E74E2CCB52F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL~.......................................................................................................................................................................................................................................................................n.+Wci..-..$;.&......@.'N[bN.(H.'s.+..%Tafgrx{.,8.&y.+w.+...f.>.'".$.%..-F.'6.&^.)..-R.(..$mx\|..-V.)Q^d....."K.(..,...~.,2.&..,....q.Yfl......{..).%..-B.'..,X.)..$...E.'..#(.%`.)k....p{........."..t.+&.%\.1...d.2c....j.i.^jp[gm.....#....-:.*cou....o%y.....jN^ +5GRZ........$L$8[.)...{`or}.......[hn8:E...]":......o.0.......dqSc......u..q..utg.n0...z!wX.I2CAFO.!-j4Kg@SZ;L}hu...h1H^.-kjrNV^..%.t..o@U.-x^lc:N_kqi`kE9F..#WYN=8 H./...sLQ?M..&4CKWO6.f.^J!WF .].,.!....r3eP&...~c1.......YtRNS..s.E.........l..L.@........]j..<b}4..0....$.H..,..9..{.X........../.u.............^.....IDAT.....X.x......F......g]w.}..c...c..H...."......y}.uw.m0<.........l.~x<_~%..

Chrome Cache Entry: 785

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 786

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1296), with no line terminators
Category:	downloaded
Size (bytes):	1296
Entropy (8bit):	5.197472359788055
Encrypted:	false
SSDEEP:	24:cN/0PBM646hC5QNnOdetDJaDbkrrdThGHGurPMqqUHfntRdfntRxpTTZJ8Q+SAjB:cN/0P6cC5QNnZtD0Dbad+DtH1b1BTAQu
MD5:	DB6E7BC62FDDF44C9AB36EDB43AB3494
SHA1:	B601DFCFDE658DB2CD0BFA3E6598E971393A84D3
SHA-256:	8D591284FBB74690795B0B8FD5EE987F60DE5A8F83DE9568FF57C33C6D0F8C64
SHA-512:	F0F4BA27AEE747C4AB4ADF9FB5E7C154C11C9105D3D4C70900BAECBB48CE7E40FE9A0A80B45AAC6164AA9D2755E6062245A50EA9FFA07AB4C9A14ADBBDB93F7C
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/tier-card.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.tierCard=function(t){"use strict";function r(t,r){var n="function"==typeof Symbol&&t[Symbol.iterator];if(!n)return t;var e,o,i=n.call(t),a=[];try{for(;(void 0===r\|\|r-- >0)&&!(e=i.next()).done;)a.push(e.value)}catch(t){o={error:t}}finally{try{e&&!e.done&&(n=i.return)&&n.call(i)}finally{if(o)throw o.error}}return a}function n(t,r,n){if(n\|\|2===arguments.length)for(var e,o=0,i=r.length;o<i;o++)!e&&o in r\|\|(e\|\|(e=Array.prototype.slice.call(r,0,o)),e[o]=r[o]);return t.concat(e\|\|Array.prototype.slice.call(r))}var e="tier-card__column--expand";function o(){for(var e,o=[],i=0;i<arguments.length;i++)o[i]=arguments[i];t.store.debug&&(e=t.logger.tag("hero")).info.apply(e,n([],r(o),!1))}function i(){t.store.once("PAGE_LOADED",l),t.store.once("URL_DATA",c),t.dom.addListener(".tier-card__row--action","click",a)}function a(r){r.preventDefault(),t.dom.toggleClass(r.currentTarget.parentElement,e,!t.dom.hasClass(r.currentTarget.parentElement,e))}function c(r){o("Handl

Chrome Cache Entry: 788

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	277
Entropy (8bit):	6.327525090862984
Encrypted:	false
SSDEEP:	6:6v/lhPf4OllScQvlolyIUnVbajqbWgTjoPSSEWYe8fyiovbjRuKBa1g+CQh0p:6v/7rllqtolyIUxGqbTjoPSRWTvxuKEG
MD5:	DF9A2FDE7D1D68B13D038C4AB499201B
SHA1:	EB3097D78B2E350FC2C671578AA43E650EEDE41E
SHA-256:	C0C1D1343803CFD6D58CDEBAB0526EFED850A495E1AE37B092FBD53C5CCF17AE
SHA-512:	34A24F58A2292422A01D9BB2B80FF36061C7A40ADA7F174DAA564978DD531E36AF6464778A98F899E7B9554E52224E089DDBEB5BA10079F77F92421FFE13336A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...BPLTEGpL...........................t..a.....A.....5.....k..+..W..........jG....tRNS.........3......xIDAT..e.7..0..@..x.A....y<..%......E<\|.[.../~\.@...D..p..5.......H.7I.....+.F...Lu.=.$.Y.2k.2s....z.&):.;k.a...........++z.....IEND.B`.

Chrome Cache Entry: 789

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (10304)
Category:	downloaded
Size (bytes):	10440
Entropy (8bit):	5.363376437787305
Encrypted:	false
SSDEEP:	192:BLDCIBrTfcYYLJCAb3yXUjrVlyoJw5YjHvOCeH0NtQ8siAt0ffd9RjH+Pn3ylqy3:BL4EYyXUjrV1JwPCh5vHd9RjH+P3Wqy3
MD5:	5750DBA60D0CF0100B3CED7DE409CD1A
SHA1:	B72E7B4DA9F2CBAA7B895CC9803007289D7C927E
SHA-256:	B7537E5CA09065A65E1C15D975120FF53E7870D9297A040B0B9D843B97D7D989
SHA-512:	77BBE8273286E9AE4683C0568E5C2BA5211420AB892364D0B61B2F4C08AC0D94799DE0051522E847F313DA100EECE4670D3D7E2EE4E1318C528F9858C9B7F4BF
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/omp-widgets/smart-widget.latest.prod.js
Preview:	this.OMP=this.OMP\|\|{},this.OMP.smartWidget=function(){"use strict";var t=function(e,i){return(t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var i in e)e.hasOwnProperty(i)&&(t[i]=e[i])})(e,i)};var e=function(){return(e=Object.assign\|\|function(t){for(var e,i=1,o=arguments.length;i<o;i++)for(var r in e=arguments[i])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t}).apply(this,arguments)},i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function o(t){var e={exports:{}};return t(e,e.exports),e.exports}var r,n=o((function(t,e){var o=i&&i.__spreadArrays\|\|function(){for(var t=0,e=0,i=arguments.length;e<i;e++)t+=arguments[e].length;var o=Array(t),r=0;for(e=0;e<i;e++)for(var n=arguments[e],s=0,a=n.length;s<a;s++,r++)o[r]=n[s];return o};Object.defineProperty(e,"__esModule",{value:!0}),e.logger=void 0;var r=function(t){var e;if(t&

Chrome Cache Entry: 790

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48587)
Category:	downloaded
Size (bytes):	776802
Entropy (8bit):	5.545310463991766
Encrypted:	false
SSDEEP:	6144:txZs7x71RzavjrfGE0huUKTapET0nfiDydECZHxfQLQ80xKd/lT7+f+pGpehHlLg:TecvHqGGWNmQ0dpeH9XTn63
MD5:	456F1DB434BDB99E2B777B24764FE776
SHA1:	12797823DC180E7A0C9C4AA1FD56B4C3DAB2B950
SHA-256:	258D16DF1B0C18E24D753C12BAE34D49DDA67FBA713D4C88EE22E1544911D243
SHA-512:	B1765DAFD896013843A51670E879823AD3168FCD55AB33D1C4C7700C5BD47A2FBC93B9E618D45797EE7C1DD8324AC8E79CF0743FC1B69508CBE1E988B94D6DDC
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/core/bridge3.624.0_en.html
Preview:	<!DOCTYPE html>.<html class="ima-sdk-frame">. <head>. <title></title>. <style type="text/css">.videoAdUiActionCta{position:absolute;bottom:30px;-webkit-box-sizing:border-box;box-sizing:border-box;padding:5px;max-width:75%}.uac-android-on-3p-instream.videoAdUiActionCta,.uac-ios-on-3p-instream.videoAdUiActionCta{background:linear-gradient(to top,rgba(0,0,0,0),rgba(0,0,0,.4) 100%);bottom:unset;max-width:100%;padding:12px;top:0;width:100%}.newProgressBarVariant .videoAdUiActionCta{bottom:46px}.videoAdUiActionCtaInset{font-family:arial,sans-serif;font-weight:500;font-size:16px;background:white;display:-webkit-box;display:-moz-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-ms-flex-direction:row;-webkit-flex-direction:row;flex-direction:row;-webkit-border-radius:8px;-moz-border-radius:8px;border-radius:8px;-webkit-box-shadow:0 1px 3px rgba(60,64,67,.5);-moz-box-shadow:0 1px 3px rgba(60,64,67,.5);box-shadow:0 1px 3px rgba(60,64,67,.5);overflow:hidden;height:50px;pointer-even

Chrome Cache Entry: 791

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	19005
Entropy (8bit):	7.967608845492694
Encrypted:	false
SSDEEP:	384:Vgatw+N/NosStVSIBFWiUQtRlV+xF0IQmmo3ihm78QT2QMIM1rgUfPK:Vga2OyXS8FWiUqcxF0bNo3Wm7jIIsfC
MD5:	EA1B2568E6DD8BB591F754A3591A2A78
SHA1:	7CE3837E19BD0DE13DDEA8D4330E3A1D27867BDB
SHA-256:	76420E1104B503E2077C58402DF4B5745B800BD568F8D02E9748E47629912F7B
SHA-512:	43F49C182BE966CFEA6E97329636F4295DEFA769DBFADE96E709D3393A4B1FC31CED1F6FFB2162597598574823FDE7B3F2B17825DFBFF74D36BBAEC1A7149EFB
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/1m0s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/1m0s/match/image.jpeg*~hmac=2df69e9fca260d4221108e8e274c956c3afa4bc4f3eb0b76a40cec2302026932
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE..........."........................................N.........................!1..AQ.."2aq......#BRSTU..$D3.%Cbr...&45Et....cdsu.........................................................!1Q.ARa."q......r...............?..[W.e\|i.W.E....K?/........NP0...h.q...c...E.u...e.C[.9QYI7..lx.e.F....D..j..k....<R..=....Q.e.9/....etz).sPZ4..pInT...Var.....Z.Kcv..'.......#.5[4.c.6Nx".~.. ..R..Sy..d.....\...6..c<Vb..n.=).e2.\.MX...'Y..)...e...%.@>.h......h7......VQ`f.S.Bwdx...\\...>u5.:.`......;.f[...$...!^.... ...[}..Q......h..T{[ .n.Pc...\L..;...~...X.......`rm..a.px4.-..\\.K. ..5..a....Q.......C}w<..Q..x~...V..g....}.g.6.....L..R4.VL1.8..m..).Pz.>...$....`....D....t.+...@?..}..t..........Xk.6.=.s#....g....3..f..a.............<....R...b-..ZKP.!..hU_,..?.+]mo..{ @..O..W.h$..c.T...(....#..H..Gt....

Chrome Cache Entry: 792

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1793
Entropy (8bit):	7.588421172765343
Encrypted:	false
SSDEEP:	48:Gxo97u9I+nIcdTX3D6HZ9GNKjD/tNNrtY3y1:Gxohu9I+nbj3DEZ99fBJY3y1
MD5:	E1659A010543D3C34B4F66A24F826F40
SHA1:	96D20CAA5F7DFE8056799A8552C2D99EF0CFCC81
SHA-256:	CBE6D9E92E68621C34A24DAFC72A15CB52826EDBE1199AA86D1940A59FCFE871
SHA-512:	6BBEF69C4826E9CB873BFC009A69EC3B1000FD60B02E1D5C86B4B8B021A040A480B1F3DF6DD398FEFF4FC8843A3404FA8B0A34409B84603896EC86816FF1BFA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................-b..0...3IX.8i.5.39MW.4_.4g0Rz.9.4..b.1a..1%B[.;].<].4.GYplL$A[....5_.;k2T{<NVQZR6KW.......xG..2.8..=....>m..0..c.6CRU.3.<...<[.MYS..1.tI.zG..1.9^Ec.V]Q.2`..?!?\./a.9^T\QY_P.5?^...=#Ht.7...,Nxg}..6)Mw.6he{.1HXt..`x.Gd..uH....9.0d(Lv"@[.4.5..>?PVsnK.{F..<by...Al....EQl........yG.:.....1.7^..@]aP.=\.:AQU.4&BZ..<,FY..C)DZ..@..?i~.GUT.3.........Vp.p..deN}...3f7X~..AMi....nkL^v.okL.1dx.................8i8X~%Ju.m.2...p...2e.\|FJWSzrJ...`cO.....B......n{..P8MW..A..C.9jwpJ.9..0PZR..>...m...7.Cp5KXCa..AoB`.Yr.w...4IVTxpJ.8{......JtRNS...E...&..e3..z).A....._.L>Q......p."....;..[......`....-.....j...!gt.V8L.....fIDAT....e`.....mZ.........]......#i<u_.Rw....2\|......}........<tR...t...`!......R W.......k..

Chrome Cache Entry: 793

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 794

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12096)
Category:	downloaded
Size (bytes):	13024
Entropy (8bit):	5.379419327785973
Encrypted:	false
SSDEEP:	192:cHB3lyO9OtQ7rzVjqtjBbWKsn58nbDU+oMmYUk4nTp/MiavGPVNkb94eB/16ZWVx:C3npejBSKs5qPJUkqCG96b9cQx
MD5:	3A2E9883856B315AE8751D0C15E8D81A
SHA1:	0EDE7454C97D99A08EE47657BE7C2A539FB2BFB1
SHA-256:	0AB132405135180FF3CABB759B8D816BB0E3D203DD5CA3287D14C9CB4CBCDBF4
SHA-512:	2B2C7D901F5CFD746463940DD475531D202DC5E9C8A7B22950120746C3B5E7F3F7BCE61D344455F5EC6148851A2B8F11E2288E426FFC6898EC5DFF05F1DA4A55
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/WAS/tandt/atjs-loader/atjs-loader.2.1.0.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.atjsLoader=function(){"use strict";var e=function(){return(e=Object.assign\|\|function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var o in t=arguments[r])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)};function t(e,t,r,n){return new(r\|\|(r=Promise))((function(o,i){function a(e){try{s(n.next(e))}catch(e){i(e)}}function c(e){try{s(n.throw(e))}catch(e){i(e)}}function s(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r((function(e){e(t)}))).then(a,c)}s((n=n.apply(e,t\|\|[])).next())}))}function r(e,t){var r,n,o,i,a={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function c(i){return function(c){return function(i){if(r)throw new TypeError("Generator is already executing.");for(;a;)try{if(r=1,n&&(o=2&i[0]?n.return:i[0]?n.throw\|\|((o=n.return)&&o.call(n),0):n.next

Chrome Cache Entry: 795

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1404
Entropy (8bit):	7.67850165316399
Encrypted:	false
SSDEEP:	24:ztFCvh6PTnW1ruQYs2tAY78gV07zMipHQ34Q5Y1zKx5Cid5kdCaxS/3:ztIp6PTW1r1fLgV0z1af8Kx5CU6u
MD5:	8E9F49D1E5A7F4193370BB3B1571436F
SHA1:	9CD58D6BC2A21BB0372FB6DE1631C9A1F3793F11
SHA-256:	C39EB466362E8BA58E526788E3DD4F6E33145BBA19D021B0C14472510A8CC9E9
SHA-512:	9A25A2F51391F69ED7FFECB4554F89A910EEB50028A14581D01E2FC1158F752321ADD2A071EFDF86F3E8F3165AAEC5F54D3A898343CCEF37473B71D270E6576A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-01%2Fc8e15350-aa80-11ee-bdbf-641468506b6f&client=76f99bdb8f78cd44cc0b&signature=1532bdc3ce1b36c5f1e1e6803f90c92ce686c25e
Preview:	......JFIF.......................................................... .... %...%-))-969KKd............................................) .. )/'%'/9339GDG]]}...... . ...............................................................!A."1B.Q.2Sa.................................................!..A.1Q."#2aq...3BRr..............?...sw]-.s..+<.Chg.a._.<.....K...AZ>....\|.Xm..>.O....1q1Q..N..#...('d...L..\|.....^..o.{....p....C...$....#U.\|.B.l..iK......}WW...A...u....^....}..=4'..!.D.Q_i!....X..>..O..6.........#..[...+1.A...;......U.6.........\|...O).....r.%..a..\|lw.n.).I...s.D..j..[.......b..6._..deF.F.{.%..On....Oj.r..Y.x=>4.x......j.<5......G...c.....D'.Lk....@h.....O..z.....;..z....C..yb......PL...ek.$:.....(..&#..x.......R;T.P.[Y(...<0..k...[....^.H.....9Z.....\..-R.G....}.Bj.m..8.S.e....nc?.....TWJ..;..(uG..y..{e..Vd..j....to.#\.&mv.8...12...... ..Lu..Jv...7.DT....p.....@.\|.:7.T.PY.{..N.r.s`et..).h.-.wV.s..(....O...={,.<\1.p:..}..T.m.m\....q......r...

Chrome Cache Entry: 796

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	84438
Entropy (8bit):	4.994949137834553
Encrypted:	false
SSDEEP:	768:8V1CMVrLPLFkPQsy8c0yPokeQPYPlPtPBPVPnPUhPlPtPBPtP3PlPHP8PKPnPkPH:8y0i
MD5:	BF9FD24AC2B8CA73EE6446406FF591B9
SHA1:	A9BA72278AC36ADE7F86440D8C3972DCB2ADDD45
SHA-256:	CC66B37E57ECA488A175DB3C00CFA0A7E15307C6F512356F448437605532D065
SHA-512:	BBF1D350A175A35C2115CAC1C7A6A7DE5D95ED68DBD7AF5786BCB6CB96B8CFB912BEBEAC8F4973CE7209D39740A2BF9F636D3B5469D55C3AC591D71F7391921D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.bf9fd24ac2b8ca73.css
Preview:	.m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;margin:0 auto}.m-gam__placeholder p{margin:0!important;padding:0!important}.m-gam__ad-lbl{margin:0 auto;padding:0;text-align:right;font-size:13px;line-height:1.35;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#6e7780}.smartphone .m-gam--loaded{margin:0 -10px}.smartphone .stream-container .m-gam--loaded{margin:0 -25px}.smartphone .caas-body .m-gam--loaded{margin:0 -20px}.m-gam__container--stacked{height:600px;overflow:hidden}.m-gam__container--stacked.m-gam__container--abp{height:617.55px}.mpu--stack .m-gam__container--stacked{height:512px}.mpu--stack .m-gam__container--stacked.m-gam__container--abp{height:547.1px}.m-gam__container--stacked .m-gam--stack-top{margin-bottom:12px}.m-gam__container--stacked .m-g

Chrome Cache Entry: 798

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2406)
Category:	downloaded
Size (bytes):	4204
Entropy (8bit):	5.403810384847462
Encrypted:	false
SSDEEP:	96:BdvzQY9V6QVWlP/Or3VazeP9WTBxj6kDxx1vbysf39O84UakyeUZlHjv:BdvMtlpW0eFWTflDBeslB4UakCjHjv
MD5:	F11E6C975BCBE61A9F6C220E243DE1F0
SHA1:	0CBAE8B4D775AAED9124E1AA4ED2D80B9860292A
SHA-256:	8C6B51A8608447AE95F811432FAB1D82A09415F8969365A02ABC851F74552553
SHA-512:	1E8208A665904953AAFDFB2DFE40ED256FFD2A7526CA749C9F0CB3690E67FF2EBF3FF379D1FB3B6F68CB99BBE25228A975AC089B21843861627F29B343DFFC07
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function h(a){return-1===a.toString().indexOf("`")}const k=h(a=>a``)\|\|h(a=>a`\0`)\|\|h(a=>a`\n`)\|\|h(a=>a`\u0000`),l=g``&&g`\0`&&g`\n`&&g`\u0000`;var m;var p=class{constructor(a){if(n!==n)throw Error("TrustedResourceUrl is not meant to be built directly");this.l=a}toString(){return this.l+""}},n={},q=function(a){if(void 0===m){var d=null;var b=e.trustedTypes;if(b&&b.createPolicy)try{d=b.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}m=d}a=(d=m)?d.createScriptURL(a):a;return new p(a)};var t=class{constructor(a){if(r!==r)throw Error("SafeUrl is not meant to be built directly");this.j=a}toString(){return this.j.toString()}},r={};new t("about:invalid#zClosurez");new t("about:blank")

Chrome Cache Entry: 799

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (339)
Category:	downloaded
Size (bytes):	5090
Entropy (8bit):	4.936801267352128
Encrypted:	false
SSDEEP:	96:LlOK0OJM3cOn0OQqO30O9/COa0OkxOq0OJpOH0OXO90O+O40OmO40OrO90OB7O79:LmfeSWqgiecY4LTWt
MD5:	247A59C18F6E12E0714F88529126EFFE
SHA1:	2AF55D3262997ED7B70F84F7082CA1783B536144
SHA-256:	875C4E5EA4B818F0A1347B4EF87ABB246406B7498595E262717E505F62A02802
SHA-512:	B0D061969C7C298701B5E294D6A6006293EA676B1B52095C9A4A2C61309B8CBD847125B05CF7460889C7D29D801EFE44C74985DDFD98BE94601DA278E9463521
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/thumbnail/v1/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/thumbnail.webvtt?fastly_token=NjVlNTE1NDlfOTZjODI2YjczN2E3ZjNiYjU3ZGRmNzQwYjA2ZjdmM2VkZDNmOTJlNDdjZDU5ZjkyYjg5MjQzZjQwNDBmOTYzYw%3D%3D
Preview:	WEBVTT..00:00.000 --> 00:05.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/0s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/0s/match/image.jpeg~hmac=312f1427da13bdfc538e4e8039315edb4761a8e7a2f22b39ab83439ff6f82c32..00:05.000 --> 00:10.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/5s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/5s/match/image.jpeg~hmac=868328882022d9eb8d9b8228a78a59536ca67a97f1ce67a1ad7535f80d38850d..00:10.000 --> 00:15.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/10s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/

Chrome Cache Entry: 800

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27423), with no line terminators
Category:	downloaded
Size (bytes):	27423
Entropy (8bit):	5.125743613262933
Encrypted:	false
SSDEEP:	384:HguGWeCyEZni/PEafevKCKxKjp0newAtHLoyoT6g3QaAc6dcdrvVhHhd2HG:rDc6StCavzdrvVxhd2m
MD5:	C8F836E033C1C177781F7ACBBECC8CA0
SHA1:	DE7329C27E3F34A536975082FC65E67F0F5D1992
SHA-256:	274DFC57E6A6C685EDF4DCED34C9267A4DEDB1B053E0E2CBA237F5B5A255F53A
SHA-512:	4CB03DBF93ED4D95C09821DC675E8110E31D3483A96173B5D3EDA0A8B4AA121FFAC61662B74BCB348C49100F5839A47939264F09077CC8441435D8C1DA4A0714
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/glide.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.glide=function(t){"use strict";function e(t){return(e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function n(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function r(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function o(t){return(o=Object.setPrototypeOf?Object.getPrototypeOf:function(t){return t.__proto__\|\|Object.getPrototypeOf(t)})(t)}function s(t,e){return(s=Object.setPrototypeOf\|\|function(t,e){return t.__proto__=e,t})(t,e)}function a(t,e){if(e&&("object"==typeof e\|\|"function"==typeof e))return e;if(void 0!==e)throw new TypeError("Derived constructors may only return object or undefined

Chrome Cache Entry: 801

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x1200, components 3
Category:	dropped
Size (bytes):	42303
Entropy (8bit):	7.7414731535057415
Encrypted:	false
SSDEEP:	768:SZ5nrIZoO9MgYaNNa1GP1Ts+C3ecfgr9o/0TQy846/N6Nd:Ecz9MgYaNNZ1Twea5/YWN6Nd
MD5:	A90EE7647C57C37AC0E88B21D3A0F5CB
SHA1:	FE1F1568B74FE5C2B00B1F332081B3C69F8A3677
SHA-256:	34FED21BA54731144090A317D066BD074B4C3FEF3E665F12162AC12C6953753D
SHA-512:	AD75003672A09285B762488AF1A684BA223FA95A887F3EEC5FFA5453E2A6E22579E591694FAA020EBA52DA2FCEDF2DABA1266CCB9F0E1525EA8155BF8969F0A4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................$ &%# #"(-90(*6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================........X......................................................................................y...........................>5...l................................<`.............................2...............................\...........................b.`.0...........................Z..s.............................]..x...........................1k.e.............................-v.................................<`.............................2..............7..eo.0>zs.............Z..s...............3{.o..>R:r...................2.............?.NN....\|L.g..9...........b.`.0............z.W..lG.my..kr..oG..J.\|.9..............2...........$.e.^..3..>.. .......}I.\|..Y..........b.`.0...........k...I.8....._KN....<...............]..x.............g.1.R.....%/l..!.>5\|............Z..s................d........~..)..@....

Chrome Cache Entry: 802

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23978), with no line terminators
Category:	downloaded
Size (bytes):	23978
Entropy (8bit):	5.255969500765367
Encrypted:	false
SSDEEP:	384:BB9pJwRl/uj+TAsdiBsCsVRvIHDSj2yoylG/fU0zRau09yI+XuRtJks6V+tG5uKt:BtQ1q+ldi9sV1bxXoM0Fau0UI+XOMs6d
MD5:	EB6AA6DC64C61B7BE746D6EFA482105E
SHA1:	843BD194ED23AC4960AF638D81069E584CCB2ADE
SHA-256:	E245FC66523F411B52B3A2C03CC650DBAEBEC8356DA6439C3D3449749AC1B8A2
SHA-512:	0156888053841747E4D2E5C7DCAF57C5669F0F4DC28A58A32439968509934421F3B16DD2558835232A86999C545DB72D2A54B5536D4B9A57C6B8F519518E1959
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/common.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.common=function(t,n){"use strict";var e,r=function(){return(r=Object.assign\|\|function(t){for(var n,e=1,r=arguments.length;e<r;e++)for(var o in n=arguments[e])Object.prototype.hasOwnProperty.call(n,o)&&(t[o]=n[o]);return t}).apply(this,arguments)};function o(t,n,e,r){return new(e\|\|(e=Promise))((function(o,i){function a(t){try{u(r.next(t))}catch(t){i(t)}}function c(t){try{u(r.throw(t))}catch(t){i(t)}}function u(t){var n;t.done?o(t.value):(n=t.value,n instanceof e?n:new e((function(t){t(n)}))).then(a,c)}u((r=r.apply(t,n\|\|[])).next())}))}function i(t,n){var e,r,o,i,a={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function c(i){return function(c){return function(i){if(e)throw new TypeError("Generator is already executing.");for(;a;)try{if(e=1,r&&(o=2&i[0]?r.return:i[0]?r.throw\|\|((o=r.return)&&o.call(r),0):r.nex

Chrome Cache Entry: 803

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2269
Entropy (8bit):	7.777898774453334
Encrypted:	false
SSDEEP:	48:1xlZ83SWtpsnWACTzmKa6Rm0anargwZB673kx9UvLcWERWw:1m3nkTCTzmN50dMwK7+wLuAw
MD5:	78A028B6BCEB6F1C49AD89D6C4043DCC
SHA1:	F1FE3332FE2541A81FD1D32D375BB8AAF29A9455
SHA-256:	6052C4DF04424554C910C444B97F48D14272FE0087D9C6A44AEAA7CE9C20F7C0
SHA-512:	09C273E60B4B7305172641E89CAA8BCACDAC98CA6420914E220ED0974F73F9CED9C5503273B53972EEC76DADD2A623206F5A5DC17BE7550B640D86D0F4E0D96B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FiiEErhUHtBJPZhhygpVeqg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181213%2F500x500%2Fnuggets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fcc40ea3f7b1d9c1f531bd8610e1a332967f1696
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'..'."@..'.#2.....'.:0.#2."@.#@..'.$@M#9....'2=C;p#5k#6F":.,>..((4=.41.#3."?.">.#2 ">.)?.h-V#8..(\|#4("=G":..'l#5.S/..(.&?.,+6=.+...$2nd6.Q/JK:.G0.$@...q#5.=0..(a[7../.9<.(.,.'?N#9.+7><..'.).?.(?.../.#1>0:<.01.RP9%3={m59@;.,....+.^Y8.p4.(d]7..>qe6.@Z.p-zl5!/>..u3f^7.+?..1...5=<.,ka6AE;..1.-Jyk5[W8./>..0>C;....,YU8CG:.(./1.&2FH:.).y3..0+=XHJ:.T/VS8Vdyz..JZpv...v3..'.,.-.}2US9L[rBF;.+$2>..-th5.MM9....-..(.....).(....'D../K.,.w3..(h`7s......).G.+.+1..(.?0.o-..%C.q-...EUl.r4%8S4F_;Ld....)P_u..<..-..M........!4P..xFNN..O....+}n4VT8.)..0..0...G0..2.).H0~o4=NfTbx..2.+H(;V.............\j~......8Jb....}:....)tRNS..........ZP....z+.....{..-.R..,...Y.5..,...cIDATH.Vg@TG.>@...h0).g.w.8D..Ho.W.A..E.)..Ec.....Xb..].)..Kz.......;..5.........~S...d............. .m..`[........h......=..s

Chrome Cache Entry: 804

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3921)
Category:	downloaded
Size (bytes):	3956
Entropy (8bit):	5.209315021295167
Encrypted:	false
SSDEEP:	48:Qoz0Spd0EUEDskiq0o/F9sKqeFBpDoGu8EGcUNxAHtj+sjOoL7OFs0GbVilKVfJt:/080X2N9HquHDCpGHYoloLTBilGA2wa
MD5:	8FD7554B79635ECB8FF7D857D1DBE51C
SHA1:	2A316468744AF66E6A9734B473DAD1157B3C5A98
SHA-256:	3E217393A75F7DAA61288FAC918B2245BCD69F76225ACF42E44A4AF80E4D22C2
SHA-512:	AC6264A8A25A15AC61A135C27ACE7E05C2AC225F89E248ABCB36B0F80B2B73E630966BAC5B3B228B6BFFA6970FE3FC366AE25622B2A7AF8C9561BB9B1C30E014
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/readmo.8fd7554b79635ecb.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){"use strict";var t={d:function(e,r){for(var o in r)t.o(r,o)&&!t.o(e,o)&&Object.defineProperty(e,o,{enumerable:!0,get:r[o]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function r(t){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},r(t)}function o(t){return function(t){if(Array.isArray(t))return n(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["

Chrome Cache Entry: 805

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	706
Entropy (8bit):	7.548477864749643
Encrypted:	false
SSDEEP:	12:6v/7gZbenw27lf9jGpJ9c7MMGt8d/su+eMmy87Gk1DoQWH5C3bX3/s:tZmmpJ9z89jy8qk1C5Cj0
MD5:	B12B87CFFDAE1BC42B921FCF2BD9CF4C
SHA1:	C707F3E68D75D36B21C4D11945EC0F104D0BFEBC
SHA-256:	F6747270DB8CA343F3A491FC790D6DFB6FB051723BC222566A7D292E6F4A8726
SHA-512:	D0FC28243CD89CE5EFE47A4E37C8F2EE293441CB3E7F71EF9690C754B3ECE0AAE42390E670AB0577F2AC781EC73C2C5C6C466985A5DAA0C23F27109CBB71F9B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.......j....-PLTE/../../../../../../.....H.....k..............N.F.....tRNS..W.0.%......>IDATX..1O.1..Oc..&...0..'0."R...- 8..`...H...qUL....3..^.Jh.oq...\.......xu.a.kd.m.:.-..\+.+.yba...++H..bi{...X.6.v.#....%._ .[a.&.8d@...Y....q.@.2.8.i..9.P..y.Pr..2 ....0.k<.p.^..(.i....F.@.9.(....h..z..zt.e...@...zJ..d....@.....@.k..5K.nG..3..E.5=...-..0.g...........XuU.C...h.?......o.@...=D.?.....A.e.....#i...SMe..M.....uCh..6...uY...XX.....#...k'. L...w.v8g.$.02.........oW.<..k.P......0....'"..e.....uk)...I4.A.#.j..S..nr$..X'.6$.7x.W.O.;.-..Gjn..].{....Gi.Y.\|P?..B?.8.A...`O.8.n.h...b.d.....^.......&tZ.N..%>yE......./........U..2.s]...b9..w.C....IEND.B`.

Chrome Cache Entry: 806

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	802
Entropy (8bit):	7.1308074630907585
Encrypted:	false
SSDEEP:	12:wPGHQC4PGHQCHz9NVhEFl+F4bO3prXk0JRSM9CnoYigwStFm665MlKvSW9vnNu50:wP1P2nKltbE5rRbCA66Mcvn99bn
MD5:	E2AB0EA8C7FD54BA949C2FA993A91900
SHA1:	D31CBB4747779B5902A5C2BDB9CD432272B06CAB
SHA-256:	263779B84BB6385F707AD23478BA13FEE17BA3F827A6078C3891A57A3B8FB544
SHA-512:	7ABB5E0D6A9D77EF16602AA28AA015A96B440C7ED371B3C21BEEDCC2D77C18AEBA8A2B12752E13DAF936B9538BBC0A813576EFB7EA9C221DDDE42FD4B1B82EF8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . .."..........f................................................!"Q1B#2C.A........................................Q.............?...;s.cf..`..#.u.8?v.m.....j.#G....2..5-hv..+..t...!(N....M:.)gk...^%^.FI......9...G..N[qPnX&...fvu....}..o..6....xN3..G',...b...E#...R.wi.".zC.V..T.R...lw>fJm...5...]....l.`..Z~..^.......Qy..`......O..6Dq..W..4..}.q.E..`m..yVOW...f@~_IZW........m....a.m...W.Q..-.U..........N.l",ITD..!....`.,r.^\|H.p......I..K8.Z........l...8.H..5)I..+J[;...e.{,oY..^}..J.D.V..U.m..q8B>...R./@..._.....X..S.....G..h.27VK..&+...f.*N~_iBQ..Tf.&......+.....g.NT.cO.j..M.....t8.... ....-..B..."........

Chrome Cache Entry: 807

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (801)
Category:	downloaded
Size (bytes):	802
Entropy (8bit):	4.676190270534721
Encrypted:	false
SSDEEP:	24:1R6qkY/WXLe4vg8KAlntRgjePRnT7N+Lk:1rfWXLdI8KAtRGA7N+Lk
MD5:	35419DAF27391945D1BB566D54D7FA6D
SHA1:	559AADB4C5765DF84E7C4E6E170C16FE483CA4A1
SHA-256:	285EEC6C59FCDBB9340E48E41484AB4456A7D0C3CDBE0D8BE61B59B2EB4EFCF2
SHA-512:	63DDEC24BE82098FE2D6CF611112BE17C5D910E0479DA28F9A8B3C05AFDCD5869FAE2E78F21B3D745B09BCA54236EF70FFCF84A10913EB74BB11EA207A74917D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/section.css
Preview:	.container{box-sizing:content-box;margin-left:auto;margin-right:auto}.container>*{box-sizing:border-box}.section{background:#fff}.section--padded{padding-top:60px;padding-bottom:60px}@media(min-width: 768px){.section--padded{padding-top:80px;padding-bottom:80px}}@media(min-width: 980px){.section--padded{padding-top:120px;padding-bottom:120px}}.section--padded--top{padding-top:60px}@media(min-width: 768px){.section--padded--top{padding-top:80px}}@media(min-width: 980px){.section--padded--top{padding-top:120px}}.section--padded--bottom{padding-bottom:60px}@media(min-width: 768px){.section--padded--bottom{padding-bottom:80px}}@media(min-width: 980px){.section--padded--bottom{padding-bottom:120px}}.section--padded--first{padding-top:60px}.section--padded--s{padding-top:60px;padding-bottom:60px}.

Chrome Cache Entry: 808

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 51136, version 4.262
Category:	downloaded
Size (bytes):	51136
Entropy (8bit):	7.996068039320485
Encrypted:	true
SSDEEP:	768:3FAe3jLcamvGqdjPpS+BWQ1NtA4Frabkw809wOATpLdvwRK30y+NI/N:Gezh+5BWu+4/w80VATpL184N
MD5:	B038FFC2A3543DB59D8B131CC5F9585D
SHA1:	2A6CC7CD51B8BEDB5E3A4592F3FBE453E61FC09D
SHA-256:	7C4AE269051112F0505305834F30773D1666F0506ECB7662E5578CA7CF21A72C
SHA-512:	C65089A20BBAEE798AD97CB32840CD9E0BDEDC5F29D16215B2F6E14E3DCDCE37F3C5B6D87C7A0565BD15067D00DBB3FBD350AFF6174E3FEED53929528C9C7B86
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2
Preview:	wOF2..............m\...g.........................@..f..t.`..R...@..$.6.$.....H.. ......[...DT".....U`\|[5`.y/'pn.K.Jw....].x.x.@@w.].bEH......z..r.M..a...A.F...Kn..KB..J....r.......vLM.f.....%....Y.\V.tIw.+.C...s...9.......{#.xF;}P.\..3....w.u{F7.......HAF. ..ABE..X......:..j&..v..ot...~..H.....u..8.........y.....}.6$..A.I...$...d%.&..N....e.>..+.7..m,..QA.......F.v.`.....C`....dZ....\|..=......}.N.#.........x=..K..%V....n....._ku.....]1..UMS.G5....!.P5SU.bx~n=...s.....[._..#.PRA.D.sVq.)..........Ei.........5......K..HD..@:...X..\...d6{.fAWc..!..W.@9.h:.........6m.....s..E.I.6.Gt.l..................Z..L......%Y......$t.......@p....b.a\|....?.L]R.....S..(..p.b0@:i.y.......L..}f.p..~...9.....y.......L~+Jj..*..$U.N.i3Ng.N...0...{n.!vCH..D...6..W.....T.P..2..[...)..a...3cp]...@?D_h3.C......N.G...mO......7........=..u.o..j..$.{.6.....z..^v..EQ...<qt4.F..(.F.(..(..n.^I.SE.ms.n.c..D.Y.!q.y.}.s.K4e..H6....me.Gx.1.T...n..0&.I~E#a.Kg^.h.R.I[E.I.i.l..o.

Chrome Cache Entry: 809

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53175)
Category:	downloaded
Size (bytes):	53210
Entropy (8bit):	4.992077106959822
Encrypted:	false
SSDEEP:	384:OkKVcoJtNkWhEqbLlSx7jDngflKqWhJHeIbpi9r+g0JzuVNKjl3hZIxKQ9v1/dE7:UtoqykFuxWofeTBY
MD5:	08352A25ED94DBAA62C97194A5F054DA
SHA1:	DDE6006C7DCC2FB8500A2F17D2F7113C3A46086D
SHA-256:	4CCACD5869F0E8B971E00B98E9849205406E53277948A716EDF9948AA28DAE2E
SHA-512:	67BCFBF3EC0CCC4371B1153582C7F26B09B77048FBB790D220F66D9AF9EC6851B430527641B2852EA3C09CE4E395535CF35B4ECDE5FA6817DF0F14460DF340AC
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/dl.08352a25ed94dbaa.css
Preview:	#aol-wafer-dl,.dl__outer-wrapper{position:relative}#aol-wafer-dl{font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;max-width:900px;text-align:left;visibility:hidden}@media screen and (max-width:753px){#aol-wafer-dl.dl:not(.wmainwelcomescreenaolcom).dl-mobile .dl-caption{background:-webkit-gradient(linear,left top,left bottom,from(transparent),color-stop(80%,rgba(0,0,0,.75)));background:linear-gradient(-180deg,transparent,rgba(0,0,0,.75) 80%);bottom:0;-webkit-box-sizing:border-box;box-sizing:border-box;height:100px;left:0;margin:auto;padding:0 20px;right:0;width:100%}#aol-wafer-dl.dl:not(.wmainwelcomescreenaolcom).dl-mobile .dl__slide__title{height:70px;-webkit-box-sizing:content-box;box-sizing:content-box;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;-webkit-box-pack:end;-ms-flex-pack:end;justify-content:flex-end}#aol-wafer-dl.dl:not(.wmainwelcomescreen

Chrome Cache Entry: 810

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&expiration=1712100407&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 811

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2473)
Category:	downloaded
Size (bytes):	41096
Entropy (8bit):	5.3268698995580746
Encrypted:	false
SSDEEP:	768:jh1KbpBb/i38NOlPM6V3tqUL2rxkITGH4ARp3iLjZJi1EOfbXhbNvRfuKLBzdleu:jh1Kbn3B03tuZm3iLjZJi1EOfbXhbNvd
MD5:	AC01AE1E80E99FBDEF27C7736F5EC87B
SHA1:	9955CF4B8245CD2F4713589272CBB6ECD147BF5E
SHA-256:	6300F448D738E70AC11F0140DF0B3CE91A2DE9E0DA7FDF09D32D28031600BA51
SHA-512:	9512712CAAEF1E59F85050329213E0981C3BB90B5DCE0101E3D56B7C3A9ED43D41EE3406F0DE46FC5D00F9F94C034F9D414EA003E8F967F2DEE8629019A802A0
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Preview:	;(function(omidGlobal) {. var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function r(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},t='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this);func

Chrome Cache Entry: 812

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 813

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 814

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	34494
Entropy (8bit):	2.5673714334888444
Encrypted:	false
SSDEEP:	96:6J8uRKPoNMiaHnxMLGWJNSsiWjYSYob4rtEI5:6J8DgNKnx+pJIsiLS9sriM
MD5:	0EF6648946677070C5A9CE83ED9250A4
SHA1:	CCBFA853892CA173800F71934B92F4CFF47E6E1D
SHA-256:	9544F5A49FBD40446384A1B8EE264F03E68CDD69FAC07AB792E9FA742A4E253C
SHA-512:	E9DD1270115724622310E019B29C3C2F7DE50948D4DBF7627C84ED4827B89453F17EF03B1A0DC560078F4CADE496146DD2327FB7DF63B9826A34B4A7F1EDA12D
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%......@@.... .(B...D..(....... ..... ..........................................\H`.\H..\H..\H..\H..\H..\H..\H`.........................\H .\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H .............\H .\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H .........\H..\H..\H..\H..\H..\H......\H..\H..\H..\H..\H..\H......\H`.\H..\H..\H..\H..\H..\H..........p_..\H..\H..\H..\H..\H..\H`.\H..\H..\H..\H..\H..\H..\H..fS..{j..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H.......\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H........\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H...........\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H........{j..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..v......v........v..\H..\H..\H..\H..\H..\H`.\H..\H..\H..\H..p_..................fS..\H..\H..\H..\H..\H`.....\H..\H..\H..\H..\H..p_......fS..\H..\H..\H..\H..\H..........\H .\H..\H..\H..\H..\H..\H..\H..\H..\

Chrome Cache Entry: 815

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3781), with no line terminators
Category:	downloaded
Size (bytes):	3781
Entropy (8bit):	5.695932160326114
Encrypted:	false
SSDEEP:	96:C2BqUYnYwnBY5wY/42Bqht2Bqhybj5PLYUzYwS5iYDnyDnB9YrrIJMKdCbdq:DBq7Y8YuYJBqhsBq6LYoYfiYDCYLY
MD5:	596B746F8212E512BA735F04C425B2D1
SHA1:	7172C7A1DA761315FC9D0ACE7AC2A5D93C72AB1B
SHA-256:	E3E494378A7B1DFFDFDD0A1ED9DB1FDDB9990CBB3BE121195373792BBC0A338F
SHA-512:	689F9E0EF0D5764B295B0D32966B241BBBD173B955F172091F515455BB44C8E26793D18D0BDE72B28AD3867FC1B4CED6C66B5E7741FBF0889752985C2691C714
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=16549579&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=chPbtIxORfi6yCFJ0yqLHw%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NzIxM0RCQjQtOEM0RS00NUY4LUJBQzgtMjE0OUQzMkE4QjFG&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 816

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24901)
Category:	downloaded
Size (bytes):	41435
Entropy (8bit):	5.3658259017660805
Encrypted:	false
SSDEEP:	768:of8/g/Nl/s/s+s1Rfo0962FwYLSdYKriRzCsvFvCuQ:ofUoNl0s00OxrDuCuQ
MD5:	4967820F197A684874AA0DE4FBC70724
SHA1:	27B23C1043DD39A55EB7DC29E1392D2504BC7F5E
SHA-256:	DCF977FA4C166C04BE7D280DB68EDF165B62CC1A772974DA76C403AFFEA3887B
SHA-512:	71B186E3CA0B01D415AAEA8636F6FC178B21BA489C694D834732472561F09A03D130086BD4380575125E312ABBF5E65F4223D0EA3231E70445C6B9F67834111A
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-03-02 20:57:53 PST';.var rtb_sync = {"consent_rate":100,"reset_rate":40,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1"

Chrome Cache Entry: 817

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	424512
Entropy (8bit):	7.999613476679157
Encrypted:	true
SSDEEP:	12288:fjJA9Y+7G94CSwQQwJCCxGpDj+iiikdwc:lAbsvQhClVil
MD5:	591549021B20C030318CB3F83BBA0D61
SHA1:	F0FF19FDD65A11AE4E4CBB541277FBB35CBE4CAA
SHA-256:	002FF02443D8F005347D159DC93C34B18AA5BF7E4F12289CA048E8A85331F335
SHA-512:	722485E2F152D6114AD0F34CA4A40EDA2F3D19D7C411970ED7947C9A45B36D94CA1E37EC034A38943CE29D8351030CB35AC8B7FF94566D0DB71C8FB0CAF272B8
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|.x%..Q....9$i^....\|'.._.i../.s.Z.U.T&.f8.....K..@....Oj-..R.......HG..._.,..d.W.Z.UX..d.m9...X....[h.:l....)z.;.%d.Dtl...M..H..(Z...2F#j...L..m$.Q....=.@.?)Rq.....RCT.+F..#Z....i.W.'?.........2........K.^...u;.3...a./E^..:ki.`:").D.L....e....sxx.0O.9..&m.C..J..%]....:.o$.6.oH.vr..P.<..W..B.1....Z.....8....\.....k.\u.%5E....l...F...g.;_@..e.u....#.o..1....E.;.r....l... ....6...,......F.F..n........=9R[.Nz.U...b.2\|...{j.,....t....ZqQ...Dg..P.a...U.24..5c..3.M..J.3..T.....Pt.(..2\|...O'..b.Q.....0.E....<@.0B....n.O..<....?....."......@.....wr..9g.D:j...`v.VJC/U..\....'.d5nZ...G..w..+.DS0

Chrome Cache Entry: 818

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2805), with no line terminators
Category:	downloaded
Size (bytes):	2805
Entropy (8bit):	5.298810414395725
Encrypted:	false
SSDEEP:	48:cfnP6ie5QNnVtD0/KlZuw5PlVEvw3FNGOAoztb/910eUERwkVpTjzuewzQtqnHCB:cfnPX1tlZD5PlqY1UOAyF10OmknPz6s9
MD5:	5BB1F49C447EBA63ECE1B81D04BB2961
SHA1:	B508C038C4B0894052F8E7B8FAC233A986211D1B
SHA-256:	3B60B4762812F7868B34ED5B09D38C39CD209CAF9AC6E55CE529CE84B2B5117B
SHA-512:	6AEA2810E5C10E6467C8C5EE2D1C9C398FAF690D0F94313B059E08C9E3DEBA957AD13A774E7C6EBF20C79587DDD5754062212243A8D7A7E2B78BF42BD54A03D0
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/subnav.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.subnav=function(t){"use strict";function e(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator];if(!n)return t;var a,o,r=n.call(t),c=[];try{for(;(void 0===e\|\|e-- >0)&&!(a=r.next()).done;)c.push(a.value)}catch(t){o={error:t}}finally{try{a&&!a.done&&(n=r.return)&&n.call(r)}finally{if(o)throw o.error}}return c}function n(n){for(var a,o=[],r=1;r<arguments.length;r++)o[r-1]=arguments[r];t.store.debug&&(a=t.logger.tag(n)).info.apply(a,function(t,e,n){if(n\|\|2===arguments.length)for(var a,o=0,r=e.length;o<r;o++)!a&&o in e\|\|(a\|\|(a=Array.prototype.slice.call(e,0,o)),a[o]=e[o]);return t.concat(a\|\|Array.prototype.slice.call(e))}([],e(o),!1))}"function"==typeof SuppressedError&&SuppressedError;var a,o,r=function(e,n,a){t.dom.applyFunction("#".concat(e," .").concat(n),(function(e){t.dom.getElement(e,a).setAttribute("aria-expanded","false")}))},c=function(n,a){for(var o=[],r=2;r<arguments.length;r++)o[r-2]=arguments[r];var c=e(o,4),i=c[0],l=c[1],d=c[2],s=c[3],

Chrome Cache Entry: 819

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 820

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1647)
Category:	downloaded
Size (bytes):	1720
Entropy (8bit):	5.16504705806905
Encrypted:	false
SSDEEP:	48:QuYrP1b5QQFz4nsJsoqtS88ZsQ2JOHSaQbu:RYrPM9nsWoqtSLmewy
MD5:	D2142510763CACB79F3605E2928F988F
SHA1:	359E026B163F0F48369B1A5F8818AF00D89577E2
SHA-256:	9C25FAAD4CC7F3C631A608F8DF92AB8C3EB7D8AE45A5A0A8F458EBE589DB1E16
SHA-512:	BDCADFCE89C7F2F78398C9183A7F08CD6845383CE5E9FCA1C6B1348E7AE369B2586AF535ABFB98461DF46F57A95771B1156DABCEBECA8563FB37498F60722126
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/tier-collection.js
Preview:	/! For license information please see tier-collection.js.LICENSE.txt /.this.LIBRO=this.LIBRO\|\|{},this.LIBRO.tierCollection=function(t){"use strict";function e(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var i,n,o=r.call(t),c=[];try{for(;(void 0===e\|\|e-- >0)&&!(i=o.next()).done;)c.push(i.value)}catch(t){n={error:t}}finally{try{i&&!i.done&&(r=o.return)&&r.call(o)}finally{if(n)throw n.error}}return c}function r(){for(var t=[],r=0;r<arguments.length;r++)t=t.concat(e(arguments[r]));return t}function i(){for(var e,i=[],n=0;n<arguments.length;n++)i[n]=arguments[n];t.store.debug&&(e=t.logger.tag("tier-collection")).info.apply(e,r(i))}function n(){t.dom.equalHeights(".tier-card__price"),window.innerWidth>=850?t.dom.equalHeights(".tier-card__price"):t.dom.applyFunction(".tier-card__price",(function(t){return t.setAttribute("style","height: auto")}))}return t.store.once("SUBSCRIPTION_CONTENT",(function(e){i("Handling %s content: %s","SUBSCRIPTION_CONTENT",e);try{"tie

Chrome Cache Entry: 821

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1878
Entropy (8bit):	7.600634030077224
Encrypted:	false
SSDEEP:	48:D0XBmvq4wVvL61MnMiValdJ8nVYJHZvU8qTddQuS:mrxVvNMFlz8nVYRq8qcF
MD5:	1AF738852894064E68E3C5A45C88F036
SHA1:	DE6D10F1FCDA7CD37297C75933106CAE94E89874
SHA-256:	6196711A2DB5F39DF66F740B27310E6FB71BDB80D22E7D352C0FAE1D436DDF27
SHA-512:	184E9280278CC5792C95B5F3427A0EFFAA949918BADDB6FA76B896523341E5648A2D651453D2579EC31711AD69BD979E1471C86BE88A1F7A3A9D77CDCA094918
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................'...1.o.....'..2.o.mD...H.g..'....,..&.gG.;.FS.w@..(..'...:j3[....fG....0.+.MQ...r...).-...\5..%S.c....4./.qC8.l.uB.JRN.e.VMw@V.8c-]....`J.,....~.....!...H......y.sQ......".i..$...B.i....7..={CU. ...[&`yAU....]J.o..jF.#.rB..(....6.z..cH.......`..j....t..m..\|G..&.u)...........YL.{?.e.. ..{....#@.j`+^...K.f..?."r;Xe@..TN....QO..<....%.1W"a.........g.L!....{8.c...g...<.v7.s..v...tU..%......x;..T....3...0.g!..De0\...t1...^S;..t......o6h2\.x[....m:.....0nP..`.\|r..L...ca\...`9.@.z........\|...^S..a.c1jQ.j....D.i?.y.....}.mE..x_mJ.R).oL....za,...xre]D.?!....6tRNS...D.J.......N.;..5..2....Q^............zd..XW/#...=....IDAT....eT.f.......u.[w.{I.$.....(.....E..).u...-..6www.N;oF.;..(.{z/....r.....6e.~..h.o..M.....8...[.o@.._v5..x.

Chrome Cache Entry: 822

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6932), with no line terminators
Category:	downloaded
Size (bytes):	6932
Entropy (8bit):	4.8526191212865175
Encrypted:	false
SSDEEP:	48:TYpRchRqxmeujvMpnf0AA71518eYe2KwQooAqvzBbLn:TgROSujvMnfpA71r8eP2KwtonBvn
MD5:	2BB5C6F4329E7A973B6F4C160591B2B5
SHA1:	213D686CE9D9989B51A584596A14925E3D46C3D4
SHA-256:	71459743F44381ABF0035638089DCAF9EA7D8BADC46752742A0DD5046045C3B6
SHA-512:	53A2CCA1E4D45D7CFDFCED4E47981B91777EE1CC8090DEE46E6C0AE2E71E84A9B50F116E756BB416F375F2D472C9DC522022DAC1C1D945910C73D9ECB1503934
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/navbar.css
Preview:	.header.header--theme-1 .header__nav,.header.header--theme-1 .header__nav .header__nav__a{color:#434343}.header.header--theme-2.header--open .subnav__nav .subnav__nav__links__link:hover,.header.header--theme-2.header--open .subnav__nav .subnav__nav__trigger:hover,.header__nav .header__nav__a,.header__nav .header__nav__a:hover{text-decoration:none}.container{box-sizing:content-box;margin-left:auto;margin-right:auto}.container>*,.header--open .header__inner{box-sizing:border-box}.header.header--theme-1 .header__nav .header__nav__a:before{background:#0091ff}.header.header--theme-1 .header__nav-trigger .icon svg{fill:#303030}@media (max-width:869px){.header.header--theme-1.header--open .header__nav{background:#efefef;padding-top:1rem}.header.header--theme-1.header--open .header__nav-trigger .icon svg{fill:#fff}.header.header--theme-1 .header__nav{align-items:start}.header.header--theme-1 .header__nav-trigger{position:absolute}}@media (min-width:870px){.header.header--theme-1 .header__brand

Chrome Cache Entry: 823

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19021)
Category:	downloaded
Size (bytes):	21388
Entropy (8bit):	5.339183109875294
Encrypted:	false
SSDEEP:	384:8LxT0GQ6GV4tv0lMGg2geQtfnHN5pOEiXz4wDQjZvy99KQWwY4RXrqt:oRXMtCGsOvz4wDQjZvy/KQWwY4RXrqt
MD5:	9EA29F209FC2A89E56D99C016C4319C9
SHA1:	205DB958BB57EF523BCAB56ECFEA6F76899ECF8F
SHA-256:	44B57037A963CF8AF0E8654725E411D0A22077BC8A88E4BB4EBE0C4F68C115C3
SHA-512:	623046BC093873C908478E70E8FDA508239714EE5A204FD10C24AEC99D8AB049C627B7B5539656A0E747893E52B0CFEA088455DED08A01AC000486F7999EA799
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?cid=8YHB8F956&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":"e","coc":"NA"},"cs":"1","lookup":[],"ussyncmap":{"disable":[]},"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds","crt","ayl","bs","ui","shr","lvr","yld","msn","zem","dmx","pm","som","adb","tdd","soc","adp","vm","spx","nat","ob","adt","got","mf","emx","sy","lr","ttd",58160,"mn","tlt","pub",55953,58301,"idx","dtm",57926,58267,56551,58259,58601,"ctn",58280],"ngGroups":[],"bSize":1,"time":7000},"csloggerUrl":"","optout":"optout","cslogger_host":"lg1.hb.yahoo.net","ck_del_sld_tld":false,"gdpr":false,"gdprconsent":"1","cookieDeletionList":[],"ccpa":false,"ccpaconsent":"1","info":{"domain":".hb.yahoo.net","cid":"8YHB8F956","itype":"","pid":"8

Chrome Cache Entry: 824

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	9556
Entropy (8bit):	7.945182730641828
Encrypted:	false
SSDEEP:	192:/8INLUsmP0yy56MvdGwuIwQzIsStMnkwnWQr5b3ign4Vfbn5:/8vs60OMvwwLwQzIbtMndNr5bP4p5
MD5:	D9EDE0BE89101A8321565977239E2F6E
SHA1:	469353D237E448DAD2B7655DD7E437930817152B
SHA-256:	4083DB0748404C8CDCFFE67A2951C697CA311DBDE0AAE012A726168779B97649
SHA-512:	EA66E0571C023F262FB5ED983EB6D7A8F37B616FCEB4CAB89A8799D8E610B694749D68B3E202FE3178850BA251203883D421DAD2B97F5ACD1582941D8D8E75B2
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........4................................................................3 m/y......]E....f..:"n....XS..G9.C-.'....s..5GWI.=g.M..I..vE......l...g.....8.H...P.}..q.q.....zc...!.......O.M.X..([2@..a8..[.6..o....u.$..l+R.9..."...Ll.6.4..i....C6S..5...Y.b)`.....'..YR.+.Q..F..&3......~........UIcHE....[..'.....l..`Z3r..Mu.g.D..H....l.+.kj..+.8;.S..S...0.Lm..l.<-....k..\..+..5".........D...6.Gf.....ASlL...u.;.\.\|G.. o.KV$..z.B.F..0'.$C...+......._..?V.....Se..I.J...!S...%..(....4.^-.........fF:.e..Z&._....j.e..yY.:..>.K.....rAt..WSK2.)z^VJ.j...........oJr.iz.H..k.*..T.`..3L.$.Xu.z.......#....$Z'.j.}K..%.)0....hf<........R...>.+......w.+q...Q.Z.".h.d.a...Y..5.~\.}..Q....W.5....&..)m9@.abX#.].K2....;..\|.nB....... uJpC6.S..>..M...Y!a.eS.x.....Q0.g&Q.r....{..l8........"..G

Chrome Cache Entry: 825

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	984
Entropy (8bit):	5.37207944848264
Encrypted:	false
SSDEEP:	12:6v/7EZoDl/f8XvBNo/IqlBLhAjIPmzpY+hoN3xv:+sBqlFhrM2Nhv
MD5:	9A4101980859C21B2FFA8ADCD6788916
SHA1:	3CF976142C2B94E4DD0EEBB45175F22B89C44FFA
SHA-256:	C95AF6C2ED68F2D843490B6D84CA16D0ADD89C698D2FF27E10D0B1D7F0A9CF3B
SHA-512:	03102CDA14C10CB88DB6BFB2860D6C2453239D77FA1B8D21C11938DCBD90B06595DFEA7EDB38BD41C1363D053EB0B1C6E52FFCDE030225BEAD4C05AC479DE772
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................................................tRNS....t..@.......,.E.=W.....h.Z.$..9..S3uN.....c....J.P/y.2CfUiF.5.D..A1....&\|.....\...b..d..s.Y.)...#......0.n..8.wM.{.zg.K..+..r.'...\|IDAT....US.A.....@./....#N...=...SyLO..H..h.V.P.R'.V\.^......E....S....c..;.o.......e.....P.xg...?../....).iS...Dc=mu..g....pk....h......s.0.VG...W....2......&.......D.........y=...&.........\|.....d...IyU.s....>..5...Z.....'..N.M..r....r`.S..)k.{..J-.WY.J0.......:..%x..KK....W..........@..$...}.&.....u7v..L.u.\|...e.c..kz>.J...&.j.Te.L.2&...*..v..m[..=.....8.....IEND.B`.

Chrome Cache Entry: 826

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 348 x 306, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14835
Entropy (8bit):	7.954001043786994
Encrypted:	false
SSDEEP:	384:gEqF3cONAG6VBnj+PKWQ6g9ixMO6pCnMGAq0M+/o3:ydcoF63j+izwDnMGR0M+/m
MD5:	530BCB090A875C0F904C395456A90B43
SHA1:	136F8117B89320679380320668FD69F5331DE8D7
SHA-256:	2D11F8B1A72D1D9AECE3A6DDA3FD06F48ED5131CF15EEF6D9046FD3F94663EA5
SHA-512:	0A88F05E1B3BCA7672E2C52FD7BAFB852902D17DE0835BB933958AA3B1295664BD46C66619FA883246E98914F1AE148AA31C23FCF6B7FEC00B61750E0EAB1407
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...2.......h...9.IDATx.._...u.OU.eK..-..%.%..J2......T....V.....4.6A...B.x.{A.I`x..E.X...H....G....E.@"ee...(.U4$..g8......s....T.[].].]]...fw.[].....w.=.!.f...~?....(^..+$rB...#.f5.....-.!.Z..m..#,.~...rNF..I./h..\.j\|.....Gi..uO..kO..-.G...e....;L...;.....@....V../.......g..........Z..........z........Y .Z....K..b{.j.H....0E.....A~.'&g)K.......g{..^@..&...L..?.....%.K"....6.r.Jsx....&.....D..l..O3.D..3.@.....jEE.,.....p.L\|...Z...ZH....1E+......vX..50.s%..?..w..m.b.:H....+..=p. ...............\...?'.s{..%p.).e.M.=...O.u).X.9.&.#.=i.].rN.#........\.n&....\|.:..q.....$.,...8.e.d..Zg!....=.EKN"...D.....i....<ZH..}..U~...}.u.a\|.u....Y.X[..^IHj....&VHr.T.BP(.T......X......88,..=2.6C:.v.....UF.>E.MF.."..C..J..../.........Cg...\|.G..p....5...o.L.\|.]..m..l1.W...}..`..J".g..Sm.Y.....".X.H>...k..I..@..7..z,......o..O}..7.............N.t{,.sd/..g<....&:b.8..u......(%.[.D..F.....g..J.....N~..2..C.~....7M]....Q-.H,2.3]..<#./.]0@.........

Chrome Cache Entry: 827

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2128
Entropy (8bit):	7.677191672138757
Encrypted:	false
SSDEEP:	48:qXeCAk0/WsfR9tkzy6qRnoBpGKsvyFKoYDoxxrOXTL4t7:qXeSO9tkzKJcEKsvyQ5DMrOva
MD5:	A8A6107564C5F4AC3BB288F2DEFF0D0A
SHA1:	D7F5B5E4C2EB2B952D648899CCB1A520BDC29A90
SHA-256:	7536DF678E43FCD1BA8D125D456933603F55162E1CE7CB2E4A205A23A219760F
SHA-512:	E7296B2F42434C6FE2BF6A8120C64303F382E74EE167BD68BCCA5AC09BEE11A07730E311D83787373D9D5FB7F36F3E2B40BFC57FCFFAA4166BA4E7811234FF7A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.........................................................................................................................................................................................&....k..&....,..).{X.yc..2.k..~K]t..n..m..~FS..}Q.xi.....A./.za.{[$o.Os.0...8...J..k...z].~H.}O.-swr..C.\|T^...o..p.ywnbu\|l..@q.Ks..\|Q.1.(?......r..<......{.V...<.\|V.......l.'...{\9q.3..jvx.?:.......@.u..}M.zb(t....x..@}.a.....3...&\|..yh9..Q..4p..x..{Z}xl.m..*s..C.....x..#{..yg\..z`.xkV..4\|.Bx..yd.(6...m....a..u..du{...L..Yt..:\|..St..m.....6.4J......k..n.ovu....+.=Js....e..O..z_......a}..K....;}.,p....@.......D.....s....\..C.....h..........5v.v.. ~..}L#v....[..?..D.....y.......OGr....nvu.....eK.....g..%y./\|.W\|.{.........~vQ....g...\|d{..............>tRNS....4.(...{.!,1........x.w...Dm.ZO.`....>.A.;..u..Iso.6..j.wJg....IDAT....eT.Y.......`.......1..$0.t7H7H.4..C....`wwoww....g.."..}..o0.....dP...,....\|...m?,x..UC.$..2[..=

Chrome Cache Entry: 828

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	6.016632845734529
Encrypted:	false
SSDEEP:	384:kjTZ7ScVHTuNSfKVb6u76ah3NEQaWJoFcRgEEG1/F97:Epthseu760GA+FS7/F97
MD5:	092D88FE50C818AF8E49C5DCBE3AB160
SHA1:	14523AAE01B3420B1A1FE8C20F7CD18F6DB319AB
SHA-256:	5A1E97D30CE2FFC9CDEE330334606B4A3AC032A3FADFEB31BEA9D18C6AECD2DE
SHA-512:	899F0A0D154BEC0BEFB5FD937D8BA27C10DEF85E4C9F05F2C8F0665B3394817BD3154768BE1ADCDCB57AB1211A763D723F9EAD59C645EF60B0F37AB9AE8AA765
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202402220101&st=env
Preview:	{"sodar_query_id":"TAflZdWHKreX_tMP0LSMgAk","injector_basename":"sodar2","bg_hash_basename":"hhT7r2j7IM84IjrHPq4DliozylkjplqSUN38T7c3Pqk","bg_binary":"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

Chrome Cache Entry: 829

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=4&external_user_id=4228731401736629831
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 830

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14326
Entropy (8bit):	4.108366455679344
Encrypted:	false
SSDEEP:	192:l5BVmyWVRlpQJSkNqm+xg3FDp5UzWv8mmMt6UcmByiTYBkhOUciaSMkvZsUEL:l5BVmfoim8EyWkrMtBcnsOE0kqL
MD5:	E2C8E7F300B16A993657A04B82EFE131
SHA1:	5C8709BDD0EBAA8A9738AEB345D294E53DA0377D
SHA-256:	411F6CF312CD93E7A0AE5F7984124FD941656B1BFA72D156DA780C0F1B026B30
SHA-512:	5C24D69ADEE532D6DB2F894C6A4878318BC418E5FA351FA4B01736C253DA46557768D638D80B45D28E66EC090F76DDA5425C19ABF114A4C46FCA110DF8948859
Malicious:	false
Reputation:	low
Preview:	<svg width="174" height="153" viewBox="0 0 174 153" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_916_4485)">.<g opacity="0.25">.<path opacity="0.05" d="M91.2871 152.899C135.089 152.899 170.597 151.4 170.597 149.55C170.597 147.701 135.089 146.202 91.2871 146.202C47.4856 146.202 11.9775 147.701 11.9775 149.55C11.9775 151.4 47.4856 152.899 91.2871 152.899Z" fill="#959595"/>.<path opacity="0.1" d="M91.3182 152.794C133.221 152.794 167.189 151.334 167.189 149.533C167.189 147.732 133.221 146.272 91.3182 146.272C49.4159 146.272 15.4473 147.732 15.4473 149.533C15.4473 151.334 49.4159 152.794 91.3182 152.794Z" fill="#959595"/>.<path opacity="0.14" d="M163.787 149.515C163.787 151.266 131.359 152.688 91.3542 152.688C51.3494 152.688 18.9219 151.266 18.9219 149.515C18.9219 147.764 51.3494 146.342 91.3542 146.342C131.359 146.342 163.787 147.764 163.787 149.515Z" fill="#959595"/>.<path opacity="0.19" d="M91.385 152.587C129.492 152.587 160.383 151.206 160.383 149.502C160.383

Chrome Cache Entry: 831

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (905), with no line terminators
Category:	downloaded
Size (bytes):	905
Entropy (8bit):	4.946522542818799
Encrypted:	false
SSDEEP:	12:arWru7nRML5r3NIrrWrruID1hnEARGIIBB1jixFIKQMenl1h5MqvNoOgnj1jAYn:enwWohn1iBjjix+znl1j9+Hnj1jfn
MD5:	551920C4B13F657CE16E01EFCBEE12A3
SHA1:	2846B58353CB8027D933CA9D8002DB6AFB04B0BC
SHA-256:	F656E82A6CFDCFDEBBCE7B19F9025EED37B458161C5FE8353533046B2D77D6BE
SHA-512:	667D4CB027E7B83794727413D251A1877D7998170D1DBF928B379CD6FF57D287B5D49B3B4B020C5DFDA5F93D0927F10AE829A0387ED6A0919E060EF7E52AE435
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/td-app-aol-production/assets/v1/css/layout/homepage_v2.551920c4.css
Preview:	.MainCanvas--grid .RightRail{padding:0;margin-top:0;position:relative}.MainCanvas--grid .RightRail.home{margin-top:0}@media screen and (min-width:901px){.MainCanvas--grid .RightRail>div{width:300px;position:absolute;left:0}}.MainCanvas--grid .RightRail--sticky>div{left:unset}.MainCanvas--grid .Mainwrap{padding:0}.multi-col--dl{width:unset}.multi-col--dl>*{padding:0;width:unset}@media screen and (max-width:900px){html:not(.smartphone) .multi-col--dl .rmp-module__dl{padding:0 .625rem}}.multi-col--dl .rmp-module__gam{width:300px;display:none;position:relative}.multi-col--dl .rmp-module__gam .m-gam__container{position:static}@media screen and (min-width:901px){.multi-col--dl .rmp-module__gam{display:block}.multi-col--dl .rmp-module__gam .m-gam__container{width:300px;position:absolute;z-index:100;top:0;left:0}}@media screen and (min-width:1281px){.multi-col--dl .rmp-module__dl{margin-bottom:10px}}

Chrome Cache Entry: 832

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8396)
Category:	downloaded
Size (bytes):	8397
Entropy (8bit):	4.777850336037446
Encrypted:	false
SSDEEP:	96:c1nmXbh+OuND6DtdIHbpM3DDi1a/RZ7nA:g+b8OjcajA
MD5:	60FD5FFC4BC10973489550191AD3F133
SHA1:	98A29E22E0EDCB3DBE8FD8929CF5C86998390FC7
SHA-256:	442A53DFBA0954826E3DEB1EC35809653EEC9308B49F0772BAE44C4342A06F80
SHA-512:	E1A498AC79F5F73E89225C4289174B9DA1533F657068958F664E362DEB5848F7B43944B494BE81584D941CEF868B8B308CAE8927D68AC820FA5B7835A69A1881
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/button.css
Preview:	.button.button{color:#232a31;background-color:#fff}.button.button:hover:not(.button--disabled){background-color:#d2d3d4}.button.button--text-color--dory{color:#0f69ff}.button.button--disabled{color:#b0b9c1;background:#f0f3f5}.button.button--barney{color:#fff;background-color:#cc008c}.button.button--barney:hover:not(.button--disabled),.button.button--barney.button--hover:not(.button--disabled){background-color:#dc1ca7}.button.button--barney--disabled{color:#b0b9c1}.button.button--danteinferno{color:#fff;background-color:#c90606}.button.button--danteinferno:hover:not(.button--disabled),.button.button--danteinferno.button--hover:not(.button--disabled){background-color:#c90606}.button.button--danteinferno--disabled{color:#b0b9c1}.button.button--danteinferno--yellow{color:#fff;background-color:#bc2222}.button.button--danteinferno--yellow:hover:not(.button--disabled),.button.button--danteinferno--yellow.button--hover:not(.button--disabled){background-color:#fc3;color:#000}.button.button--dan

Chrome Cache Entry: 833

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	51
Entropy (8bit):	4.405186312891286
Encrypted:	false
SSDEEP:	3:LL6vZmJMDrgEdu:amWgEdu
MD5:	5F7595751D45A08432117255C076327D
SHA1:	0C9D0432E80479179710B22B8D9B3819069E6375
SHA-256:	F0D8B7F0C8AF1C91DE345CA0FC2810121B02A6D41035D69A9F0759D1C73D928F
SHA-512:	48B656479A78FD5DC49886F91C48D246AA15DA3B3271B5FCBFA8D43062D590988D8B4E52B2D295331BFA262B0C8EDF6DB0BE21F63514F9F27D6AAFBBDCACAE27
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/icon.css
Preview:	.icon{display:inline-block}.icon svg{fill:#188fff}.

Chrome Cache Entry: 834

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=18eb0dcf-ed6a-4763-bd9a-3f2b8b726233
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 835

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	17762
Entropy (8bit):	7.9750760764874595
Encrypted:	false
SSDEEP:	384:6zSa3Sbiy28GdGriiRJZr5x1jLysVe2vvPfJF72MpML1mKbhL:+deAGrdHe2vvPzpMrx
MD5:	E261E96AAA43432A9B52BA249FC0B0A6
SHA1:	4EB97150306C4F608A495BD1201C03D357070BE7
SHA-256:	96CBE2C69F184EED8526AAD4CE7239628D495EBC4B1F1C8285A4235367CB2CEE
SHA-512:	8109FDF5171E8E4E3734094D6CC36161A16CC05889CFB91C7258A34A91E3F21E2AB173F324D1C8744177A95C1542A8BF71C846FECE5231F68D14C872D45E73D9
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................%......%!(!.!(!;/))/;E:7:ESJJSici................................%......%!(!.!(!;/))/;E:7:ESJJSici.........,...."..........3................................................................}.{>W.....{.=.xH...]n.h.a.Z.Uh.w..sn.a....H.P.TK?.hu.......k.s...9....~..Y..Eu............M.]..k.I..z$.............P....+u.CdF.....C.LEg...j..l.h8....OL...j;.Y.C...q.q..4....t..4.37\#%\|9.e04n.N.B..0.O0...6.p....\|.}.:...l3..].Q4^{...h.Vp..flkN<Ylm............: .Z.T..1...9Q.j#.G....`5.~...[.Y3.z.J.....,dy...Q....).......b5...~v..u..,k....d....Q...\pb....u..?.......;Y#..9..%..l._m..Vx5.5...]d.C...j.qI...$.cj...Ow!>.H.}].....,.9.Q..8F.....uv,.}..Fm.e\|.V}....M..g....J.hIPj!F.bd.$..M.Xj,...k...U.Oo-g... .@B.......U...\|.=....0.n......zm.O%.M",.(..~..,.KF...IG....G...h../L.......4.T..A.6.b[..2.4n.+..^.v...3.......4..A..A......U..3.....,.&.@b...<.sd..OD.;.(.l...o).....{.l....F.X.w...$^...D...zhk;O&4..wp....!.a].w<

Chrome Cache Entry: 836

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2136), with no line terminators
Category:	downloaded
Size (bytes):	2136
Entropy (8bit):	5.084569635755171
Encrypted:	false
SSDEEP:	48:aQ/gpwwRO/sVb2UW2z5VqnVZKWPF9PkAPk5/fiO1Lz6ss6Z:h/gpJROC2v2z5VqneW7JyiOlzP3Z
MD5:	5568C88CB8CBEBC2E6CBCF3F97A59C10
SHA1:	6A4A693355059659F8126FBCD06523C0CCD169F8
SHA-256:	50BFE9FD3D194658E99944A4B9C7065042CA41A32830059271BD40C0356DE057
SHA-512:	9E1F5AC247BA634841E97998B71B91C6412DFA76721826401C07C811F542D14B216C082DC441F6D92F820F22962D2B1041FCBFD92F4FC20B799AFB0274A28D3B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/td-app-aol-production/assets/v1/css/custom.5568c88c.css
Preview:	#uh-search input[type=text]::-ms-clear{display:none}.desktop body{overflow-y:scroll}.smartphone.min-height-enabled body{min-height:5000px}#guce-inline-consent-iframe{max-width:965px!important}.multi-col{display:flex;width:100%;flex-wrap:wrap}.multi-col>{width:100%}.stream-half{display:inline-block;vertical-align:top;width:100%}.stream-half{display:inline-block;vertical-align:top;width:100%}@media screen and (min-width:1100px){.multi-col>,.stream-half{width:50%;padding:0 10px}.multi-col>:nth-child(odd),.stream-half:nth-of-type(even){padding-left:0}.multi-col>:nth-child(even),.stream-half:nth-of-type(odd){padding-right:0}}#YDC-Stream>ul>li>div{padding:14px 0}#YDC-Stream>ul>li>div#item-0{padding-top:0}#YDC-Stream>ul>li>div .maas-item>:first-child{margin:0}@media screen and (max-width:480px){#Col1-0-ContentCanvas{padding:0!important}}.smartphone .YDC-Hero .m-ad{margin-bottom:-4px;margin-top:7px}.dl-mobile,.m-video{margin-left:-10px;margin-right:-10px}#aol-wafer-dl:not(.wmainwelcomescreen

Chrome Cache Entry: 837

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.787782031835941
Encrypted:	false
SSDEEP:	3:YEOBHKbDuL/hOr0RY:YEOBgf
MD5:	1DDD66A89AFEBD6F7D2EA244030AF8DB
SHA1:	19E37864DF85A0C0FD153FCBDC74746BB1BFE753
SHA-256:	2B67D75B6EAF30B13A4453A4B2214141371309DE4A4EA5E88F9E6868E607B118
SHA-512:	750E1334E3037FC51EBD6EF5BE1E489AA9D523E2C1FDA367CF528DFC2E9B69A3FE4AA1D48B25FAD77103254679076AE12E73C9ACBA5503AC30C5B2A49D42F909
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58784/sync?format=json&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&verify=true
Preview:	{"axid": "y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A"}

Chrome Cache Entry: 838

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2953), with no line terminators
Category:	downloaded
Size (bytes):	2953
Entropy (8bit):	5.3929053805456695
Encrypted:	false
SSDEEP:	48:jlgB/DS7qNrfrQbWu1/390OHvcoh40quLY09yzwxJ+2+JxqMJbE+mZygIYvf4J5g:jEL4q5DQbWS33ku40qQYsyzwxJ0bqMJO
MD5:	96AB7772A2B7C949EDD6B95E6ABC8317
SHA1:	83A6ABBDE16D4C72CFE1419D72DE361E4A292FA0
SHA-256:	CAD748D566493B79033CE00A0C0E6DF797A1340A6992F731D283D1440B0E346A
SHA-512:	C67EBFD237FCA4DBC3D5DCEB00D9204726D43B7C6765D1A3880DD5F9C36984531F2214FBFB60C15054F8382E8003E6239DD1E50AF72CAC120EC423BA2C4D2C26
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/js/vendor/json2-20140204.min.js
Preview:	"object"!=typeof JSON&&(JSON={}),function(){"use strict";function f(t){return 10>t?"0"+t:t}function quote(t){return escapable.lastIndex=0,escapable.test(t)?'"'+t.replace(escapable,function(t){var e=meta[t];return"string"==typeof e?e:"\\u"+("0000"+t.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+t+'"'}function str(t,e){var r,n,o,f,u,p=gap,a=e[t];switch(a&&"object"==typeof a&&"function"==typeof a.toJSON&&(a=a.toJSON(t)),"function"==typeof rep&&(a=rep.call(e,t,a)),typeof a){case"string":return quote(a);case"number":return isFinite(a)?a+"":"null";case"boolean":case"null":return a+"";case"object":if(!a)return"null";if(gap+=indent,u=[],"[object Array]"===Object.prototype.toString.apply(a)){for(f=a.length,r=0;f>r;r+=1)u[r]=str(r,a)\|\|"null";return o=0===u.length?"[]":gap?"[\n"+gap+u.join(",\n"+gap)+"\n"+p+"]":"["+u.join(",")+"]",gap=p,o}if(rep&&"object"==typeof rep)for(f=rep.length,r=0;f>r;r+=1)"string"==typeof rep[r]&&(n=rep[r],o=str(n,a),o&&u.push(quote(n)+(gap?": ":":")+o));else for(n in a

Chrome Cache Entry: 839

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4554
Entropy (8bit):	4.61581982544064
Encrypted:	false
SSDEEP:	96:GR7IX8Qj1CfMYSsR5ZMs0cMI+HJsPG565qANdsz/ttmdIKvawtBWRXc:C7IsQIJTxFZWaR5qANds/t48wrwc
MD5:	AA22084964A4A1B18A96B1448C098B4D
SHA1:	EFF4C9397998BC864D2F2CDB12F28D9CB05B6850
SHA-256:	488571C74C4E4896506507920E5D1F5949FA2CE060CBD42E7759C09BA5E5524F
SHA-512:	AE7BCF153F6B0D0B26D2E8A37ACE1B7096FED9705569CCECBFB909A416C5EE8589CFCE9D65DE823CF0A1456F73C52E9F8EA531D31968BA2D22E2FF86A597BE26
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="231px" height="26px" viewBox="0 0 231 26" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 53 (72520) - https://sketchapp.com -->. <title>Artboard</title>. <desc>Created with Sketch.</desc>. <g id="Artboard" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="AOL_AdFreeAolMail" transform="translate(38.000000, 1.000000)" opacity="0">. <g id="Group">. <g>. <g>. <g></g>. </g>. </g>. </g>. </g>. <g id="Shape" transform="translate(2.000000, 1.500000)" fill-rule="nonzero">. <path d="M56.4,21.2 L54.6,21.2 L52.6,16.3 L44.75,16.3 L42.8,21.2 L41,21.2 L47.95,4.25 L49.45,4.25 L56.4,21.2 Z M48.4,7.35 L45.35,14.75 L52.1,14.75 L49.05,7.35 L48.75,6.45 L48.4,7.35 Z" fill="#363636"></path>. <path d="M6

Chrome Cache Entry: 840

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4301)
Category:	downloaded
Size (bytes):	4366
Entropy (8bit):	5.114587794308763
Encrypted:	false
SSDEEP:	96:VCARZPBYLvx8GtxGdhoS13ziteqYxis2m4aB8TVf1pQsLqIs:VCMPyDxP+dqS13aed5wvf1pQT
MD5:	CD0AD2D50A7E4A574B8D749F22E2FFB1
SHA1:	6CCC3309390A8C2F27975FDEC712ADF7B26DB9AF
SHA-256:	E1897197C32BE441C5C75426C1DF80241EAFCEB7B8A3027CD40A148A809870FF
SHA-512:	C61F8388912AF72D5711D9C595A51F43F793EC704544B869A738CAF25B051C0E68DB807E5E392F27A3D31544FCD05A15956FF73E02D4A043A386E23AEB8241AB
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-overlay/3.0.0/videojs-overlay.min.js
Preview:	/! @name videojs-overlay @version 3.0.0 @license Apache-2.0 /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("video.js")):"function"==typeof define&&define.amd?define(["video.js"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).videojsOverlay=e(t.videojs)}(this,(function(t){"use strict";function e(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var s=e(t);const i={align:"top-left",class:"",content:"This overlay will show up while the video is playing",debug:!1,showBackground:!0,attachToControlBar:!1,overlays:[{start:"playing",end:"paused"}]},n=s.default.getComponent("Component"),o=s.default.dom\|\|s.default,r=s.default.registerPlugin\|\|s.default.plugin,h=t=>"number"==typeof t&&t==t,a=t=>"string"==typeof t&&/^\S+$/.test(t);class d extends n{constructor(t,e){super(t,e),["start","end"].forEach((t=>{const e=this.options_[t];if(h(e))this[t+"Event_"]="timeupdate";else if(a(e))this[t+"Event_"]=e;else if("start"===t)throw new E

Chrome Cache Entry: 841

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3571
Entropy (8bit):	5.18132395054107
Encrypted:	false
SSDEEP:	96:q6JpFt1aJEWksKvLrfHeOl2sHy0HNUuuIHdtHD:qEFtSjOLzDtnaujbD
MD5:	68C88FDFDAB1E9A2A89D067DA6FE4CBA
SHA1:	3269DEADAEED9C03B120D01692DB3C71E18B9AE2
SHA-256:	A86A4FBE68F8CC2E5ACF789D9B1035873016C7F943B2478B315D01FB928BE25B
SHA-512:	7A51AC303273397E732AD69AE18C0EF9BD3AC07919ADCD161407FF626DAFE0DA27DB0446F43D822DEDCF1769C48C1D3B8E4C9CC514BCA3EB234D0B2D56C72B1B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/js/main2.js
Preview:	if (!AolHelpGlobals) {..window.AolHelpGlobals = {};.}..AolHelpGlobals.idp.include = (AolHelpGlobals.idp.denylist.indexOf(AolHelpGlobals.brandId) === -1);..jQuery.extend(AolHelpGlobals, {..isMobile: function() {...return Modernizr.mq('(max-width: 744px)');..},..removeStyles: function(elem) {...if (!elem) {....elem = this;...}...$(elem).removeAttr('style');..},..getCookie: function(name) {.....var start=0,end=0,ck = document.cookie;.....if (ck.length>0) {.......start=ck.indexOf(name + '=');.......if (start!==-1) {.........start = start + name.length+1 ;.........end=ck.indexOf(';',start);.........if (end===-1) {..........end=ck.length;.........}...........return unescape(ck.substring(start,end));.......}.....}.....return '';...}..}.);....//----------------------.// AOL Client detection.//----------------------..(function(window, document, $, AH) {...// Borrowed from the auth plugin. var isOldAolClient = window.navigator.userAgent.indexOf('aol'),. .isNewAolClient = typeof window.exte

Chrome Cache Entry: 842

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	10587
Entropy (8bit):	7.940492919468427
Encrypted:	false
SSDEEP:	192:6eA9Sn3mvLqkXJBEkK6ocX7R00+4pBkBJirdAJTMDJA3FGgv:6J9SnKLrJBE2oI10x4pY4AJTWJA30gv
MD5:	1E21261ACCA93D814A055C79978EC0B5
SHA1:	9F810B451F73DC1D1050F5B5A77A82F232E4ED0D
SHA-256:	03A601622D4FB39B4CEB754B1035D158DD7DF4A22CC1969CED46E600B6DFCB4C
SHA-512:	87B2DEE025A43F261939FE47D9B7ED8EA168A785FBA232823B61458B305CA977E4A85F26FD8191A952FAEFDF4AE77F0E6F338F329E582D9532629461A614BF34
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/20s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/20s/match/image.jpeg*~hmac=f091b4c441846e88a4bab3bff1fdbcd2d0abd76afaba0a9d60e6c827d2fe7fe3
Preview:	......JFIF..............Lavc60.3.100...C......................"....)$+($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE...C.......!..!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE..........."........................................I.........................!..1..AQ.."Uaq.2T...S...#3Rr$%&6B4bt...CEdu..........................................................Q.!1A..Rq"a.......r..............?...9MB...r..J.@$...$.@..EI@.BH.HI.T.....ALf...0..l....3...aq?u...)0.%.6.....<.q;9.K.g.v.0.ct ).q.2...F.......5..#u.....b.p.c8..j.....0.Aj.T..bR..!l....K\..E... .X........."..KR`...............B.[i...\..'l.P.}..4..Gn>.~aa..y.SO.}@-.K.5...q...OO.............]....2Kb.k.;A9....Z.4k.L...@....1j.I..;l... . K.A.@...S./,S.....oy.CK@....._5.EYi.._......LN{.i.-...>.7{d......+.....m.......%..<>O...@.+L2..\.T.F..2>~.H..:.\|..c...@.k...&..3...N..\...A ...7......S...K..9....c ..r78iw.....@......:.m-_ec....x..gR...p.Hh..:.......KUM6A._.9....;.;.?4.... K.C.@.(l...S.q........ ...(...=...xy...*=.;

Chrome Cache Entry: 843

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	806
Entropy (8bit):	7.2431722127533975
Encrypted:	false
SSDEEP:	12:h0m1/8WBMmFdpLaVvilLckb5KwIDw5VH9j8Cz7QXrwCRasT:h0mB8WBPTWvix9ID89j8CgrysT
MD5:	B4515D9EC12C634F4B40ABEE83809012
SHA1:	BF4EE410E48E74356E3F726AA1EEEFA205AB33D2
SHA-256:	406E5791D2781B0332613158B00B0FFA18B9E8C799BF5EFF9D0A61F8BB8062BC
SHA-512:	91570E5567DD0B929C67A962495CF3C5C1539E14F5E2B9B837031E9E0D0C1252FCC151A9C6949704C106DB5A730B80BB73C0669DFEB7362C655004EC346DD05C
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9ff3de001884e92d939ae40d08e9b7109e31ec24
Preview:	......JFIF..........................................................&....&,%#%,5//5C?CWWu...............................!..!..)1(%(1)I9339ITGCGTf[[f.z.......... . .............v...................................................1q."2AQar..!3................................................!..Q............?...K..$.R.+B.li...S..~....;..f...z.....7................K.^&Z..B.N.t..yT+.!./8.m..p.]...r@.'U.$..1.......).m..+o........7..:.V..U.h7...<.c.vH...@sG.....-%.ax..'.P.&..../.....{.t._...3\|s+./.L\|[........C@m;.....&.4B?l.L.0....9o.....w[..d._.k..w..c....P...T.Z........z.r[D....\....Mb.C........-V.\Q.o..$q.R...>..S@u...BsaD\..9..}...N.K.C.OKl.qVIYm.7..5..^...by..#...W._B.\..W.....k..X>_.....^D.....M.ofI"..J.i..U.4.U...o..........8K.=...".s..,..q...i..j..Q.V..[Zf[,..[.O.9.o....

Chrome Cache Entry: 844

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	275
Entropy (8bit):	5.00322266837776
Encrypted:	false
SSDEEP:	6:YbBd41CbOwZcCI8eDrRhRelPwrX4aTZPwrXeTmuf:EBi8NeDrRhPoaTwuTmuf
MD5:	939556FE4A24DD9153B24C834377532A
SHA1:	B4CB16D20BAA4197370021C6A700E08D2E3BA1AF
SHA-256:	9FE7CE06B08C9C51C4B2836DED9873DEFB6CC8ED306F03374B748B4F08AA41E2
SHA-512:	2C1EAD6187C34C17E4509F4916DEFDC59FB41E188EEFD1B0D314026AB75439CCDAB2C4AB5DCEA0EAE618375F2C9FAFD37A46E38C4D4B6C528E4C5E35A32F51BE
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/show-hide.js
Preview:	this.LIBRO=this.LIBRO\|\|{},this.LIBRO.showHide=function(i){"use strict";i.dom.addListener(".show-hide__trigger","click",(function(s){var e=s.currentTarget.parentNode,o=i.dom.hasClass(e,"show-hide--is-visible");i.dom.toggleClass(e,"show-hide--is-visible",!o)}))}(LIBRO.common);

Chrome Cache Entry: 845

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=17&ns_st_sp=1&ns_st_sc=1&ns_st_psq=9&ns_st_asq=9&ns_st_sq=9&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=11435&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11435&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=11435&ns_st_dap=0&ns_st_et=33530&ns_st_det=3&ns_st_upc=11435&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=11435&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=11435&ns_st_dlpc=0&ns_st_lpa=11435&ns_st_dlpa=0&ns_st_pa=11435&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508451869&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=8&ns_st_dpc=0&ns_st_pp=8&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 846

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.415815400606192
Encrypted:	false
SSDEEP:	24:4HksBq5/Jz2pRNrBZJuvu8goqc0ioNhc++24V4+mI:2Iz2bNrVENtmN+QB+j
MD5:	2726F7B81AD835FD61024E7C3CCC0A2B
SHA1:	1F2E67A6A7A610FAE75C37F57142CA5C9BB49B96
SHA-256:	95F3749F225FEEDD7889BC7BDC72FC5CCE2F1C3EC62C0D4E61EA07A180CF5FD3
SHA-512:	7AF1E1C9366931FF0D970F4FF97BCBEF9E606795855C6106345D10166041C2A53DE9744F3326812A7617751DA78F4CEC2AA6CFDE6D9335D93903533B2241D67B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="G0T5XmwZQwaWVj5V4aKthA">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1709508430332');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 847

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	140
Entropy (8bit):	4.7029576097373
Encrypted:	false
SSDEEP:	3:YMsw/+WOiQHJFLwxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/boFcPMMg/ptQoXn/Fx2t6mHqt
MD5:	2BB31D1D26087F903465A43E83BC73D6
SHA1:	A34B266377EA0C38C75C7C29C09DBCA2F2D3FEA4
SHA-256:	49496917AB40E495D6DC4F2FD35031D96762E4EE8AD190628F3573529DB4A5C8
SHA-512:	74D96020B4113C5E71913505D51FEF5965657F2D28B4BA5008320A398A31F27265FC64297C4BBF6E526C2F6F6428E7BBBB2EC7A7E2F2DA7BAB85BA70A8179F5A
Malicious:	false
Reputation:	low
Preview:	{"identifier":"9hjqjsliua1p4","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 848

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=18&ns_st_sp=1&ns_st_sc=1&ns_st_psq=9&ns_st_asq=9&ns_st_sq=9&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=11451&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=11451&ns_st_dpt=16&ns_st_ipt=16&ns_st_ap=11451&ns_st_dap=16&ns_st_et=33546&ns_st_det=16&ns_st_upc=11451&ns_st_dupc=16&ns_st_iupc=16&ns_st_upa=11451&ns_st_dupa=16&ns_st_iupa=16&ns_st_lpc=11451&ns_st_dlpc=16&ns_st_lpa=11451&ns_st_dlpa=16&ns_st_pa=11451&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508451885&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=9&ns_st_dpc=1&ns_st_pp=9&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 849

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2468), with no line terminators
Category:	downloaded
Size (bytes):	2468
Entropy (8bit):	5.032711041422538
Encrypted:	false
SSDEEP:	24:f4qkY/WRBdvIz7cNfJO90d+VRhWr9PYyfJJfJTYVeuNfsY0sEamxFePtQv:ffWRbWYNBO9OiyOyBJBE0uNk4x4kE
MD5:	27674D94A81977DE40E00B98C2D6BCF3
SHA1:	DBAF0EE1DDFAE40BB68AC51E32E12B54422702CC
SHA-256:	91E49D7133913C7C1C52837B1FEF45FE86A691B497A201A2F62887E3C288F9AB
SHA-512:	87709CA096A7282C3EC8B73940AF9180B93CB7FA9FAF5F45CE367EC9C84784433D5005FDCCC751D380DB6CD131BF0A6CB136C12F7A25A5F1C701B31E4338C58F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/subnav.css
Preview:	.subnav,.subnav__nav .subnav__nav__links__link{color:#464e56}.subnav__nav__trigger .subnav__nav--toggleItem:hover .icon svg,.subnav__search__clear.icon:hover svg{fill:#0f69ff}.container{box-sizing:content-box;margin-left:auto;margin-right:auto}.container>*{box-sizing:border-box}.subnav{background:#fff;position:relative;height:60px;width:100%;font-size:16px;line-height:1;box-shadow:inset 0 8px 8px -8px rgba(0,0,0,.15),0 8px 8px -8px rgba(0,0,0,.15)}.subnav .icon svg{width:13px;height:13px;fill:#000;margin-right:.3em}.subnav__container{padding-left:5vw;padding-right:5vw}.subnav__nav{height:100%}.subnav__nav__trigger{cursor:pointer;margin-right:3em;padding:3px 0;border-bottom:2px solid transparent}.subnav__nav:not(.subnav--collapsed) .subnav__nav__trigger .icon,.subnav__nav__trigger .icon+.icon{display:none}.subnav__nav__trigger .subnav__nav--toggleItem:hover{color:#0f69ff}.subnav__nav__links{display:none;background:#fff;position:absolute;top:60px;width:100%;left:0;padding-bottom:2em;box-

Chrome Cache Entry: 850

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 851

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15071), with no line terminators
Category:	downloaded
Size (bytes):	15071
Entropy (8bit):	5.224983574804339
Encrypted:	false
SSDEEP:	384:/ub1THWdKQBs/RVIyZx3CGutZo6GaxjQ7IOR7zl0:wpVIyZNCGOZoYp
MD5:	37E8BA981F7F4F2319C129547E77412E
SHA1:	F3CE17BD58B1239693120F722DAD5DEEC6ABECD5
SHA-256:	C3F73EA561BF0D3CD02BD322FA8AEE0A71A043ED0C6BD63C419DA4FC66869520
SHA-512:	574D371D3A67FB825BCCF5267BA595284AE1C700E23C444F1FAEA3228D47A13D553113DD467A5B2B4C56AECCCB0AB727F1589332DFE80B1484F477FFD513C5B3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-tabs-1.12.6.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-tabs"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(i){if(a[i])return a[i].exports;var o=a[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var a={};return e.m=t,e.c=a,e.d=function(t,a,i){e.o(t,a)\|\|Object.defineProperty(t,a,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var a=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(a,"a",a),a},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/base.js":function(t,e,a){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function o(

Chrome Cache Entry: 852

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	535
Entropy (8bit):	7.383788917574239
Encrypted:	false
SSDEEP:	12:6v/7O9b/bQvkGnBByiwDiWY5y28VR0nbO6KhRtKr2i2v:Ij9RWYQ/UnbbWeiDv
MD5:	491574B00CD8FB418215DEBDB2DCA2C9
SHA1:	86BCC1181EC66F23FD9F9C324154CC5E7863A4DE
SHA-256:	E5BA76000CC58D5157DC91DA69FD9703DE9DC6BF96A973EC44A215984115BD67
SHA-512:	117C3DFC68EF3D217B6AEC527432E541963968AE519D3C0B21323876D66239583DA51689B78A9F62A35DFEE136C6EE633B899B451E056F187DF1F4DE5C8493CB
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-03%2Fc6f4ca70-8d7a-11eb-ba4d-ac4cbcde9ebe&client=76f99bdb8f78cd44cc0b&signature=cf2e2debdb6c1969bcf75b99825fbbfedfac7f4b
Preview:	.PNG........IHDR.............(-.S....PLTEGpLF`.:V..u}7T..5B.....GS....8E.CO..Kd..XeLe..JV....NZ...A[.......\s.^t....w..}......Sa.....-:...#B........"0Yp......)G....1N....q.....'5..Oh.k....aw.y..7T.Hb.......#B...lx...........@[.........gr.Sa.6......tRNS...1.....1.1..............G.n.....IDAT..%..b.0....E.s'!.............._?6...0.}j:.>.W....D.@O.0<....s.....%X.......y.3..6($Fa.I.;.+......'Jp.............l..#.%..pBZ.....a.q..]...T..A."?.....\;.....K.....mV.......u]..1adZ..Uj.0.-.>_.`...G..........IEND.B`.

Chrome Cache Entry: 853

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3775)
Category:	downloaded
Size (bytes):	3809
Entropy (8bit):	5.253335589310326
Encrypted:	false
SSDEEP:	96:3hWX2N+YnEf4COZBvrQjVMYuoft4qAG5y:3oXc+Y9zQ3NftSGM
MD5:	9111C432FB133FCE842E7E4CEDFF8354
SHA1:	A78464B8D3F7F257E0A2B023D7071D50B02099E2
SHA-256:	62E2470A795D6ED548781011BF4B36E286A13BD48BAA52C1B09518F210144E1A
SHA-512:	2E4518E8F0E2EA7EE946CA5248A03FBBCB04B2C8B5D946A0A68FAFF26DE83EF0212C3F7B11549959F47976E99572A690234E4E406C808C46E2F51A035F538C3B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/utils.9111c432fb133fce.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e,t,i,n,o,r,d,c,s,a,u,f,l,m,w={3741:function(e){e.exports={getCookie:function(e){var t=document.cookie.match("(^\|;) ?".concat(e,"=([^;])(;\|$)"));return t?t[2]:null},setCookie:function(e,t,i){var n=new Date;n.setTime(n.getTime()+864e5i),document.cookie="".concat(e,"=").concat(t,";path=/;expires=").concat(n.toUTCString())},deleteCookie:function(e,t){document.cookie="".concat(e,"=; Path=/").concat(t\|\|"","; Expires=Thu, 01 Jan 1970 00:00:01 GMT;")}}},7134:function(e){e.exports={getBrowser:function(e){var t=/Edge\/\d\d/.test(e),i=/Chrome\/\d\d/.test(e);switch(!0){case t:return"edge";case/Trident\/\d/.test(e):return"internet explorer";case/Firefox\/\d\d/.test(e):return"firefox";case/Safari\/\d\d\d/.test(e)&&!i:return"safari";case i&&!t:re

Chrome Cache Entry: 854

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	558
Entropy (8bit):	5.099864708533674
Encrypted:	false
SSDEEP:	12:xV8laHKsAsdRnadrzyECJpKRH/hB/L2jyqr4:T8laHKsTk2/zKJB/Lrn
MD5:	CDEDA1E280DFCF3D166A7511ACC516E6
SHA1:	890BF74A9BCC8F3703F2622529C4D567FD9E7EC6
SHA-256:	E465F26E8944785C4781E6A86149AE51FE352F41E42B090B5348DEE5EB66B6B5
SHA-512:	90E3F7B54C09D4926017DDAD12E506B9B82CB969C5CE0EFA36C9D0CC551177F7894B9F32E7EEFD126FCA50C40F90C576C051BEDE1A37038E0ACAB5C502971D95
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/scroll-indicator.css
Preview:	@keyframes upAndDown{0%,100%{top:4px}50%{top:20px}}.scroll-indicator{opacity:0;position:fixed;bottom:32px;left:50%;transform:translateX(-11.5px);width:23px;height:44px;background:#fff;border:2px solid #323232;border-radius:11.5px;z-index:20;box-shadow:0 2px 14px 0 rgba(0,0,0,.51);transition:opacity .2s linear}@media(max-width: 767px){.scroll-indicator{display:none}}.scroll-indicator span{position:absolute;top:4px;left:5px;animation:upAndDown 1.1s ease-in-out infinite}.scroll-indicator span svg{width:13px;fill:#323232}.scroll-indicator--show{opacity:1}.

Chrome Cache Entry: 855

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2581
Entropy (8bit):	7.793011920293916
Encrypted:	false
SSDEEP:	48:38CF+IJIKHv4CgMROz6+Pj1Hm7wDlW/L7jQSoDf+YIsoAzHHb3t:MOzJIUV1Y507wDk/8SUMsvj73t
MD5:	6D934474B3E355893E0271151804839B
SHA1:	D1DEF776EA8DA227D261F0F1FBED93B164FD360F
SHA-256:	CE916EDD25F91A6D7B5D94FD1400095E2466953EE959A2BEDA613F8D814BA3D5
SHA-512:	2F6A2D3E247AC9B2621AF728C68457CA18CB8DC8649C5949A9A1F3FFF26A1140BCD37C9B2A352394861ADAEF1B3C121DB8B98271AC5AD4213C3148FAB8B7033D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...............................................................................................................................................H..!..!.72..........G.......i?..........{E.rB.......L6#OF....Y9......g.......vC.d=3YRv.-.......Z...62..W.51.41...H.Mfux.nE^.P.J:'.KG.zGU[..N..."01..S...1.k@B4.n....t.....I..$....uL....K?.ti...$.sC_]_,+.kU..Ic...1.x..h,,2r\.......Q.....6.L1>D...5;1.........c.........r...R7KI:m.Or}......w..]..j.w.L>\|....)8@.\|K...k.M.y]...XomN[a.40.~JyzIY,,.}..R.p...WQ:...@{f.........'pU..k..(.d{.P-zGs....P.rFh{U%.Z<JQT.v^in";:.%&.`<.2/..Yej.=;o-,3Y:.0.jK.D1xoo.....J.^<..n..SO.rC.my.P9.q4HIlSU.20.nnP.q.PP.aa.z^....z\.]^l82t.......e....q`..g........OO?2eZ=3.h...W.\|........[cqO..{.61.x..TVT..._bEc.q...v...../tRNS....M.)...3]..G..k.>...e...Sqm.....x......o.pR.p.....IDAT..}.u@.w.........v.v........ Ipw.....Z..].{....].n...E...=.yj.\.W.ohJ....-._gl..{.\|...!..Z....Vf........S...,{...7..e.....2u.kf..

Chrome Cache Entry: 856

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 857

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	102656
Entropy (8bit):	7.998269399255391
Encrypted:	true
SSDEEP:	1536:L1/LBoAB+S3slrDeZ8IHiPsx850bFSWYBPlu26glVskqdIQgwQwc9dGaGbU:BDBsQslmCqkWYBPXZzjBlwciaGI
MD5:	F132807C4EE46BA6AD65ED99A520F5B4
SHA1:	E7BA7B9FC2C0E65D38C5CA003C25E3FE0161F8A4
SHA-256:	969A1C22797DBFA55610D2DD7C84C730E6A73785A1672C8CC2BF829EC0E79062
SHA-512:	7572F35D946BADEEAA7AE77061042FBCAD8DB0BA6B213FA5A4BF91754D58827DEA8006EBDF321EDFD7BDE4799E1020CB65E4A18DD44B04E5ECE7D6FE473B3EBF
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI......o.&..>.V4....e....%<.Lu..:...hk.K..:..u..,.\...o:M.(^...fi......l....W}...t.I...g..(..`J.N.5..Z.&V..krA3C&......f,.......d/5...h....sb.2j..@.....Ep..".>:h. A.P}>...]..Y.`zK."....u2.....K......$.]...........t..i.....7.!.%.f.-.9&.....E%.........':O.}...%..V.7..p>< .b;..(\.w+B..s.....:,.}.K.<..>]s......m.T......;.q....I.H.U5e.{..C.....j.y.....L.(.R..\.K...A.?lG(.jD..i4.Y<s.l.D(....N)}.0.{..+e...)..C..&......5...L^.........C.+`...gg.P..($6.hZ.B!...ct..R.#.g........~....O.Q...3...Ai..\|..@......D<.fh.t.TqV.cV..F.~.nn..3....x5..4...K.5.......PG2.....\|z.[.1.L.j..a....m..jld7..`........4....l..Q.

Chrome Cache Entry: 858

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1456
Entropy (8bit):	7.6287974519607085
Encrypted:	false
SSDEEP:	24:wP1PaoROPWxyQZL979dqsxRLqrTbDNqMRrMF+OOLUWeTY5q7UFrdePvi37lFi1Dm:VPZghnqOLEbDNqHJOnpzJ4slFi1DoKlg
MD5:	349DD56DE100C0B4F39353E016E1778F
SHA1:	E968AA3956ADCFA66FB767CCF90703B1BCBE8524
SHA-256:	D62AD6CA66B5B9BD179D0BB783638C2072EAF495150E1C8FDC718C2C45AE1671
SHA-512:	668C3E3C33C7D7B2439026F6902E993C0836FAD9AA691D76ECCE2D322065181EB9199DC190520DC1FCF8D072165BD8DCAFFB3772FABDF722ECFFD6ACA42C8E2B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . ................................................................."Ba1..!#.Qr...................................................!1A.."Qa.B.#%2q.S............?...s.....ZPjM........\|.......E..a..a.=.{.]>..S&v..7.xmP..O.;......._%.2..Q...<.w..U@}.&.)..U.Em][..gr}.....f..{/@..-.... .~Y.$..Lk8...A&..t...f.T..@..'.Mz.F...{.?#..2.a....i...WA.\|..A..e.......:[.j5.f..;[....'....._E..f.gQ...{.c...).$..s<..o....Ec.Oc..0..S3...IbK.gb.1E....'.......Mp..YS+...K'..mA..F5$.~E.Z.Z.&.3CFI...mD.6b.7.......4......\D7.F.8....5C/.#..T.o../.....vhI<...nn../b..n..S.V)L.SP....:....j.66..@..1X.;..8..[o...B.R.$..>\.....u..0..M.]h..~...K].........O..hEs..D.24.....VI.!....d..P?.{..\|.K.{M..]ZB..%6...t:.@....Q..h(.+...TJ.:H.E...b.T...f_.........j..G..2...\|..4..[+jbd.$~.8#_..F...9Z.].@Ey(.....N.B......#........B....;..d.4[.."...."

Chrome Cache Entry: 859

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1020
Entropy (8bit):	7.4230444143937815
Encrypted:	false
SSDEEP:	24:ztFJBvuf03gcX0mgB6EbUMyn61KaqetJFdpqakNJHd:ztOEgUVKHqHhd
MD5:	6A6EEC9542309F83D565CE90AB410D25
SHA1:	EE636FF74F312D260AB8B86F477C149C6F113DBD
SHA-256:	393135A0E59C6908E3B92531DC297EAA43A363C653BE394DF9049E8E7470AF26
SHA-512:	9AC06C68C39F12B7BCF12D7C7BDFFD52D7589F77F2ED65F4A342E96BD97C0AB7F5431F81823A49A564CD1540389D012713017FFE0A847CC56EAF537079CACF72
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fd50a9120-3411-11eb-97bb-1084c5a79300&client=76f99bdb8f78cd44cc0b&signature=2e380cbe938a1f4b6b57c6cdf936e0516050112f
Preview:	......JFIF.......................................................... .... %...%-))-969KKd...............................!..!..)1(%(1)I9339ITGCGTf[[f.z.......... . .............~....................................................B.!Aa.1q."#...............................................!.12...."QaAR.............?. 7.\|....fH.o.1w%...N...........,..'Jz.>2....+..d........J/..T}.."...-u.2..{.&c.Y...Qd..P..z.)....>..j........e.l..6wF...E.....A.:..d..<..}S.o...e[...9.\|.....n.k.].\|1!/[#..-0.....(..2)..J...U....aB.U..G_....E,.%4....#T">=......jC..g...pH..;.}...f..F'.4t...M#M.E.G.....a...p. ..w..\|...r=..p..Ih.J.....xC...R.`................5m,.._S .l.(.ST.I$......".u.....Eq.TW.....4ck..tjm..L"._%P..~R28...+......)......idx.+f.d.mqz.....J.tx......B.L.o.U..9#B ...X.I-.u7...OV..=d4.....n.u...,X.\..E...$..e.W[......d.....SEI}.@...uQ..?.<[Y.O..S....X"[....o.d../..,U....f....9S....j@C.`...!..,>..!.....u1..q...s.t....n.G..&.!#leDe.Z."X^.lt.k..k..U_..J{.K..C...

Chrome Cache Entry: 860

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 861

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13409)
Category:	downloaded
Size (bytes):	13441
Entropy (8bit):	5.232183158225477
Encrypted:	false
SSDEEP:	192:/X0DYiHBTiHCpE4wvER2lZvt0tVf9Q7tK/KcAHOHRe3CpI4wPx00XD3I48XUAwtq:/X0DoCT4plH2V2xKCnC3wbuViV9LhS9
MD5:	09F1193FA836B536210A64B2D00529E1
SHA1:	31358B7AF886C5569B3BA40AB85EBEA82709C47E
SHA-256:	C46225F1B210687BD3CCF9FC037FC0FBCE33E0A93F226CC2D55D53F356ADE544
SHA-512:	155D1DB5884D4EFCB9269A931EE503C3F964000A281A485AAAA5E636647ED1762A07E8AD8C1909E36C50989F925133FFB449401AD063434FB3E3A8F70D1AFDE4
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/gam.09f1193fa836b536.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={5497:function(t){t.exports={dispatchCustomEvent:function(t,e){var n=document.createEvent("CustomEvent");n.initCustomEvent(t,!1,!1,e),document.dispatchEvent(n)}}},2830:function(t){t.exports={debounce:function(t,e,n){var i;return function(){for(var r=arguments.length,o=new Array(r),a=0;a<r;a++)o[a]=arguments[a];var l=this,u=n&&!i;clearTimeout(i),i=setTimeout((function(){i=null,n\|\|t.apply(l,o)}),e),u&&t.apply(l,o)}}}}},e={};function n(i){var r=e[i];if(void 0!==r)return r.exports;var o=e[i]={exports:{}};return t[i](o,o.exports,n),o.exports}n.d=function(t,e){for(var i in e)n.o(e,i)&&!n.o(t,i)&&Object.defineProperty(t,i,{enumerable:!0,get:e[i]})},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.r=function(t){"undefin

Chrome Cache Entry: 862

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 863

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12937), with no line terminators
Category:	downloaded
Size (bytes):	12937
Entropy (8bit):	5.190385870596199
Encrypted:	false
SSDEEP:	384:3rmQTWB8PSpJH4+Q0NpsvNY0Fv/qzHMADsocwU:7n70H4KpsvNY09ywovU
MD5:	277E3D31BF9AC6A0B7087285CBE8B7E1
SHA1:	B15CB1272B0429A2CA31DF5116F7D52988D4F7DC
SHA-256:	18C32790C19D6483D673C06A3D9CF7F6D717FB88BF3698AFBAE2B04B033ED537
SHA-512:	E652364616021D53E992297B8CAC3DB4D6D4004D941E76B20B7C2154093382595BF3BB495CE5407A3B69262D578632CE7E915E4841EA242E69914EF566AFE1D9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-toggle-1.15.4.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-toggle"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}funct

Chrome Cache Entry: 864

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	34494
Entropy (8bit):	2.5673714334888444
Encrypted:	false
SSDEEP:	96:6J8uRKPoNMiaHnxMLGWJNSsiWjYSYob4rtEI5:6J8DgNKnx+pJIsiLS9sriM
MD5:	0EF6648946677070C5A9CE83ED9250A4
SHA1:	CCBFA853892CA173800F71934B92F4CFF47E6E1D
SHA-256:	9544F5A49FBD40446384A1B8EE264F03E68CDD69FAC07AB792E9FA742A4E253C
SHA-512:	E9DD1270115724622310E019B29C3C2F7DE50948D4DBF7627C84ED4827B89453F17EF03B1A0DC560078F4CADE496146DD2327FB7DF63B9826A34B4A7F1EDA12D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/img/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%......@@.... .(B...D..(....... ..... ..........................................\H`.\H..\H..\H..\H..\H..\H..\H`.........................\H .\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H .............\H .\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H .........\H..\H..\H..\H..\H..\H......\H..\H..\H..\H..\H..\H......\H`.\H..\H..\H..\H..\H..\H..........p_..\H..\H..\H..\H..\H..\H`.\H..\H..\H..\H..\H..\H..\H..fS..{j..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H.......\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H........\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H...........\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H........{j..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..v......v........v..\H..\H..\H..\H..\H..\H`.\H..\H..\H..\H..p_..................fS..\H..\H..\H..\H..\H`.....\H..\H..\H..\H..\H..p_......fS..\H..\H..\H..\H..\H..........\H .\H..\H..\H..\H..\H..\H..\H..\H..\

Chrome Cache Entry: 865

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2191
Entropy (8bit):	4.821427070865943
Encrypted:	false
SSDEEP:	48:352TB8Q2iq2TBLW+Jb2TBNcjr82TBPv2TBOSrCnykdkU6+l9fqz8/OEX2TBM:p5Q2iq0W+JbX8gvSrCy8166fU8/NV
MD5:	D9B7F07F8E20839A49E51279956F7B7B
SHA1:	70B21FA45E7668DBE920226D0F0CA3CE1319AAE4
SHA-256:	F28747FCE29902000F2740EE25408F500C41983C489E0AFDC5F8991646F4A97B
SHA-512:	4E82F407896BDFB5DE8387C221494B21E58C7C3854CDDA17B5484F72B99E04E1D2801AB4A977267E40CCB865679D9E69A7E6C00412D9A9C1D7C7EA25142A6AE3
Malicious:	false
Reputation:	low
Preview:	<svg width="65" height="65" viewBox="0 0 65 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M50.8833 6.5V14.1148H43.2679H50.8833V6.5Z" stroke="white" stroke-width="0.84" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M50.8833 14.1147C46.1793 9.4107 39.6799 6.5 32.5 6.5C18.1402 6.5 6.5 18.1395 6.5 32.5M6.5 32.5C6.5 39.6786 9.41005 46.1786 14.1148 50.8839M6.5 32.5C6.5 39.6792 9.41005 46.1792 14.1148 50.8839M14.1148 50.8839C18.8195 55.5886 25.3208 58.5 32.5 58.5C39.6799 58.5 46.1793 55.5886 50.8833 50.8839" stroke="white" stroke-width="0.84" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M57.302 24.6811C56.6117 22.4912 55.636 20.4294 54.4244 18.5327C55.636 20.4294 56.6123 22.4912 57.302 24.6811Z" stroke="white" stroke-width="0.84" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M58.2725 35.895C58.4174 34.7829 58.5 33.6512 58.5 32.5001M58.5 32.5001C58.5 31.3489 58.4174 30.2186

Chrome Cache Entry: 866

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2346
Entropy (8bit):	4.03268128956525
Encrypted:	false
SSDEEP:	48:/3Ruld0ijBKHrTqCyOb7EbCO+Tp7pfaKDFP4ToOE/4:5XEgTHyO/EWph9D94kA
MD5:	93FE207C1B9A8C0B94BD6672C011A260
SHA1:	ECA9FC588B9A32F8A965EBA84C956FF36DAB9FD5
SHA-256:	CD34431EB9DFC5CA38EDE89350BE366B641310FC6929CDDEDE93442EDB93C74A
SHA-512:	EDB068CA4F04078FDFD10D4C77DF21B1B1B773533BA72E4C972EA2FAAB708AFF8634A3878C4ACCD5B5A3AF17F222B0204D7EB9A8A9ACAD0DC531E2B6822A0B99
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/icons/elections-2024.svg
Preview:	<svg width="33" height="11" viewBox="0 0 33 11" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M0.462 8.302C1.36733 7.59267 2.10933 6.98133 2.688 6.468C3.26667 5.95467 3.752 5.42733 4.144 4.886C4.536 4.33533 4.732 3.81267 4.732 3.318C4.732 3.01933 4.662 2.786 4.522 2.618C4.39133 2.45 4.19533 2.366 3.934 2.366C3.66333 2.366 3.45333 2.48267 3.304 2.716C3.15467 2.94 3.08467 3.27133 3.094 3.71H0.434C0.462 2.87933 0.644 2.19333 0.98 1.652C1.316 1.10133 1.75467 0.699999 2.296 0.447999C2.83733 0.186666 3.43933 0.0559993 4.102 0.0559993C5.25 0.0559993 6.104 0.340666 6.664 0.909999C7.224 1.47933 7.504 2.21667 7.504 3.122C7.504 4.09267 7.17733 5.00267 6.524 5.852C5.88 6.70133 5.07267 7.462 4.102 8.134H7.602V10.36H0.462V8.302ZM7.8167 5.236C7.8167 3.63067 8.14337 2.366 8.7967 1.442C9.45004 0.517999 10.4767 0.0559993 11.8767 0.0559993C13.2767 0.0559993 14.3034 0.517999 14.9567 1.442C15.6194 2.366 15.9507 3.63067 15.9507 5.236C15.9507 6.86 15.624 8.134 14.9707 9.058C14.3174 9.982 13.286

Chrome Cache Entry: 867

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=2&ns_st_sp=1&ns_st_sc=1&ns_st_psq=1&ns_st_asq=1&ns_st_sq=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=6746&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=6746&ns_st_dpt=6746&ns_st_ipt=6746&ns_st_ap=6746&ns_st_dap=6746&ns_st_et=6746&ns_st_det=6746&ns_st_upc=6746&ns_st_dupc=6746&ns_st_iupc=6746&ns_st_upa=6746&ns_st_dupa=6746&ns_st_iupa=6746&ns_st_lpc=6746&ns_st_dlpc=6746&ns_st_lpa=6746&ns_st_dlpa=6746&ns_st_pa=6746&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508425085&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=1&ns_st_dpc=1&ns_st_pp=1&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 868

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	17124
Entropy (8bit):	7.945950388325041
Encrypted:	false
SSDEEP:	384:DW9UNvG/Cj3ODClJ3AHstDJDnZODRtnQEOD4omDmeY:SnwAiDPODRFO03DmeY
MD5:	1CD0AACD59A3D47AB715174A22F2EF21
SHA1:	64B32861C8D31A2234913CF87E550F082C063F30
SHA-256:	26517ADD50A680FB71CEA4C0FEE7DAEBCE0AA850F20CCA91F24EE28D9D9BE860
SHA-512:	D61938A20DDD0FE903D1DBC79AEAC620086707F84F41D8304974CA60209ED8182AC6B485C73112BCB9AC9CB82A01E27D8CB949E6404D08564275F7F2002CD0A9
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_fox_news_text_745%2Fb024f429a6a4b2428f13a5458eb7adbc&client=76f99bdb8f78cd44cc0b&signature=5b0d6c665af85421414393b20dd9525d1315fce1
Preview:	......JFIF.............C.............................! ....#'2#%/%..+;,/35888!=A<6A2785...C.......&..&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO......,....................................................................................4.0.....!$....M.r..H........!....(.......B..i............H.B.3...Y.. .!..............7.]..."...t...$i.8...&.32.\|gRc.N.3..E0...@.......... ...g..32n.0'[<2q..3.....+0..fv.......193.B...........b....&.=e.e.t..I1..z9.Z...M..r.N.E.'..w".y.......-.......@.^.<...\|.glW......N..cr...q.uYSb...T..U....... ............ c....)c,-.o.qx..YT.gw<9...,....r...8.C^...x1.8....b.....-..@...y.2..[;Z.l.*..j..6....Z..-....W..}L4 ..v...q.vv.Z."3#.;.B.....0-........p..m\|t7.Z.4v..?'.....>v.#V..^/.x...>cw......c...^.b..#....s3...e.iv....@.......`.!.G...z;\|..~.nN.[........t._.R.]~..0..is;.qc.Y.......O...e\'c.........H.`......y..p}..?.O^..jO_......y\.>7K..9.......e.v..w...}...;.o....lp.F.H..ge...8 ..M... ...G.._+.j...u..7,.._......[.S..k.

Chrome Cache Entry: 869

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/5286816B-07A3-4831-82CF-92827DD7440E?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 870

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5776
Entropy (8bit):	4.901125515092838
Encrypted:	false
SSDEEP:	96:1dJLftnl8QftnunbTmftnTYkftKIRftNyMYfttxfttgZKftt2m2ftFikBj7jftWV:ZDFTl8uH4VkKydFxj4kHwHdHJ
MD5:	230402B7279EF467759DD6FE69A8852C
SHA1:	86161A7FDA9892B1D9AEA5558D9A1F9E1194B25A
SHA-256:	627ACD39ADDD2A093423B49425A7E6DF30D7921BBDD711ED94FB1889F89D3EDA
SHA-512:	BA9F85675D3C17F3EEF1A0EE731292A4611AF537601296045AB692A9008EFA36DFC5CF33374DDB7BEAA57E836248D2B714FFC07B3A09D63FA25042023D8A63E6
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/products/featured
Preview:	{"featured_products":[{"sku":"help-central-new-aol-mail","name":"AOL Mail","price":"0.0000","slug":"new-aol-mail","description":"Learn about what AOL Mail has to offer and how to make it your own. You've Got Mail!.","related_articles":[{"modified_date":"Feb 21, 2024","title":"Overview of AOL Mail","summary":"Learn about what New AOL Mail has to offer and how you can make it your own.","slug":"overview-of-new-aol-mail","content_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Mail","slug":"new-aol-mail"}},{"modified_date":"Oct 28, 2023","title":"Manage conversations in AOL Mail","summary":"Learn how to turn conversations on and off or delete emails in conversation mode.","slug":"manage-conversations-in-new-aol-mail","content_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Mail","slug":"new-aol-mail"}},{"modified_date":"Oct 28, 2023","title":

Chrome Cache Entry: 871

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 872

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 873

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 874

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1451
Entropy (8bit):	7.646476073880468
Encrypted:	false
SSDEEP:	24:wP1PaTH/uvIAbuDYToW03F4q9uUQPr12EUAkK+cvXVGJMN3/dG:zuvIfx3F4qUXz1p//N3VG
MD5:	89D3ECCC7FA224AA00717AEF439265B8
SHA1:	8AB9A3AB2D0C67178E4682A8D7297946CAB61DB2
SHA-256:	928D88EB2F3AF032F5B29828E655B3E740E38F8D876D49CD283111DB95481DCB
SHA-512:	37A742DAF547EBA0258AC0E9AB087F8DD8E7444B5DE8211174BE3CBBCB0560A1DF152B9B0BCA552C61EB221EA69A963FD731ED50946125A7AB201FB322DE3C3E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=a55197107cb3e922d2624bc588f9c497bb452282
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . .................................................................1A!".q..#R..................................................!.1A."Qq2a..R.............?...T:..5...R[9S... C.{c.j.2.^..T.JTm8..~....Q.~..RE..T..n.r....<..aF..w..4.V..,...?K.i.Gl...%-4Q.....,.s...+Kp...$.w;G........e...#...G<O.\|.J.e.......,....bZ....*.o... .G;O..8nz_...H....Y....:.,...cI........i.&3.._.....GL.C\...$...fQ.x#...u{.~%... .o....0............f......P.?.HA......}...m.gu..n.....(35Y.R.H.^..<.....^LV.n9..H_.E...) .%}..E.D..-F.U EDWQ.......~p2.......;.%......1.z..'...........2...f.<d.[.p..I.^J...[.. ;.$.U..7.W.0N.....Aq.....Yi.<d.[a`......v..M..7....c...G^..>!...^..h.5.4.Um1.d.r.X..N.H.....nR.t..~.. .D....f..1..]C...{;]....ll_...dw.....l...`..J::K...oQ`.UXl...i....s...........L.i...{h...:.x........2....T\|B.... ..l.o;

Chrome Cache Entry: 875

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	75558
Entropy (8bit):	5.256523455674151
Encrypted:	false
SSDEEP:	768:hYkE8TMJABIVf34tICEC9ld+3ztQfV+0fh4O37pqB+JMZuc+yECMEgCFsR7CsCjI:SkE8AWuVfKytsYOrpqTCKQf
MD5:	80818154F7E7AAC9E6406A9784C1EE4D
SHA1:	7BFAAC2DD1004E000A902F02D64E4EEE6EF7477C
SHA-256:	7584C747566CEEFD589A606C26C8339B88430DD9D6C1262B2B797982F3D11D27
SHA-512:	C7A7D145EB97CA8DFB597E3543E1B2C839F4C729A3586CB745F158151FD0ABA8CFB29B8F0EFB1BC5E947D100590DD551EC4DE481AE38B19DA80C8D96B7BB3FEB
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.80818154f7e7aac9.js
Preview:	/! For license information please see aol_header.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e={8518:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){if(null==e)throw new TypeError("assign requires that input parameter not be null or undefined");for(var r in t=t\|\|{})t.hasOwnProperty(r)&&(e[r]=t[r]);return e},e.exports=t.default},5459:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){return(0,o.default)({},e)};var n,o=(n=r(8518))&&n.__esModule?n:{default:n};e.exports=t.default},2656:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){var t=new Date(e.getTime()),o=Math.ceil(t.getTimezoneOffset());t.setSeconds(0,0);va

Chrome Cache Entry: 876

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 877

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 878

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	706
Entropy (8bit):	7.548477864749643
Encrypted:	false
SSDEEP:	12:6v/7gZbenw27lf9jGpJ9c7MMGt8d/su+eMmy87Gk1DoQWH5C3bX3/s:tZmmpJ9z89jy8qk1C5Cj0
MD5:	B12B87CFFDAE1BC42B921FCF2BD9CF4C
SHA1:	C707F3E68D75D36B21C4D11945EC0F104D0BFEBC
SHA-256:	F6747270DB8CA343F3A491FC790D6DFB6FB051723BC222566A7D292E6F4A8726
SHA-512:	D0FC28243CD89CE5EFE47A4E37C8F2EE293441CB3E7F71EF9690C754B3ECE0AAE42390E670AB0577F2AC781EC73C2C5C6C466985A5DAA0C23F27109CBB71F9B1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/default/20180308/favicon-aol.png
Preview:	.PNG........IHDR...`...`.......j....-PLTE/../../../../../../.....H.....k..............N.F.....tRNS..W.0.%......>IDATX..1O.1..Oc..&...0..'0."R...- 8..`...H...qUL....3..^.Jh.oq...\.......xu.a.kd.m.:.-..\+.+.yba...++H..bi{...X.6.v.#....%._ .[a.&.8d@...Y....q.@.2.8.i..9.P..y.Pr..2 ....0.k<.p.^..(.i....F.@.9.(....h..z..zt.e...@...zJ..d....@.....@.k..5K.nG..3..E.5=...-..0.g...........XuU.C...h.?......o.@...=D.?.....A.e.....#i...SMe..M.....uCh..6...uY...XX.....#...k'. L...w.v8g.$.02.........oW.<..k.P......0....'"..e.....uk)...I4.A.#.j..S..nr$..X'.6$.7x.W.O.;.-..Gjn..].{....Gi.Y.\|P?..B?.8.A...`O.8.n.h...b.d.....^.......&tZ.N..%>yE......./........U..2.s]...b9..w.C....IEND.B`.

Chrome Cache Entry: 879

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	4.7029576097373
Encrypted:	false
SSDEEP:	3:YMsw/+WOiQHJFLwxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/boFcPMMg/ptQoXn/Fx2t6mHqt
MD5:	2BB31D1D26087F903465A43E83BC73D6
SHA1:	A34B266377EA0C38C75C7C29C09DBCA2F2D3FEA4
SHA-256:	49496917AB40E495D6DC4F2FD35031D96762E4EE8AD190628F3573529DB4A5C8
SHA-512:	74D96020B4113C5E71913505D51FEF5965657F2D28B4BA5008320A398A31F27265FC64297C4BBF6E526C2F6F6428E7BBBB2EC7A7E2F2DA7BAB85BA70A8179F5A
Malicious:	false
Reputation:	low
URL:	https://guce.aol.com/v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid
Preview:	{"identifier":"9hjqjsliua1p4","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 880

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 881

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85242
Entropy (8bit):	5.949696908453034
Encrypted:	false
SSDEEP:	768:tm5QJJS9aDtWkUpBG7AxU7v2SGssQ0CCE5+lpfuSy5AlR1pdEx4qWaP1dKUC0oml:8948x1q4q/rw1948x1haa5pE2kl4wN
MD5:	4D1177A1A2090BBD54D83A990615B487
SHA1:	E71EE87F5FF790EA3FB93BFF82939B50C1E6FBCB
SHA-256:	7AB1C4A0B625749E662675F83BF6F4E9B1516908D1117AD2FD9EE3D10FD1A363
SHA-512:	ED1CBCBE2141C7A144D13AE3CB5F4D5CA26BBEF9BA979ABBE3304091842357620781B539E608C8ECB83F1634AF57E73ED38ED56BE02412A6EFAAD73563AB6BDA
Malicious:	false
Reputation:	low
Preview:	{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_as_top_right_c":["html",0,null,null,0,600,300,1,0,null,null,null,null,[["ID=fa7f61a75757b5ce:T=1709508409:RT=1709508409:S=ALNI_MZC0SlAatnskLeQoMJB6YTe0TK8ZQ",1743204409,"/","aol.com",1],["UID=00000dcf0386c5ec:T=1709508409:RT=1709508409:S=ALNI_Mb_v-o4jnAV9QH6HtiKjuqLqyu2tg",1743204409,"/","aol.com",2]],null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CMXl6Yuf2YQDFWEaTwgdm8YOWg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qPZJcBJiv9E5O3UhQsloGLej2woPLFhFqHW1EzmT_Pos4t8fS4locRMq9rOPQ3Pcy8AwqUg",null,null,1,null,null,null,[["ID=5212a28f39850f0c:T=1709508409:RT=1709508409:S=AA-AfjZwsC_pvc-7pBoVTn9fUmdg",1725060409,"/","aol.com"]],[]]}..{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_as_top_right_b":["html",0,null,null,1,250,300,0,1,null,null,1,1,[["ID=fa7f61a75757b5ce:T=1709508409:RT=1709508409:S=AL

Chrome Cache Entry: 882

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 883

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (697)
Category:	downloaded
Size (bytes):	698
Entropy (8bit):	4.81368688209398
Encrypted:	false
SSDEEP:	12:1R6qkEycJRW5cunHLHGJGBVh8UcBXw7A/xKgfcbnt/NV0pA4KCDlS+loe80Jm76:1R6qkY/WtjzVhkdfuntpml7n80J86
MD5:	3F5F1061237A793AB796DE04B5A010BF
SHA1:	AC1A080876A223D6A4160C85A6DE15B8F88132B1
SHA-256:	336D46D05EE109E0E09316048ADC450C48753C820385121153FD76219DA2EE9D
SHA-512:	3A7979F1656CB769887F2F7E1A6B043763D0C9EB5D08AE61C65D96C4E97954BC8E325B4EC1369C54EB0945DE83D9A45C5A332E11963ECA1C9A8DBC841A40F5F7
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/css/section-heading.css
Preview:	.container{box-sizing:content-box;margin-left:auto;margin-right:auto}.container>*{box-sizing:border-box}.section-heading{text-align:center;padding-bottom:40px}.section-heading__container{padding-left:5vw;padding-right:5vw}.section-heading__title{margin-top:0;font-weight:800;font-size:1.75rem;line-height:1.28;margin-bottom:.37em}@media(min-width: 768px){.section-heading__title{font-size:2.5rem;line-height:1.3}}.section-heading__desc{margin-top:0;font-weight:400;font-size:1.25rem;line-height:1.4;margin-bottom:.5em}@media(min-width: 768px){.section-heading__desc{font-size:1.5rem;line-height:1.33}}.section-heading--padding-s{padding-bottom:20px}.section-heading--padding-none{padding-bottom:0}.

Chrome Cache Entry: 884

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1713), with no line terminators
Category:	downloaded
Size (bytes):	1713
Entropy (8bit):	5.328490845536413
Encrypted:	false
SSDEEP:	48:8qiL2RDfKp7ML9ig3hk3QBue8OB9UvprGviMWp8OUvMk:xUIL9923mn4kv3v5
MD5:	C8CEFA114268779F8BA5EC977DB3581A
SHA1:	E73F28A82C02D63C37880DB8ED7568ADE340710C
SHA-256:	A64BA873F5710FDE320BA83D1ED0E298B9D3CF03164B357024C8F2DC09723A76
SHA-512:	5CDD7906E8082302B977E7972B7B12CC79B71E969F1A8EC6CA58D5EF47410D972AF6753B12D90204144A5AF45D145FD1A39AC4FBD244CCC67051D06779C7FFB9
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/user_agent_parser.js
Preview:	!function(){var i=[/iP(hone\|od)/i,/Android/i,/BlackBerry\|\\bBB10\\b\|rim(?:[0-9]+\|\stablet)/i,/htc_one/,/Windows Phone\|Window Mobile\|WCE\|Windows CE.(PPC\|Smartphone)/i,/\bMobile/i,/webOS\|hpwOS/i,/PalmOS\|avantgo\|blazer\|elaine\|hiptop\|palm\|plucker\|xiino\|PalmSource\|Palm/i,/HTC\|HTC.(Sensation\|Evo\|Vision\|Explorer\|Legend\|Desire)/i,/Nexus (?:One\|S[4-6])\|Galaxy.Nexus\|Nexus.Mobile/i,/Motorola\|DROIDX\|DROID BIONIC\|\bDroid/i,/Sony(?:[SL]T\|Ericsson)/i,/Asus.Galaxy\|PadFone.Mobile/i,/Lumia [0-9]{3,4}/i,/Nintendo 3DS/i,/i-mobile/i],t=[/iPad/i,/Silk/i,/Tablet/i,/Nexus\s[7\|10\|9]/i,/TouchPad/i,/Android.+GT\-P/i];function e(i){this.nav=window.navigator,this.ua=i&&i.toString()\|\|this.nav&&this.nav.userAgent,this.location=window.location,this.href=this.location.href,this.secure=0===this.href.toLowerCase().indexOf("https"),this.vpWidthMax=document.documentElement.clientWidth>document.documentElement.clientHeight?document.documentElement.clientWidth:document.documentElement.clientHeight,this.data={}}functio

Chrome Cache Entry: 885

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:+:+
MD5:	CF1731F1EADF52F064E6059D699E7615
SHA1:	816201B65AF045985CF47B5C7C58089759D00A45
SHA-256:	2E34AF284C28BF285781A36241B6E00EC74C81E6AE6858D52BDEDE5EBF7E37C1
SHA-512:	6C1809CAE27A9024FAE8DF165028316CD65E877E9362F5D132724675F7F9DC14A4A52DA43C0F6BDF7826CC1E6AA4633F79082B6125AD73DBA067C358169B29F8
Malicious:	false
Reputation:	low
Preview:	ll;

Chrome Cache Entry: 886

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41651), with no line terminators
Category:	downloaded
Size (bytes):	41651
Entropy (8bit):	5.3467209773046465
Encrypted:	false
SSDEEP:	768:8noLgFgMUmUkvdhvo/yrHEax2VWy7h6lgvMy/AibCFF8EeA+F1C9ew2n:8GmUyzx2VWyrMuAvA7FQnA
MD5:	4375F15BFC19CFF02A99080813CF165C
SHA1:	98A5FCE85340E0BA60A76E218B4430C31AC8C13F
SHA-256:	11539C433C44C6098A2F2D89BA706BB26AE1595CA019C870EFCF98D1B20DCFD9
SHA-512:	0716A0A940BEA7F99A1D6AFC724E1C66435898320F8C565850B547BF4A8D74AD995A85D6C852A823351268BED72DB7695D79357D0865F280994DCC952FCFA8EA
Malicious:	false
Reputation:	low
URL:	https://d1sjyfqescdy46.cloudfront.net/static-assets/2757/dist/smart-widget-iframe.superman.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="https://d1sjyfqescdy46.cloudfront.net/static-assets/2757/dist/",n(n.s=482)}({102:function(t,e,n){"use

Chrome Cache Entry: 887

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=12&ns_st_sp=1&ns_st_sc=1&ns_st_psq=6&ns_st_asq=6&ns_st_sq=6&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=hb&ns_st_po=10991&ns_st_cl=68971&ns_st_hc=1&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=10991&ns_st_dpt=1521&ns_st_ipt=1521&ns_st_ap=10991&ns_st_dap=1521&ns_st_et=31420&ns_st_det=1521&ns_st_upc=10991&ns_st_dupc=1521&ns_st_iupc=1521&ns_st_upa=10991&ns_st_dupa=1521&ns_st_iupa=1521&ns_st_lpc=10991&ns_st_dlpc=1521&ns_st_lpa=10991&ns_st_dlpa=1521&ns_st_pa=10991&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508449759&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=5&ns_st_dpc=0&ns_st_pp=5&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 888

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11137), with no line terminators
Category:	downloaded
Size (bytes):	11137
Entropy (8bit):	5.195207543712514
Encrypted:	false
SSDEEP:	192:3rXO/uEOXlAQ6HPgS5iBGNhLQn+7z9N9kkUMg5x8iSvouAVlAQ6+z22ijr7Q0QvD:3ZE9HPV5fN7PIMg5x8iwLAux2+r78v/r
MD5:	E78582B54DD8AF6CEB66109EC39D402A
SHA1:	B8447DB074908FFE9F5C728C62ADC47BF9D862B8
SHA-256:	504E05E34C69C7ECB5293F3FB31BE8600DB94D8B1076675844BC0B94CABD54F1
SHA-512:	D156D05261C74262A57B3E276686388F4AD76CB5ED471DB03EDF9BC43F04EEA9C0A9695E3C43D5D1A273F153BB19349DCD73D43CAEB8699CB50228D51C25FC4E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-beacon-1.3.4.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typeof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-beacon"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}funct

Chrome Cache Entry: 889

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6446
Entropy (8bit):	5.902177881443419
Encrypted:	false
SSDEEP:	192:A8wp9/GXuy/GXueOca0k8LEAFHItfxMvPJEp/GX7:RwpBGTGfOcaMLZItfxMv6VGr
MD5:	B7A2DCA0B620347D1CF47B3F895647CD
SHA1:	6B17A2790DA7877C92AB58A612E6A21AD4C65197
SHA-256:	CF5EDB8078D92D06CD1CC014DED6CDA49EADFBFA0C36DF972CD4E1D6F699F7A6
SHA-512:	CA6FE05A7D9C35A0BADBDA27125B14E649A64DC1AD01063B644D76EC68B21A8FFABCF0745C862933743527B079F68EB259BCB0DA97E2752ACE6355D966B2570F
Malicious:	false
Reputation:	low
URL:	https://video-api.yql.yahoo.com/v1/video/sapi/streams/3caca4ca-191c-3933-bab5-595ca1d1495a?ad.pubfamily=aol&srid=2557576709&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=b9b3c6c5-2cd7-4937-8390-628222cda75f&region=US&site=aolhomepage&expb=aol-aa-2&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=bdud5hbm&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.3.9&try=1&failover_count=0&ads=ima&nad=0&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aolfrontpage&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1
Preview:	{"query":{"results":{"mediaObj":[{"id":"3caca4ca-191c-3933-bab5-595ca1d1495a","meta":{"attribution":"","description":"A winter storm is slamming California, with parts of the Sierra Nevadas getting more than a meter of snow. A busy interstate has been shut down in places for more than a day.","title":"Winter storm wreaks havoc across Sierra Nevadas","genre":"","embed_rights":false,"duration":68,"url":"https://www.yahoo.com/news/winter-storm-wreaks-havoc-across-084101934.html","thumbnail":"https://s.yimg.com/uu/api/res/1.2/PVU5gM.eKAfa6cKZLZNPDg--~B/Zmk9c3RyaW07aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_videos_177/755b42ce7295132b4d278d6cd57b891f","create_date":"2024-03-03T09:20:14Z","provider":{"provider_id":"cnn_videos_177","provider_video_id":"https://www.cnn.com/videos/weather/2024/03/03/exp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn","name":"CNN","url":"https://www.cnn.com/","logourl":"","publisher_id":"e695711f-6d67-39f2-a2b7-8aa69bdc8df

Chrome Cache Entry: 890

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.985902344426085
Encrypted:	false
SSDEEP:	3:YEOBHkgKnT/xCLw03n:YEOBJuCLx3
MD5:	6D11B60EDC9A85A4098057573D14341A
SHA1:	058C636548AE4525749C948DFAEA88724F9D076E
SHA-256:	06C402D9FF010DC7F7D4580F0353A5D0D65F873E0467BD0DF34A3B3BE16E5FB1
SHA-512:	89280A563395D3C7AEF5AC637DD8801BFC497459F63D957DA435EB13337115F9CC5889AF7F67132A997DA0F3B7779F0B369491ED2ABCAD791CB76B14156D7F35
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A"}

Chrome Cache Entry: 891

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32944), with no line terminators
Category:	downloaded
Size (bytes):	32944
Entropy (8bit):	5.320655919836051
Encrypted:	false
SSDEEP:	768:A2L0ZwZC6OhSLmjMQcR7bidE/o27psmg2t797xaF+Tak9Fk9/:lmE7o27HgwJQ+TaGC
MD5:	969292B635A24123257AFCC3DD100FEE
SHA1:	31FCC44E1EA4598F8CADC199D8CC8AAD49BDE40B
SHA-256:	EE8DA2D4592FB37C042993387232972FC16EABCA5ABCC9D9E67DE338D89D487A
SHA-512:	0F61D8B4433199FF00A6A250CB05E2DD119BED87CDD52EBA9B6CECC84BBA37936369398A66E0F3D046AB5B0D0034984B4A644809D065969CAAEE5670536AA271
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/en-bundle-0.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],[function(e,n,t){e.exports=function(e){var n="";if(e.nameValuePairs){var a=e.nameValuePairs.snType\|\|null,i=e.nameValuePairs.masterAccountNumber\|\|null,l=e.nameValuePairs.bid\|\|null,o=e.nameValuePairs.sid\|\|null;e.isAuthenticated&&e.profile.legacy&&1===l&&2===o&&("G"!==a\|\|null===i)&&(n="advantage-ons")}var r=AolHelpGlobals.content.host+"/"+AolHelpGlobals.content.navigation_utility.replace("{brand_id}",AolHelpGlobals.brandId).replace("{support_level}",n).replace(/-$/,"");$.ajax({url:r,dataType:"json",success:function(n){var a={utility_navigation:['<li><a href="https://mail.aol.com">Mail</a></li>','<li><a href="/" class="current">Help</a></li>']},i={signIn:"Sign In",signOut:"Sign Out",myAccount:"My Account"};try{a={utility_navigation:JSON.parse(n.content)}}catch(e){}if(AolHelpGlobals.idp.include){var l="",o="";if(e)try{l=e.loginUrl.replace("{dest}",encodeURIComponent("https://"+AolHelpGlobals.meta.url)).replace("{langLocale}",AolHelpGlo

Chrome Cache Entry: 892

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 1
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.375915290310341
Encrypted:	false
SSDEEP:	12:+mPGHQCUaDsfH30pbPBAmFjrvg4+8uXyC2wCPb3xKqloD042:5PN/0pbFhB+8d1PLxKqlC2
MD5:	10B71B02100238269F906F7773AD889D
SHA1:	87A1F91638FB593FCDA33B42E76F3323E88B5260
SHA-256:	943C325B24E822938FDD1CFC2B2E446A0477E77187E563E3333DB328BD5BC47E
SHA-512:	A5BC6AA710A8DAF9F350E381BE6EC010CBB09417B5593A14252E6952C6B337CD15938C25B3E0EFCB0C9CB820C675B538C0C47D4F5D0D16A9A905DFE0DA97CD61
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.......................................................&""&0-0>>T...... . .......=...................................................Ba.!1#2.........?....6=...nW5.om.L....>F^....n...$.L.2[..../yUC..N.).i..........[.....(yQE..^...A..Y.\|..o$Z!ep.V.....?.X......S}. .B.)9^F.....5O.R:..g./.=.`.1; .}...c.D.G.`vl3... -w..#..LG....E.k..g...3..i,Y.J.:.[e.M...2xM e...^j.t....k....a.3y..\..\.V.N.YD......{?..k...>.....&N.C......m."6.q_...L..B$:k.r.nv...A.1..1lfu......].)......C.!d.a...~!..-.G.b_....I.#.2M... ."...,....B.Lm....E..~.=#......./._.{w9..j.jb..=.E..m;...............wV0..!.U..mz.......8...C2L.....EU....%.........

Chrome Cache Entry: 893

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 368 x 276, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	118025
Entropy (8bit):	7.960298644156457
Encrypted:	false
SSDEEP:	3072:Iup6CV3ELMn3MyTuwd7qX/z4P+UDpirdCH8UIKE/7/G:LZWM3MyTuycO+UDpiCGvrG
MD5:	C067439D3ABF10293FF87374D1B478FB
SHA1:	B793409F29C185E7AE49C2B06AD4B15D32FF4020
SHA-256:	05FA20B5DB383AAD701C12AEE357C8DB8D2C1269018FB8F24DE67F906476221A
SHA-512:	EE5FA7CD392DF052A79C2E29429B2ECDDB9EF37CC5C321AC7953ED0C50FF2415E77DE94F14796C898BC8BCF2CD1762E69C7F9FF6EE1BB9B2D6DBA0B1DD4C3774
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/uu/api/res/1.2/PVU5gM.eKAfa6cKZLZNPDg--~B/Zmk9c3RyaW07aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_videos_177/755b42ce7295132b4d278d6cd57b891f
Preview:	.PNG........IHDR...p............$....pHYs.........O%.....IDAT....k...].....<c.....R..R.b.&(.E.!16QA...Cb..P....x#..D...D_.!......"."..Ames.Km..B.v..u.c.1...<c.U(..s...m..w..=...Pu.j..q<..qp1...q.Z.............K.E..,.pUH.....N..DH5.0..-.t2D.:..M....Ex`q.]W...p.R.($A......T...ad[=Em.... $.a.....X5M..Nc.lRXv..jT..2H...a...H....z..D..C9.%j.BC.v......c..hiA..@...G,...cI... F..!.$=!.".&".8.8m........XcG%S .@.DXX..@M.....L7..u.N.jY.T.2.SR.Dq..ji.;.U...UX%3E.....C.$.6..Iw:.......S:49FR.....%.X..x.GX..U&Af*....>..#...........c..."..,\.".D..cI.g.D....B..N7.&(...&.$.1.:.@HcA.M...Xx..B.B.#D.`..I...".T..6..#I .2....LI.z.@.`...P&..@R.b.0:V.....qto......N..i..N.I. Ff.....T."$.,A.p..Ca \|5e`..jb..D....(v.&A......v...&d...#G.YB.d..0HA.j%.I8.`..;.....2.I....4V@..\.D...B.$...Y...........LM......!\%M.I$.P..c.._ .!(D....(B.2.4.Y...E.BAH.G......v.Uc..H.IY@H......)]=T.";B...........,.....h...A.G(.@a..."]5LM..I.N...0.PU.t...#C......f..`)"..b.r.7...PC...f....tf......$..a&....V. h.

Chrome Cache Entry: 894

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=4&ns_st_sp=1&ns_st_sc=1&ns_st_psq=2&ns_st_asq=2&ns_st_sq=2&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=6766&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=6766&ns_st_dpt=20&ns_st_ipt=20&ns_st_ap=6766&ns_st_dap=20&ns_st_et=6975&ns_st_det=20&ns_st_upc=6766&ns_st_dupc=20&ns_st_iupc=20&ns_st_upa=6766&ns_st_dupa=20&ns_st_iupa=20&ns_st_lpc=6766&ns_st_dlpc=20&ns_st_lpa=6766&ns_st_dlpa=20&ns_st_pa=6766&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508425314&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=2&ns_st_dpc=1&ns_st_pp=2&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=*null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 895

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2443
Entropy (8bit):	7.831728436688947
Encrypted:	false
SSDEEP:	48:WDTC3fetX7GoBTDCbmkdbZnjoWvfnZiycLnqWwObQ:WK3fILGoCbbS6NEW
MD5:	42286BA6D6F057D86973C9E5D55CD1B0
SHA1:	B89DE059B1C99363F91DD812E54F4704564A83AA
SHA-256:	8749FC53EB1C50CC4067BC14FB891BD9F28A5A1E0BFC9811CB6B7EA86CBB0BAD
SHA-512:	F464CEF509523D09E526322F52287EE07B4C7D0B216D668EED5B1F66CF937607A0F602879C451F8B8C5037760B0B58DC668D4E3F2B83847A4F12A9AFB6CEF8B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.............................................................................................................#@...#a..$A.&B.%A.+K"_../I... 5N.&C.,H.R..HqZguJYj5F[....0J.%C.'F%8Qu~....8J^.:_.Js.#@.-H:K_./J.-M"`..Ah.&D.(G7H]!\. Y.![.L[k}......1K.@f.1R!].,@Y.7["^..Mx.<bdp{w..J[pu...+GFUg.S..V.~..IXi[hu..Olv."6Oco{\iv.0P.Q}.)Iq{..,L.Dl\|...2KGWh@Pc...KZjASj...........Tdy;MdXh\|...o}.'<V......r\|.....2T&:SXfs+?W.3V.T..2L)=U.GpDTf8Kb........M]sYft1D]3G_..J........ETfDSeoy..'Ehs~BRd.Oz./>x..2DZ.(D#7R.>e;L`=Of.../C\?Qh........{..7Ja........)Eap....R`o X.....&?....Em.5W3\4.6Y.FCTkky...............gu...... 5P...q..N]lO`u.4O.3M[j~...^m.........cr..E/AWN\lz..>Ob...Gx..9;1X5J\|..@d....6V.,K./CP.,.><.ENP.,p."S.+.+HY.)!A:%H9t.!e.&5^4,R6.4E............GXn..../.A....%tRNS...`0.. ..Z...............W.....\|....bR.....IDATH..g\.Y...(......d.lBB.B.........D.HS. ...+......k^....!.............c..h..jjL...ih...x...O-lw...3.]m...S...\|......w!J...52

Chrome Cache Entry: 896

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31014), with no line terminators
Category:	downloaded
Size (bytes):	31014
Entropy (8bit):	5.172214479089909
Encrypted:	false
SSDEEP:	768:cmpaSfdIena49uiQ9xYlqmIAB/I7zWGiziZn7JwDkVlzLC78eA1b6qaqYUAE7spj:cleaDFZXiziZn7J4TP
MD5:	2ED3FD24C05AADF407AB0550E217596A
SHA1:	4D3CEC0B2209C595C5A0C5AF7F357F8852E99166
SHA-256:	C06EC8BB34EBE079073AB3F7EF6F31CF891B398E4CE2EC5D5AB18503E1F1A864
SHA-512:	177374C0A882F056504D32AB749D13F96A14F0999FD3079C7129BDFD646FAEB1678D4B86809F1465A9207CC001546EF2D1AEC8CFBAE17BE3BB49E315A3B052AC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-autocomplete"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(i){if(a[i])return a[i].exports;var r=a[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var i=window.webpackJsonpwafer_wafers_wafer_autocomplete;window.webpackJsonpwafer_wafers_wafer_autocomplete=function(t,a,n){for(var o,s,l=0,u=[];l<t.length;l++)s=t[l],r[s]&&u.push(r[s][0]),r[s]=0;for(o in a)Object.prototype.hasOwnProperty.call(a,o)&&(e[o]=a[o]);for(i&&i(t,a,n);u.length;)u.shift()()};var a={},r={1:0,2:0};return t.e=function(e){function i(){s.onerror=s.onload=null,clearTimeout(l);var t=r[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),r[e]=void 0)}var a=r[

Chrome Cache Entry: 897

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	dropped
Size (bytes):	134
Entropy (8bit):	4.679694954257774
Encrypted:	false
SSDEEP:	3:qTkI9JYkAI0EFw47BFdA+FYBzO9eIJAgRJQgsn:qT1YkC/obXgIdRigsn
MD5:	CF4BF23AE244E6FD5CA63598D4DCC82D
SHA1:	343D98C24A955312CFEFD6BD5947F17E4310EDFB
SHA-256:	C996C0469EF05FF6FDD1F7CEFBC3F7E109BB21969DE42FCF591498A828A7AD5F
SHA-512:	3EC60EE9FF8807A76CB360EBCFA109CB74E586AB981184B4F2C7CEC48E6F14931822501B30B643AA65E8AF419342DE3402F2887802DF8D7717822DA6F50FE0BE
Malicious:	false
Reputation:	low
Preview:	<!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Chrome Cache Entry: 898

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 57488, version 3.66
Category:	downloaded
Size (bytes):	57488
Entropy (8bit):	7.995851258677716
Encrypted:	true
SSDEEP:	1536:5mGTXE1UwvSEWC0MYj4zNsoen/pugAffiI:5mGTXcUUSyY4zKp/p1Aft
MD5:	E3BB9F53F3AE5587004D7AFE0A715A9D
SHA1:	7C68CCD0AA665ACD7E8AC3DEFF10DDC2948C42CF
SHA-256:	ACA34B03A958FA5A0926E0E8C0FE0BBD46BA3330B2A114D97F6453FBC30B978A
SHA-512:	D5240BB3DCA1F00BF52F999D24B0A6694B8BD1DA120C4EAAE259C803F69E150188A0A82602397E7213954CA5D28C5206EE937E5D7A24C669ED1EDF896E0BDCCD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Bold.woff2
Preview:	wOF2...............`...%...B......................>.. ....`?STATZ..v..\|.........../.6.$..N..j.. .....j...[.....o.@.t.izJ..!7D'K..n..K.+3...e.B...?:..........d1.....1.T-S..Z.6.U.w.I...B...X.D.9.\+.g....m.;.-jO\a....5.3..!...s.-2..Um..fF...../.@..fa.P.......G.)...fGO/....z..TN0........jaE....J.IX'.N..W....%m.K.......7uJ...^zn.7...J...l......!.3.;..8.;...$..../...E ..#.2.6..$.Lc.G5..1...Z....E..A..4u.l....d).$...Q#d.......M+V.W....&.\....I..'....q....h...s.<>......_..KD...X...S..8G_..b0..g7y...G.l,.C@<6'U.h...z......7I&...#..."...f...-9....C.EKO..b.JV.N...O"...7.....0.....z.e..C.}Aj..K..PD........!l8..h..:..1..e,..n....q.c...Z7..z,q.....C.w...q8........<...A.<...r. .".......ynY..233.....:...j...;j.H.........<7.S....K..F..d.B]..F...;.&... d.....2.....9..p...).Hi.x...f.......R....&........0Tk.. .]]l.......M ...u....X...yrmX(.NH;J....T]....g.....>......t.s...`...Yk.D.$J.e.....c~.+...`......$<.......\|..&....]YWu...[Uv.B..'....

Chrome Cache Entry: 899

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	17124
Entropy (8bit):	7.945950388325041
Encrypted:	false
SSDEEP:	384:DW9UNvG/Cj3ODClJ3AHstDJDnZODRtnQEOD4omDmeY:SnwAiDPODRFO03DmeY
MD5:	1CD0AACD59A3D47AB715174A22F2EF21
SHA1:	64B32861C8D31A2234913CF87E550F082C063F30
SHA-256:	26517ADD50A680FB71CEA4C0FEE7DAEBCE0AA850F20CCA91F24EE28D9D9BE860
SHA-512:	D61938A20DDD0FE903D1DBC79AEAC620086707F84F41D8304974CA60209ED8182AC6B485C73112BCB9AC9CB82A01E27D8CB949E6404D08564275F7F2002CD0A9
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.............................! ....#'2#%/%..+;,/35888!=A<6A2785...C.......&..&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO......,....................................................................................4.0.....!$....M.r..H........!....(.......B..i............H.B.3...Y.. .!..............7.]..."...t...$i.8...&.32.\|gRc.N.3..E0...@.......... ...g..32n.0'[<2q..3.....+0..fv.......193.B...........b....&.=e.e.t..I1..z9.Z...M..r.N.E.'..w".y.......-.......@.^.<...\|.glW......N..cr...q.uYSb...T..U....... ............ c....)c,-.o.qx..YT.gw<9...,....r...8.C^...x1.8....b.....-..@...y.2..[;Z.l.*..j..6....Z..-....W..}L4 ..v...q.vv.Z."3#.;.B.....0-........p..m\|t7.Z.4v..?'.....>v.#V..^/.x...>cw......c...^.b..#....s3...e.iv....@.......`.!.G...z;\|..~.nN.[........t._.R.]~..0..is;.qc.Y.......O...e\'c.........H.`......y..p}..?.O^..jO_......y\.>7K..9.......e.v..w...}...;.o....lp.F.H..ge...8 ..M... ...G.._+.j...u..7,.._......[.S..k.

Chrome Cache Entry: 900

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	105664
Entropy (8bit):	7.998285669998278
Encrypted:	true
SSDEEP:	1536:TEAVxQkL5j3aXzXDf75A/BWL+PUIAQ94SChJzkOnpt82sjcdlQ5n7OI:TLVxjL5j3MDk0F04SiJg6M2sIvm5
MD5:	3EFF6DDAABCAF86C5FF4413CA1FC3CFC
SHA1:	F1F24E35FE63225AC763ABCA54B838AD62DA8389
SHA-256:	897B2324A6FC02977752898F808F745A87DC372156303408F93DD1C7DBEBEDA2
SHA-512:	106A79079A566BCE8F7815BC3131356812D0DDB3E18FBB4E1FCD93C7029BA24E928B931EC1E2E483119FC39A646394FB214162CB8F1AA424F34B41FA01ABA8DB
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI....T.9Cj..i.T5.......M..q......=.....c...h..(....._.h>.b...[.#NN..l.......d.K.W.v..\|t!..YZ^Q.Z.p`..%...s..K.0...d......q(?...N...1.B.}."6.....nL.T.......2Wa...&..5..%)........6.h...9Y.6..)....e3......d3.p.$}D.)'..[.....?}..]~...B....GX..s....."\.......<. 9;..9....1\ ..6..^.. ......)@....D..x..M...S..R[.z..S.N.A._..-.....Z..a.....qBg..B...Z.D6.F..H5..fcb.mN..].$C.7..q9DH...Y>..`2;-....Z.\|.(.X....m.X.k.;.^P..o......6.IF ~...418.S+..l-.%..^.X...d..j..M...........Z...@.(.....A..:e..^<..u..6.X.8.Y......y...h...N.1....m8Yv....e........vBD.J.. ^>-..9\|.D......g..*..fL..`;XJ.c...^,[.Y.7.J...

Chrome Cache Entry: 901

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1920
Entropy (8bit):	7.759003138160018
Encrypted:	false
SSDEEP:	48:5VCBwNRi4frMQuawTKBGhXDkraUR1UPujALsqps7mNe0:5VCBwfTOTtXA5R0L1ImNe0
MD5:	734C0F53F0BC346A49492A12A8817A12
SHA1:	C97A137828004AC677A9A61D414FB1C2C1633F6F
SHA-256:	54EFDBA33B834BE22B80F642413CD3722E046CE70C05CA40875462BD2A75DD3A
SHA-512:	64F83D4389D957972AFB0801C019EF11ABF1909C4B4B3BBDC56A261CAD177F341CA5EFACAE3C9FD3157B40065E431BF03A574D8FD4FDE87D0E26DA7B610D8183
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FvxAd_migNyWyej2GLiLvRQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181212%2F500x500%2Fbulls_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=cff5d8d9a6572e4816d2fd3a3fb1bfa1900de6c2
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................................................................................................mfo...........................................................................~.......................A....."..7..@..6..>..6..:y.4..<..=..8..@..5..8..7..=..A.."..?..<..9..>..=..9..7..8.;WV..~.5..?..:..;D.,.!A.8S..@....:..#[./.."..:b.0L.-........;...Qh......_s..;.....?...Ia..?5.).Mam.2&.'r.3..;?...$.Od..%.as.,J.........................A\.D\....?...>W...i.1,.(\%;.$FD"4.jz_.0r}..5RVdjg!;.dw\|=Tu.3.s~.1N.&E.p..Pf.bt.G_.Ym...Pf....z....}.....x.......s.MV].....?.!@A1?Q..~3L.{.....av...5QT-?...')4.gz\|]lg.1.<Y.ct0.).F_lx}.Zk.4R......uI[ET[f.3r.F2CJ.3L.s...JY"8P,>{E.@W=....._tRNS.*N.b...gp`'...m..2V.Yx07..B.;.......?.....fF...t.^..H....R.... ...................=.!..............IDAT....et.W.......{.................w....s....sW ..%...=....8..).X.

Chrome Cache Entry: 902

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 903

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	5.233913935506896
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsLEwK4LzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4L994xYqJmWeV4IQL
MD5:	66D1BB3159B83CB2BE9ED066165E4C38
SHA1:	FF0D58E13E55067882F7BFFED31A1D8970FD6401
SHA-256:	3FDF2EE487005F6505D00CC9D7A3757A1942D56BCAEA69929CBD5BA110494390
SHA-512:	F55E4F9C1CEA37771D93B79F5B50295C0D25B93E7E41DBCECAD0795A96673793723A2A08DCFE5023972C5EF047FBB5FC11F4F3AB88F1018C14990590DF187B31
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=medianet
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright the Rubicon Project 2020 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 904

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2920), with no line terminators
Category:	downloaded
Size (bytes):	2920
Entropy (8bit):	5.278382327824268
Encrypted:	false
SSDEEP:	48:0GoPdhpMzANg4+rItkVsjxe3iRfLIzzL9qMEqK/VEjbJtbmsrIonbl8Q6LBI0uBP:poPTdfbiVsjgiRfL2f9sqK/VEjiOnF6K
MD5:	653708AD1BBAE1579927B6391B2A28F3
SHA1:	4261E415C23DFD9D925F071737FB0D236F856F4E
SHA-256:	82D2DC44AAE1EDA52ABC17AFD30C6031B7175C13EE6955410164C66AE755ADFB
SHA-512:	4092D81BEEAADB7ECA73EE279AF0A5289CAF850253464BAA4F7695C49670C05F7E89630807A2C41D3D9CAD75D95A60719FDB1A16265537153952774F7450873C
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/um/ixmatch.html
Preview:	<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;

Chrome Cache Entry: 905

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p2?c1=2&c2=1000009&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508393487
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 906

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.985902344426085
Encrypted:	false
SSDEEP:	3:YEOBHkgKnT/xCLw03n:YEOBJuCLx3
MD5:	6D11B60EDC9A85A4098057573D14341A
SHA1:	058C636548AE4525749C948DFAEA88724F9D076E
SHA-256:	06C402D9FF010DC7F7D4580F0353A5D0D65F873E0467BD0DF34A3B3BE16E5FB1
SHA-512:	89280A563395D3C7AEF5AC637DD8801BFC497459F63D957DA435EB13337115F9CC5889AF7F67132A997DA0F3B7779F0B369491ED2ABCAD791CB76B14156D7F35
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A"}

Chrome Cache Entry: 907

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	10363
Entropy (8bit):	7.9504332333281935
Encrypted:	false
SSDEEP:	192:6gF6e+6RlwsQ7dPJZocmQIef6hImdMiusqlFxq1zC+903BtuUCp1F4FTW8sCINPD:67rjjPJZvmYih7dMKqJ+Wv3Cp1FcsNAe
MD5:	2F41F436487237CB242C6A932A6C49B8
SHA1:	950C6759F40A752570AA4BC7593F8C990579FAFE
SHA-256:	DBB0B4D5C3A9B9E96B85BEBE42AED664ACCF5F1CAF10C903575D1C73A2B685BD
SHA-512:	51F060EEB528121D29A67EC901B081A29554250970A3D7804753CFE1C8C24E180138B7305F8E2D1897EABD80FA16EE2EC0BA899A39D1ECE5876B4007BFC60447
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................%......%!(!.!(!;/))/;E:7:ESJJSici................................%......%!(!.!(!;/))/;E:7:ESJJSici.........,...."..........4....................................................................:.T....fN.^.s....&7!.'.u.'..d.<.1s..Y....6.zo..IKq\.E.;8.~{.i..NDX..gU..Fg+...+.i.(.A.......Y.$,..&.}.tno^..hJ=.#,..+...e....(.... .(.10Zc;...U.I.....d.,D.VUb.....T9.T...R...`0b...O..o.X..%ac6.x.1.J..6v.o...xZ.D.{s..j..\|....3\|......")..-.Q....O<\|...^........OX..:..F..>...g...6.z........90.[L.Y..~)..b.<..j.u..j=.Pu..U...,...\|GX.....q.,z_..._....-..0.>.i...y.."..#....._r...uy.?.e..Y]...]..c(..F...M....>.i.....5#.$...u..c.p...J.+..(....c.E.!^d......Y..1.K.Y.t..%.../..!.....;...>p.}@,....2dv.1..........G5...+.<...\.Q.O?..X.f2.......B..i.[..`.2. ..b..?....z.<...sR..u.h.]..\KN....,..J.Q.9FFF:.z.....T..2z.8.<.\|.x^=X..b.4..+.'.. Wo.Q.`.g7.n.c.7)..w.....m..9.V..~..z..w:.j}..N.:k^n.,j......B..I...V...%...!....

Chrome Cache Entry: 908

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	45182
Entropy (8bit):	7.982905130191801
Encrypted:	false
SSDEEP:	768:/8gjOmZaJGCOAXZrYReN3jMJU3ngd2X7HuE892So4XLLdE2q/IbWeA:/8gH4bZfTrjjP0LLdE5n
MD5:	B61112AC42F1FDBC326E5DD508E05D0C
SHA1:	8F802E3CF60AA8C5DC0B885534DD865A5D0443C5
SHA-256:	3756D90D44799321B629B408B403B38D8F2673014D0233DD4C65F9A0E3162267
SHA-512:	44A1987158FC7F7586492D3D1AFFB2C8FAD9ED1D38B69BAD35D6E26B1FBA1B567D01DE5E261750F8BA46D3A82FDF4F586C3FC2F227AEEC1F0C60977012FE434C
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"..........5...................................................................m..&<_'...X..;.. .8...l1..5.G....<rL..L...Dy/&&G....C2}u...X..Z..m^.^...Z..^.BjwJ.{Q.5".... .73.`F2.K..F..X.......3..4..3.....&...X...l1.EqT+..mC..\|(..WY...F..KiB.+..\|.q.J.qe.X....../..d.....W..Z.h....u.7.....3V..)..)2..t".a.....kZ.`A....M...'.6GT..Y}.~....<.....Y..&....E....6.\..Gi..Bh.:ur..xD...........#V.1..1..I...1M......g(.w...)O.E-6.!..."R..6.cf..E..gJ.N.....].B..O^.~U.X...[.~.e.9.....7K[9.Oo..<..7.......7.6...!.it]..e...V....b...Td5.;D{S.Fni...z.=s.....r.[.\|.....9A.z.\.I.1.....o9.9.....1.d...NSK..Z.L}....H.2...>=.;... ......i..S.....v..W........l1%1..)008".&..}...zNz.T...3V...3J.2Pc&...[=q^Ih..Y.^.T...>}...e..Q.2.{.P'.\|.U..;...B..V....:....#[`.65..y~..,.b5i.....Nih.x..[MJa*...(_@..z.Y.3"...6L

Chrome Cache Entry: 909

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	277
Entropy (8bit):	6.327525090862984
Encrypted:	false
SSDEEP:	6:6v/lhPf4OllScQvlolyIUnVbajqbWgTjoPSSEWYe8fyiovbjRuKBa1g+CQh0p:6v/7rllqtolyIUxGqbTjoPSRWTvxuKEG
MD5:	DF9A2FDE7D1D68B13D038C4AB499201B
SHA1:	EB3097D78B2E350FC2C671578AA43E650EEDE41E
SHA-256:	C0C1D1343803CFD6D58CDEBAB0526EFED850A495E1AE37B092FBD53C5CCF17AE
SHA-512:	34A24F58A2292422A01D9BB2B80FF36061C7A40ADA7F174DAA564978DD531E36AF6464778A98F899E7B9554E52224E089DDBEB5BA10079F77F92421FFE13336A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e
Preview:	.PNG........IHDR.............(-.S...BPLTEGpL...........................t..a.....A.....5.....k..+..W..........jG....tRNS.........3......xIDAT..e.7..0..@..x.A....y<..%......E<\|.[.../~\.@...D..p..5.......H.7I.....+.F...Lu.=.$.Y.2k.2s....z.&):.;k.a...........++z.....IEND.B`.

Chrome Cache Entry: 910

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4741
Entropy (8bit):	4.913921186279149
Encrypted:	false
SSDEEP:	96:uTS0mCQ0XDmyQnpHfFhx6t77yxHdadFSt05j+Zv1KD:UFcp/Dx60YdYt0Av1KD
MD5:	14E7B89FA161E7B8A08389FFCBDB54A6
SHA1:	F2DB4A03C3AC9DB59FB0C1CB275CC35B30991EA4
SHA-256:	6793E19A7E6F84DE47051BA22D319EAA3726CA44D92FCA9349A4F4460A1144DA
SHA-512:	79F8653AC92BE872C71F6DBE9D00C3C7D7A7EB15E83821847CC6D2B452BCBD6982520C3160991C664DC74C97434BBA46625186A2E0FCE1ADA05BE53E98DB8030
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/module-chatbot-gpt-chat_icon.svg
Preview:	<svg fill="none" height="255" viewBox="0 0 249 255" width="249" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><filter id="a" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="254.805" width="248.4" x=".531494" y=".192139"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feColorMatrix in="SourceAlpha" result="hardAlpha" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 127 0"/><feOffset dy="2"/><feGaussianBlur stdDeviation="16"/><feColorMatrix type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.475907 0"/><feBlend in2="BackgroundImageFix" mode="normal" result="effect1_dropShadow_20_135"/><feBlend in="SourceGraphic" in2="effect1_dropShadow_20_135" mode="normal" result="shape"/></filter><filter id="b" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="107.02" width="107.02" x="135.911" y="6.19214"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feColorMatrix in="SourceAlpha" result=

Chrome Cache Entry: 911

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13124), with no line terminators
Category:	downloaded
Size (bytes):	13124
Entropy (8bit):	5.281539607685133
Encrypted:	false
SSDEEP:	192:pn4pA3FKfJo6WRONWV0hs449WgLGeOmuVb8jhNXh8C88IQ4jhNXh8C88IQ97+d8G:x4pA3IfYRCvwOmimh8f8+h8f8l7+d8G
MD5:	A73C33D7BF1324F787CFE13C6A23D2ED
SHA1:	F83D25A4E49B04EF7D65FDAC3737426343856B57
SHA-256:	DFD3FB0722109B9F3127066296F4368D6F191E5B76D7D431102B196458BCDF41
SHA-512:	ECADE53CD4195C207481D6741DD37CA132B55677A88BE62E27C93E6B580F47D56D463DC51F2B192C00B033A187CC175185E175B547D9592EC012A26A4AB4695C
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/en-bundle-home.js
Preview:	!function(e){function a(a){for(var i,t,r=a[0],s=a[1],o=0,l=[];o<r.length;o++)t=r[o],Object.prototype.hasOwnProperty.call(n,t)&&n[t]&&l.push(n[t][0]),n[t]=0;for(i in s)Object.prototype.hasOwnProperty.call(s,i)&&(e[i]=s[i]);for(c&&c(a);l.length;)l.shift()()}var i={},t={8:0,19:0},n={8:0,19:0};function r(a){if(i[a])return i[a].exports;var t=i[a]={i:a,l:!1,exports:{}};return e[a].call(t.exports,t,t.exports,r),t.l=!0,t.exports}r.e=function(e){var a=[];t[e]?a.push(t[e]):0!==t[e]&&{0:1,9:1}[e]&&a.push(t[e]=new Promise((function(a,i){for(var n=({9:"offer-templates"}[e]\|\|e)+".css",s=r.p+n,o=document.getElementsByTagName("link"),l=0;l<o.length;l++){var c=(u=o[l]).getAttribute("data-href")\|\|u.getAttribute("href");if("stylesheet"===u.rel&&(c===n\|\|c===s))return a()}var d=document.getElementsByTagName("style");for(l=0;l<d.length;l++){var u;if((c=(u=d[l]).getAttribute("data-href"))===n\|\|c===s)return a()}var p=document.createElement("link");p.rel="stylesheet",p.type="text/css",p.onload=a,p.onerror=func

Chrome Cache Entry: 912

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	8957
Entropy (8bit):	7.91782186414842
Encrypted:	false
SSDEEP:	192:SWc3pzHabvV4W7BdY+ExHqBM/k92QlpZ9pADC56iNoBVMe:SWc3pDabLFdYpxKjpZ76BP
MD5:	A5307E0965FFC0FFA3248BDF160CF7D4
SHA1:	F4D17D19897BE58EF7AB2DD55B5DA0F45113C6CE
SHA-256:	742FE07DF20950C275A6D7AAD5A553F2DE1FE4A9D1FC6B8C6B643EF698F4919D
SHA-512:	76EA5E599F62C7A75CFDE5FFA25851A69AE303DCDC424B322FCA318954590BE3E8DEEB7A8C7935CC0E39F4871F4F2B223E2B4066B5325722286CE0F7AFD5CC91
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/0s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/0s/match/image.jpeg*~hmac=312f1427da13bdfc538e4e8039315edb4761a8e7a2f22b39ab83439ff6f82c32
Preview:	......JFIF..............Lavc60.3.100...C.....................................'!..%..."."%()+,+. /3/2'+...C..............*************************************************..........."........................................G........................!1..."AQ.2aq..#...RTbr...$35B..%4c..&Sdsu.........................................................1..!..AQa"...q................?..W.....x.d.xe."...V...3....=.SY.8.ma..Q.]....w.6\.-!c..F.TM.@.-6A2.....TOI..OL.KNQ.k..k.mZ..#V...\|.KvmX=.c&..@..m.!a.......2..].....N..}5...wX..3.t.o.8Ol...T..........WM..9..".6..\|.7g..Y.q3.....{;.o7.....5.=N5...S.ia<6.N.......9I..2.....8......I#.c..$..e...b.&..r..c..4F`..1....(SK..I.qK.$......"p.@......k.K.7.....d...*........K..(..2............ ....D......Q.<..@.a...<.j.2..c.Q^.pZ.w....0g....F......>Y.{...&j.2"\|.6F."..@.<.AnA<G.H...EH.....F...j.F..6m......`.F....a-...Jy./.8.l...+mS........N.$s.......g2..N>.....v...$.c".9.%....[...H.:n..Y-.,G.."i..~,....`.........[gI...`A...C

Chrome Cache Entry: 913

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x627, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	117906
Entropy (8bit):	7.998142288856869
Encrypted:	true
SSDEEP:	3072:vLSF+BBZtHB5wtEvO8cQVv6X9kOd01EXcHBOtlid:vLSFgBZtzIUz0ym01EXOEtlid
MD5:	8987B601123FE20C6F821FB4BCF4C22A
SHA1:	652CF53740816C5F31ED4B796FB71E8793E8E9E2
SHA-256:	C3E13A4B538906264EF3C91C30807D07045D36AC592EC69E83467F88F56E319F
SHA-512:	C9A71CF6A8AA51F2D83B7A7E8B14E827554CF97FEE2A9C9FA51ABA9DDC18675A8A73AFB090844753527C751877AB2279249547B75B309791143AA083C0475117
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ~....Q.....s.>m0.G$#"((.;....MvU.j{C.>.VW....k..A9\>bdzG.u..yDs...~..y.._`-.N........<...z"~......D..:..W......~y..U_.x..^s.Y....._.......z....c.......Q.._....h..z..z..\|E.a...........<.\|....}...........i.?.......?.B.s.....m<..k./A....zd...t......\|~....7._..........'.o..J_....T.."....RX(.9.63{._...C.#$...~...?...8.Bi?.j..c..D....3}4v...D.(.#....T..a.... j+6A......P...D=;..hsGw..j7.......1...O...X.xeZM.?.......".^......!p......N.X]...<t(a^..g....o..#>....e.G...#.d{.9 u.1..W.....J.['.sq.Y.....x....(.......{.x[l.@......M...;..g...O.Yp.,.Y.M.....>g.!h.=_[...,.l.....0....j......_..{......xY....57;.6Y6.0..4..a.GO.qI....<...e..U>..._.8.....8.CD.IP"...m.S...Y/..._L...........Q...9N%V......L.[...... .v:Z\yV..i...t....W.....IrT?...C.#......s.q.....i..e>...E.1.P.:...=.........Q.{....G+b<7..o].+..B..{oa..B..1%.A..M.....q..\|!{f5"!....J%.m..$..z.t..:..=.49h....t...d....".]..O...~.....6.8..RC..98.9..[lR.......#g...G..]}.b.`..

Chrome Cache Entry: 914

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 915

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	102632
Entropy (8bit):	4.5141728663980105
Encrypted:	false
SSDEEP:	768:nvR8gnR4KxmRr2g3ztZX8sZq4lGjT8oXBYC/xnA4mab0Xg5sTo63B/yL0I8JObCv:vR8Gk8yMMaQXjh3Zk9oKLHA32ZpH1cb
MD5:	EE55FC0705C29CDFFE05FB27239B5524
SHA1:	97F05B0F63739E41B7A5F8D6FA04AF3B496284DA
SHA-256:	70BF793D3301AEE9DF9CADFC267AFF1E2B348AA75BBC3C8F604DB1AB96385135
SHA-512:	BD8FF55B6BFEA106084B678B3D7A4BF4C023D7A3B85555E3AE40849CF595D588F93D5CFF8991AD2975AD210FAA67DE32445CC5FD4E9C200A1AFEA77C41F23F5C
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/WAS/tandt/visitorapi.min.js
Preview:	/*. @license. * Adobe Visitor API for JavaScript version: 5.2.0. * Copyright 2021 Adobe, Inc. All Rights Reserved. * More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/. */.var e = (function () {. 'use strict';. function e(t) {. '@babel/helpers - typeof';. return (e =. 'function' == typeof Symbol && 'symbol' == typeof Symbol.iterator. ? function (e) {. return typeof e;. }. : function (e) {. return e && 'function' == typeof Symbol && e.constructor === Symbol && e !== Symbol.prototype ? 'symbol' : typeof e;. })(t);. }. function t(e, t, n) {. return t in e ? Object.defineProperty(e, t, { value: n, enumerable: !0, configurable: !0, writable: !0 }) : (e[t] = n), e;. }. function n() {. return {. callbacks: {},. add: function (e, t) {. this.callbacks[e] = this.callbacks[e] \|\| [];. var n = this.callbacks[e].push(t) - 1,. i = this;. return function (

Chrome Cache Entry: 916

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	105664
Entropy (8bit):	7.998324180471296
Encrypted:	true
SSDEEP:	3072:1zddgoskn0mtcLyep7KF+B0JbWxmvmLj8GMgnngsjTOt:NdGXkDwyepuy0rGznTjTOt
MD5:	C8047A4310262FEA1D12BE758D926E2A
SHA1:	A61F221417FA6248161AE51AAF2ACCF4FE0FFD24
SHA-256:	3A982902B0FA6EEA6BB75861DAC431A158A5A367D62D37B58C33DC9E07608AE9
SHA-512:	BE215F5963BC61BA98C5824099C937161BC3FBE9257015EE7A8DCD06A0AC716FEE6711DA2CC564ED719E08D996966ED2D8A4064D2173CC8CDC5E3AD1DBCF64DF
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI....'p5b......X(.!..#.l.w......@y.\3...n....U....f#PY.3..\|g..7...f.\|.[.......3.....'..N_....ko./.....F..p.DYl...#T..^..#~5...%..}AQ.H.).5..W............t3....aF..0....d..t.....{..#@.......~.wL.O.z...Z....G!......X.T...b.m*...i..$lI.....A.......X&[p.B...M.....M...3..{k_.<.....;.K..a.~Y.;..f.,.c..$.m.....,3b...oX....J.../.C..O...Gq.^./Z.....l3...73h...\|A..GWF.^d..>..&..V..K.bU...t.....2.!f`..........im.....$1.a.h.Y.O$2K.D.o.>..7..}>.\|L.R(.(......G...l.(.0.....}$...L5.q..m.._......=.;[.Y.Q...p....9.......J'U...t.O2.2..1T.....v.~...'..?.G........k.....'P.;...b.R..1:..v.^2.Q..<o.Z)....!3...X!.....

Chrome Cache Entry: 918

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1801
Entropy (8bit):	7.7410881990478355
Encrypted:	false
SSDEEP:	48:aK8a00006vXH7TA4uJr8u5aUZbetxU4Dzvm9B+WZ1/1ufS:gH7jOrvlkt/Dzuf+WdQS
MD5:	ACC901C1C48D9B5C70AA019EC7807ED4
SHA1:	32315B269F64B39CBCE5819F1938CE665870D72A
SHA-256:	85151ECE1F855B6BF1B5029212A875B918967F0D8F21E76D7403D2DEF7E01FD6
SHA-512:	BC4FE1AE381B447849A4907183C320B60255866141715A4FC78BD65486DBFB20259EB5613D9EB0A49F6C1244C5857600DB781F1F80CF100B942A3444B214C2FC
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FGZGEhZrM.ElkBBel7PyrkQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fthunder_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bbee72fc45aaf87f8593bcbf78061f6419c1c6f6
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..c.......-b.-b.-bA[...c..........-b.-b.-b...................-b.-b.-b.-b.-b.-b.-b..\|.-b....-b...Y...9k............-b...W..9X..-b.-bu...-b.......-b.....c........................................Ab...t...Xd....-b.........f...-b...5_....~...........;$.}..-b.=n............O...0e.............^....6j.6;..4X.Cd.Ii.!Hvx..r......S~j3F.76...i..............[x.....<0S;]..;$"..5=.82Q2M.Brc\|...0...1U.....z.....P..;&........}...R>...f....77(M{.9.......Cr..x.......rb.:'Ql.E...K6.T&.~*b....T..........yi$Kx.............]J.4A..2....;F...l~.9+.....,...9..-....\p...\..n.81....G2P..jb3I....zr@N%0Z.>?.XD$b...AmWJ..3;b...xr..75..0....J.j..?v........mTk$_..s).......['s.....Y.......c...a...HG...}4B.5?.Zj.5@......@).0[_P..y......MNo..y[o......v.sF.....StRNS....!5...%..s...;^/.k.N..G....t....eS\|\..A.....+L...\|...G.M....\....T.m..............hIDAT....epTg...d5.+.@.@....{o.......;..uwww..N:.d...s.L..C...\...$.$....LE.....'.$.

Chrome Cache Entry: 919

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1993), with no line terminators
Category:	downloaded
Size (bytes):	1993
Entropy (8bit):	5.358485834237392
Encrypted:	false
SSDEEP:	48:k1kSLYYmRFsBYPY9KBpAYuLygYNXTuHYUYPgUMcTTWOdTt:0DcYmXwYPY9KBmYKY1TkYUY9PTTzTt
MD5:	A7D65B2DD66B567F73A5820B200D4F50
SHA1:	86488413E9175E70E19C9D63485A863570F3747F
SHA-256:	63596DC0C393D584ADC29861C4B1DC7C22418975EF4D7F809E6EA69E74A92081
SHA-512:	6EA9457610698E850D33ED80AAB60BFDE326EAB2268AE5549525740E998F979D6FA2298975024408377D3271167B6E47AA7FA2165F49F0496B66C7517C2522F9
Malicious:	false
Reputation:	low
URL:	https://ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3525099948919525000V10%26type%3Didx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1
Preview:	<html><head><title></title></head><body><img src="https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZeUHNEt3uSYAABBfAETINAAA%26015&gpdr=&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.adsrvr.org/track/cmf/casale?gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.deepintent.com/us

Chrome Cache Entry: 920

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 1
Category:	dropped
Size (bytes):	684
Entropy (8bit):	7.336584721340679
Encrypted:	false
SSDEEP:	12:+mPGHQCUR7sFdlnYd8uv2Y2iv8CGUCniQvOwjBwaxJ0u6LNIp6XJK:5PjwFd+d8G2t89CnzvOwVwwJ16CUo
MD5:	C83D881A3D5CE5C56127203830586F67
SHA1:	2FC04F9BBBBDC18663289E49005D4B4608575C0C
SHA-256:	1394ACF9E7CC9AEED87B4AD855E65094FD1A1E465E657A0AB0E3D387C635C9C3
SHA-512:	71B6BEDABC9CAF92D0A60B16D2E99D3A830719F01062448482DEE95130177EA7024D838C7233C8EE713AE3E2E39002CD2DAA024ADDA65F5DA8E249181E2A932B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.......................................................&""&0-0>>T...... . .......=....................................................Ba"#1!2........?........n[..6..w..3...u..2..%..).\.9.=.T.8e....h=.C..z...yO".....z.-.-.3 .G..-...&...I.Y..1..6.u.c..\|Y..........._z..B....5v..r....C...Q..pGx{...kf.N.6.z4u.....;..a.....m.]K..R1.7....@.;8..!.i.G..Wa...v..0.\A..BT..\.u.....&......`..Y..t.6..5.R8..z.......L(... .Ts....V.k.1U.C:.5:...!...w2...p.A..PU-K..k.1..L...F..A...7......<........:fak..4......h....$.~<x...2-3>..L..c.q.1...k...=..i..1.=%...d\y9.w=.T....7..h.....{...x.".9..-..Q.-....A..-.......I.&G....7..u.c..\|...~..y.y....

Chrome Cache Entry: 921

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	403840
Entropy (8bit):	7.999487422710902
Encrypted:	true
SSDEEP:	6144:FLlmH7ByvBsNtUPbm7CFUa98Lo+wAXr2wqhR6s3E4oD4RCaB5amaeSN:jABII+PM9agaS2wG8sUZcRCW5a1eE
MD5:	1CFE6DCB114FDCE84FAD4AF520E52635
SHA1:	8C3B6C1AF2644C88AB4A1A0BCCA56C40EE08922C
SHA-256:	EE7DB6EC8E00B77ED86FEA2957DD38F5E34743214C28399F6CDCB3A159543FC6
SHA-512:	4CC6B5579A81CF67BEDE0BF44B3942EBFD0611EB12C6ADE422E2ADC79E1B92D25ED32A01F7C3F8B812933B013291E208A87B1659209B1813DB32BCF9B0088127
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|...q"..I../....M.8.T.p.......J..d...._.....u.X_...XOY.......u..s6).'.7;.p..........=\|.:r...t......"zXk.@......l?.....z........7;..gC..e.+.....u.`.Q..p.rX...cW......x_..T.....U._,G.5...1.).Xr}....'....&Eh.../...M.s@....%0........}.z)...3F.....Ja.............<p!...Av!....{..4..&.;EH..im.0.a..... .+\.PK..y.>..v..\&S........'=Y.m.)K.?.....Z.&l....:7.&.....)8.v3...[..q..B..#Ee!O~.z..F. .,..]..+Y..'.f......z.......{...T.Q.m.T.....8.&.%...D.>...a.A...b.l...d(...{R.)(..a.5 V/f....u..]Bm.9.......<....}.I..J....I..f.....M>.:.R..H.-..y}.c......,...=...kcB....Q...K..-._.6o..c.A..pR..t.............[.L

Chrome Cache Entry: 922

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.975652212593064
Encrypted:	false
SSDEEP:	3:YEOBHt2oigp4zcd2HxeKjmRS6:YEOBFp4zcd2HoNn
MD5:	A819D0DE0286C3B1A3E818E693A413A0
SHA1:	55CDE80DD076917239C9C085E75152DF6899A197
SHA-256:	548B2BF55F807DA1B4F30879BFA0F3C3692B97F3BF2BA2654BB3C4EC5B351AA2
SHA-512:	638973E478FAF0D418F4A6E11709F383C2D464A76A223E221F413EA8C1039ADEA27FA2A5EA9A3A4520F2491BB74EF09113F3C3F0E66835E369255DFD8305BCFD
Malicious:	false
Reputation:	low
Preview:	{"axid": "eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B"}

Chrome Cache Entry: 923

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1502
Entropy (8bit):	7.566460815417501
Encrypted:	false
SSDEEP:	24:5TcamJ53/ySSzoUdAVZcihIAlDHhswnUXDm4KYCYAKeFgFZj0dSm6XQ/WVNQAEXc:Ncam33/azoUdSZH+MtDUTm4aKucV5QeJ
MD5:	C6DB42F786C5549BC2BBF3588F87D728
SHA1:	6AB08F5629BEDB310CF0055AAFBD1DF79FA2AE5F
SHA-256:	BE3086D30719F2410C220C32B308696A6F475BCA119E25CEA52306204442E85D
SHA-512:	ACEFF688C7ACE14C442418AE4188B0E037D42463BF26D44A2BEA158DFF8F37E9DF2B0D015FE933641AD611A2CDC64C8FD3CFFC295599563D58B7080E7CD1B873
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FADqUXlqn18KYlIyqLYgVQw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fpelicans_wbg.png&client=76f99bdb8f78cd44cc0b&signature=798c93b043435cd03be9ec1cd6c179c807780488
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.{Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z.~Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Z..Zmm[]c[..Zkk[..Zvr[..Z..ZX`[..Zae[..Z..Zkk[..Z..Zom[..Z..Z..Z..Z..Z..Z..Z.x[..Z.}Z..ZS][T][.+\..ZNZ[.,\.1\.;\.6\....?kQ\[.{[.2\...-F\2I[tq[$A\..Z#@\'Kt\|v[P[[.:\..Z.3\5K[.=\0H[D\8M[.-\..ZGf.X`[`e[jj[T][...Aa.]c["?\FU[p"J. F...5W~......U^[pn[..Z..ZKX[ET[/G[./\.0\6L[kk[..Z7L[1I[_d[.=\1T{.4cV_[ >\...,F\..Z'C\>P[[b[.Cmn..q..u........{u[...@R[w..:N[)D\..Z.?b..ZHV[kro#EhYa[bZX~w[...GU[..Z\|..e1O.Qy..ji....Z..%FisKR./_+E\....ZbFTs..d&O0S{org&EdA&Q...F%Q...Mk.....E.1a..ZD^.c}..)X.7]...bt.....2b4V{Yu....\l..:h.}[.....Z8Wy...h..x...=h>]~Pm....>Ytml[@ZtT^[H2S......G1S...!...=tRNS..6....S.$}.B..h..(z..\|..yD2M....v.p.F..p.1....?e:..G.......eD.....IDAT....eS.Q....R.....e<w{.Ej......nP....n.n...5...0.~.s....)Cc.s....Mks.cCt!.=]}.`......+.33........`#}]=...~..........[......b..B...C...n...9....9....u...E..v..wXa.{.+1.m!.e.u.i..S..Z..5U.....^. `.&m...}..

Chrome Cache Entry: 924

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CIjD8p6f2YQDFQHDwgQdWMAMmg;src=13144298;type=aol;cat=afaolmal;ord=7618860228691;gdpr=0;gdpr_consent=tcempty;npa=0;u1=hashedguid;u2=usertype;u3=TestControl;u4=undefined;u9=ad-free-mail;u25=undefined;u26=undefined;u29=aol;u30=undefined;u55=undefined;u59=mbr_rusacqdsp00000691;ps=1;pcor=1935452063;pscdl=noapi;gtm=45fe42t1z8860054492za201;gcs=G1--;gcd=13l3l3l3l5;dma=0;tcfd=10e44;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fs.yimg.com%2Fjk%2Fgtm%2Fgtm_ns.html%3Fid%3DGTM-NB4W2NQ%26cat%3Dad-free-mail%26u29%3Daol%26u9%3Dad-free-mail%26u59%3Dmbr_rusacqdsp00000691
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 925

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3
Category:	downloaded
Size (bytes):	34936
Entropy (8bit):	7.980502102436656
Encrypted:	false
SSDEEP:	384:Iwp8FMqNpAy0evU6KfGf3TQvrT1J7LpX9sMhCk2af00jNkBocHxg6f/kwRpeZrqg:PqN26Kefj4rTnBtDfXlJQocTuqh2MjuF
MD5:	B897C5425047A66F43134C6976885F72
SHA1:	3C6A0D1046DBE916FF2588F4F13D67A06117E3F4
SHA-256:	4AA855561EC7C929BE5802D0F060DE35162FA8194D4C8595F6F7D27D6D3E67E4
SHA-512:	73B7DBB5E195E4EAF330D5A35D43E2534F9B1D2810787E4566797182A2D712D2D123825767F0447C1C8C03FE1B704391B7240E5B146D0264183FFE91602EA154
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_yahoo_sports_800%2F8dfffacdcd577e74bf580a75d703245c&client=76f99bdb8f78cd44cc0b&signature=3ba9c4ced0691ddc3ea96362f7352a2d0c1a2f4d
Preview:	......JFIF....................................................!...!.1&""&18/-/8D==DVQVpp.......................................!...!.1&""&18/-/8D==DVQVpp......... .."..........6...................................................................1...W5...z.3x.Z..,&..1......o...r..~..Jy..)t'[y...-.I._..o....j8.vu..sG.f..FIn8Oc\|.......Kk...+.......N.:...k.+.f2J)...9$..C@..!s..6...e...P..."Z.....[..F...K./z.$o.eM.:.1.\|....{N&.[.'..s...Yi1.w].y'_.z......A..U.rh.....NK\..O..OE...D.G...keta.N...]....JO..U:K.F.[.U..=S.U..!F.........$.E"......g...]2t..(.{....DN..?l..T........K...l...6XF.]..<..sM....r.eL+-w.............f...b.U.......m.....ogAa.Z...^{2.....=..s;\....}.X.p....E......%..........u2..Q..;..:.3..%.o7[%..Dn.........].g..g^^,.GZ.-......B...Z.UYp.P...h...I.,._A.....(_".l.FCq7T.w.C..J.X...*pE.......5.m(......;J.:9W/.;...k.k(...yee.W..oo9..Z.Er...:......oYut^.....7..U..%-.........#M....k1..l.Q....d.,AG....m..mh.P.n.j.d.:.n.qS..vfLW5.UG5.R..

Chrome Cache Entry: 926

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	32139
Entropy (8bit):	5.164546534957773
Encrypted:	false
SSDEEP:	384:vgghICI+Y4Li50jPa1HV6s+3r6J/3OnSqlUxccdzU9lpOlzF0wCLuo3GxeI:vRICI+YNCji18HqJdzUJKFCCFeI
MD5:	C1E8FD1478C920D2B1F4D04046F3EFE4
SHA1:	68E0C1FE0AF3BBC9489E9504999B625DF12E6B26
SHA-256:	D89EB4B6A5024BB27DA6DA6017A827BC55EC95786BB7B4E7A94233D4D0FCC6BA
SHA-512:	32AAE83722680EBFD36DECABAABE718196C67151037D336FC49C43D2CF4F13233A55D17F1FE3B1E4D3E161E53CFE7F643091B64914298D87B915D9C39E8D1D71
Malicious:	false
Reputation:	low
Preview:	{"featured_articles":[{"modified_date":"Feb 21, 2024","created_by":"0051N00000636FlQAI","title":"Reset or change your password","summary":"Your password gives you access to every AOL service you use. Learn how to reset your password if you forget it, and how to change your password.","content":"<p>Your password gives you access to every AOL service you use. If you've forgotten your password, you can reset it to get back in to your AOL account. It's also a good idea to update your password regularly and to make sure it's unique from other passwords you use.</p>\n\n<p>To manage and recover your account if you forget your password or username, make sure you have access to the recovery phone number or alternate email address you've added to your AOL account.</p>\n\n<h3>Reset a forgotten password</h3>\n\n<p>Use Sign-in Helper, AOL's password reset and account recovery tool, to get back in to your account.</p>\n\n<ol><li><a href=\"https://login.aol.com/forgot\" target=\"_

Chrome Cache Entry: 927

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 928

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2749
Entropy (8bit):	4.888793190554598
Encrypted:	false
SSDEEP:	48:chsKf7kvMOv7KROdvZv7JkacllbmlbmlbwTqBVL:uf7hqKodZcl88mTqBF
MD5:	CD917BBE4B8298AEBCA5DF5A54953D81
SHA1:	EF1078BDE5E72BD7FA9158CA5F7F55C0DA595191
SHA-256:	4302003A54CC9C99880CECE241980104481F1D5D753141AC87305A9E4D321DDF
SHA-512:	6A847DB67D16551D4EE8B6EC4F6BCB548C527FFCE502256A172A2838A48A25213C376C617581226F077B5361B2402EA010CA5CFBF6B5E9D5DCCE28C636464EAB
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/ProductCentral/images/aol.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="102px" height="40px" viewBox="0 0 102 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54 (76480) - https://sketchapp.com -->. <title>AOL_KO</title>. <desc>Created with Sketch.</desc>. <g id="approved" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="iPhone-XR" transform="translate(-146.000000, -43.000000)" fill="#FFFFFF">. <g id="AOL_KO" transform="translate(146.000000, 43.000000)">. <g>. <path d="M54.6477469,8.76847291 C65.2095877,8.76847291 70.2753595,17.182266 70.2753595,24.3842365 C70.2753595,31.5763547 65.2095877,40 54.6477469,40 C44.085906,40 39.0103547,31.5862069 39.0103547,24.3842365 C39.0103547,17.182266 44.085906,8.76847291 54.6477469,8.76847291 M54.6477469,31.7832512 C58.4128476,31.7832512 61.6009588,28.6600985 61.6009588,24.3743842 C61.6009588,20.08867 58.4128476,16.

Chrome Cache Entry: 929

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8747), with no line terminators
Category:	downloaded
Size (bytes):	8747
Entropy (8bit):	5.150373446229448
Encrypted:	false
SSDEEP:	192:RcYRBERBIhl0Pl00PkijkiTaJhlhF+pWS/p8ra0t/p8Xay:RcoWfaBlSWraSWXay
MD5:	A4E0D1858E7F9E6833A66DB48963C526
SHA1:	F6F4816D545C1448648E39AC5114C8FB42B4888D
SHA-256:	24041EF0F7FC125917FAA22B49B02B7B945025914D9B202DB879BCCC2DAC937B
SHA-512:	FFEC43C31DEC3D864F6DC9FD38F9D644CDEE189F0AD663333D5986E0AC2325481A93FD3607B380CA73E685AB43A9CB66EF3598FE0CD004CF9BA9BC1B6BE0FE09
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/en-bundle-offer-templates.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{63:function(e,a,n){var i=n(64);e.exports=i},64:function(e,a,n){var i=n(17);e.exports=function(e){var a,n="",t=e\|\|{};return function(e,t){n+='<div class="swipeable"><ul class="card-list clickable swipe-wrap">',e.recommended_products.products&&(function(){var l=e.recommended_products.products;if("number"==typeof l.length)for(var r=0,s=l.length;r<s;r++){var d=l[r];if(r<2){var c=d.cpa_cta.label?d.cpa_cta.label:t.getHelp,o=d.cpa_cta.url?d.cpa_cta.url:"/products/"+d.slug;n=n+'<li><div class="recommended-brand"><img'+i.attr("src",d.content_type.icon,!0,!0)+'></div><div class="recommended-details swipe-equalize-height"><h3>'+i.escape(null==(a=d.name)?"":a)+"</h3><p>"+i.escape(null==(a=d.description)?"":a)+'</p><a class="more-link help-link infor-event"'+i.attr("href",o,!0,!0)+"> "+i.escape(null==(a=c)?"":a)+'<span class="ah-icon icon-cta-arrow" aria-hidden="true" aria-role="presentation"></span></a></div></li>'}}else{s=0;for(var r in l){

Chrome Cache Entry: 930

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2156
Entropy (8bit):	4.343163424788496
Encrypted:	false
SSDEEP:	48:fIB3UxpqdZMrtmQbfjyFHbx2aIb4X+HXR+bGVMG:edZ4JXyFHl8CGCG
MD5:	058EB33A1D275F055A3C550F0ACE4820
SHA1:	85C714A4DC82B10A67A6106CF5748197C1F555E5
SHA-256:	438F9CFD06E96007840E8E7186BD068A00E90FFA7258F7C1DDC3BD111DEB1362
SHA-512:	276C7E3CD14C7E7711A3616866115DE71B21AF1CBAD238695D42983651981A8878F26C0C208219831D1DBD65D4C1FC789D7E75C249E7743ADBD7EB5B88189550
Malicious:	false
Reputation:	low
Preview:	<svg width="65" height="50" viewBox="0 0 65 50" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1_337)">.<path d="M62.6777 0H47.2015C46.1321 0 44.7655 0.581905 44.0335 1.34643L41.9752 3.42024C41.675 3.72357 41.678 4.21417 41.9814 4.51441C42.2816 4.81464 42.7753 4.8131 43.0755 4.50976L45.1401 2.42667C45.5811 1.96702 46.5639 1.54762 47.2015 1.54762H62.6777C63.1033 1.54762 63.4515 1.89429 63.4515 2.32143V17.8735C63.4515 18.5095 63.0321 19.4923 62.5632 19.9426L40.7711 41.566C40.4601 41.8615 39.9432 41.8538 39.6414 41.5536L35.5433 37.4539C35.2415 37.1521 34.7509 37.1521 34.4491 37.4539C34.1473 37.7557 34.1473 38.2463 34.4491 38.5481L38.5472 42.6477C39.0022 43.1012 39.6058 43.3302 40.2094 43.3302C40.8005 43.3302 41.3933 43.112 41.8529 42.674L63.6465 21.0492C64.4188 20.3079 65.0007 18.9429 65.0007 17.8735V2.32143C64.9991 1.04155 63.9576 0 62.6777 0Z" fill="white"/>.<path d="M25.476 6.19043C24.4066 6.19043 23.0401 6.77233 22.3065 7.53686L0.650687 29.4078C-0.228361 30.3

Chrome Cache Entry: 931

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23134), with no line terminators
Category:	downloaded
Size (bytes):	23134
Entropy (8bit):	5.187137486669819
Encrypted:	false
SSDEEP:	384:uJFMv7rLHnQv7hcqjbnb4Pdt/ixve/0za/2g:uJgrbnQv7iqjbcPdt/ixve/0zG
MD5:	C8731BF4AAF1ED04241D458B37188119
SHA1:	69F43DBE827A1FAAEDB6896643EB0BCAFDED13AD
SHA-256:	15FBD8A72616B1DA650F184C477AAAD9B14B951E891343D21FF5FFD202C7EEEC
SHA-512:	A4B1F1750E2D6DE292D459F33CE49AA44BFD603F45A227BF567EC6A25EE5813D91420C7847ED89CB86BF2FD6C3A0A4D80C28A3E59B4F7DF02BE3DA7C0B321E94
Malicious:	false
Reputation:	low
URL:	https://products.gobankingrates.com/versions/4.60.0/static-css/main.css?d5eec0337058d8269397
Preview:	.ad-disclosure.sm-disclosure{letter-spacing:-.025rem}.ad-disclosure__modal{color:#333;font-size:.75rem;line-height:1rem}.ad-disclosure__modal.modal-dialog{background-color:transparent;margin:0 auto;min-height:100%}.ad-disclosure__modal .modal-content{background-color:transparent;border:none;padding:.75rem}.ad-disclosure__modal .modal-body{background-color:#fff;border-radius:.5rem;box-shadow:0 0 .5rem .25rem rgba(0,0,0,.1);padding:1rem 2.25rem 1rem .5rem;-webkit-user-select:none;-moz-user-select:none;user-select:none}.ad-disclosure__modal h1{font-size:1rem;letter-spacing:-.015625rem;line-height:1.5rem}.ad-disclosure__modal h2,.ad-disclosure__modal h3,.ad-disclosure__modal h4,.ad-disclosure__modal h5,.ad-disclosure__modal h6{font-size:.75rem;line-height:1rem}.ad-disclosure__modal__backdrop.modal-backdrop{background-color:transparent}.ad-disclosure__modal__close-btn.btn-link{background-color:#fff;border:.0625rem solid #d6d6d6;box-shadow:0 .25rem .5rem rgba(0,0,0,.15);color:#767676;cursor:

Chrome Cache Entry: 932

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 933

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20625)
Category:	downloaded
Size (bytes):	22991
Entropy (8bit):	5.330261443106104
Encrypted:	false
SSDEEP:	384:8LxT0rQ6GV4tv0lMGg2geQtfnHN5pOEAYfhO2Xz4wDQjZvy99KQWwY4RXrqt:oRcMtCGsOpYfkKz4wDQjZvy/KQWwY4RY
MD5:	E9E47212F804B81F93094213AB288D88
SHA1:	9392227A9D0AD5EF9BE17D71789D00836A15D153
SHA-256:	2B0536393D41C29237267D45F2E0F38231580FB312F812EC0614B3ADBAF50DD6
SHA-512:	6FC04AF5D7BFD4C5057A246E22E946F186FCB06D53776C1BBE42D520077BE9A271F770349DAAE8AE1AD441814CB542EA828E51A6AE996CA23A183D83598B4D72
Malicious:	false
Reputation:	low
URL:	https://hb.yahoo.net/checksync.php?cid=8YHB8F956&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":"e","coc":"NA"},"cs":"1","lookup":[],"ussyncmap":{"disable":[]},"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds","crt","ayl","bs","ui","shr","lvr","yld","msn","zem","dmx","pm","som","adb","tdd","soc","adp","vm","spx","nat","ob","adt","got","mf","emx","sy","lr","ttd",58160,"mn","tlt","pub",55953,58301,"idx","dtm",57926,58267,56551,58259,58601,"ctn",58280],"ngGroups":[],"bSize":1,"time":7000},"csloggerUrl":"","optout":"optout","cslogger_host":"lg1.hb.yahoo.net","ck_del_sld_tld":false,"gdpr":false,"gdprconsent":"1","cookieDeletionList":[],"ccpa":true,"ccpaconsent":"1","info":{"domain":".hb.yahoo.net","cid":"8YHB8F956","itype":"","pid":"8P

Chrome Cache Entry: 934

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	303
Entropy (8bit):	6.851067234343195
Encrypted:	false
SSDEEP:	6:6v/lhPfB2pJIMfJM/LTCaXPP1t2RJSsZZ1Ags8hRrIJ/E5zJ+8yBOGf2Rzq2up:6v/7YJVJ2LTZ/PnkSGZ1FX3rTJJrpGkg
MD5:	7D2BE088AD917300C315484257E2B54A
SHA1:	FCADE8CE8CF0A59D69CD3C7B1FA6EB0690C04128
SHA-256:	05A27A5D181998C2623C3DF03D385437AFBE893C313F0AA9DC82A652B0B5668A
SHA-512:	C77D056E4E8E7E5B9CF2DE7C3ECA1CA6DB24852D8893894A0557BBFBB050266794EDA256FC482460538B770618F828D0A6A702A4B5FB6ABCC62F43638F475C53
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...KPLTEGpL.)1..$."*.)1.)1.$,.)1.)1.)1.<B.^c......................NT....08.......w\|.9......tRNS.....1.....slh....IDAT..e.... .D.4....M.._Zhk.....cD......ie.....E..^..i+........^.....joL...@G.8.5.h..O..`hy\@,.CN..Z.h.....G.m.Xu#f}+.j:.H...`..r...O..Q&(.0....IEND.B`.

Chrome Cache Entry: 935

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1415
Entropy (8bit):	4.912573907292441
Encrypted:	false
SSDEEP:	24:2d1NFLaZ6geaxM2qqwR2WhkGOwaeQp4eElBesUWzRhsc8PwO/TTMEz5XC:cHlSnwAWOp4rlg4zAPwOfMEFXC
MD5:	3FEEB979FCC6F979D125973CD551E33B
SHA1:	3A195B726A687CD729AAF0E8EDB2733978D59CE7
SHA-256:	7C519F87AADAA1A1A706D44A5ACB10AACF73AA548C9420C4B3BE28F0FF6636FD
SHA-512:	5DEAB9B537A70D90113BCD00FA8915309573CDEFEBC3DD74D87E3AF54C401EA4770390A2446AD69E6F7B9BFD9158C867FFFE7EF6AF3E271180E19438CDB2993D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="18px" height="18px" viewBox="0 0 18 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>x</title>. <g id="Design" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Desktop-T1" transform="translate(-1027.000000, -251.000000)" fill="#828A93" fill-rule="nonzero">. <g id="exit-intent" transform="translate(375.000000, 231.000000)">. <g id="x" transform="translate(652.000000, 20.000000)">. <path d="M9,7.18473244 L2.18828618,0.373019192 C1.69585764,-0.119409303 0.879429128,-0.123266445 0.378000592,0.378162048 C-0.125999373,0.883447683 -0.124713659,1.68959041 0.374143449,2.18844748 L7.18457157,9.00016073 L0.374143449,15.8105882 C-0.119570802,16.3043024 -0.12214223,17.1194452 0.378000592,17.6208737 C0.88328627,18.1261593 1.69071479,18.1248736 2.18828618,17.6260165 L9,10.8143033 L15.8117138,17.6260165 C16.3041424,1

Chrome Cache Entry: 936

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	102656
Entropy (8bit):	7.998319833391219
Encrypted:	true
SSDEEP:	3072:W179hYc+B/IqxhyT5TiFAdrkmyZciLOGd4BiIBM18o:M79hYc+hekmYcpGdw+t
MD5:	E50C5490044142C5E072CC8B5ED665B8
SHA1:	C6C6347E955E6B0265DC277121E36DDC98A534A8
SHA-256:	DB6CFDD2A355A0A2F2E4970AAE9196106518D2E5A88ED03D9AC9CDE691CC36C7
SHA-512:	C3BB1DA7959F512EAA888CCA19BEACF58D4B8DB4FB6D1439ED98909610FF96556166235C5529DDDE480D2422ECA27BD24D0D3876F49A4446E4ECB8CE8F4DEF21
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/3x/segment0.ts?akamai_token=exp=1709530988~acl=/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e8b40a2463d355aee79ce16d02f266fb895828cb22f6586733f56f035b643b4a
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\.h.\..f.".U.>$.......pO.....EnzE.q..h....d..(.\|..5.....0!..^x...YP..o.+..."Y.x.O...;..zn......3uv..U......yn...C..9a/...YB~..oWAa...!....r......9..n.....~zk....<F.H.OI....P.i...+2-.........7.$.C.......+~8..k.iw.2....L..<..W....9.....v.`......C........W....se......P."r..9.......dat.]..:.^..7..3W.'R....N..k..@.QA.....r\|....&..AA'J......h.....@..bWqT.....!S..c ..R....YK.K]+.%7....E...?.D...4......u..+.%O.k.2....m..l<~J.W. ....Z....+p..H....t.v...B...\|....\h.6R.................T9m......:AI......V.;2q_x>.@.A}Mc....3.G.j...[.).\.A.....b-Ut.#.....'....U.%.......{uV.O.(...C.......#........>.5..7bd.T'..X..1../Y.L....../m.).j.S..*....Pl..Z... ..(L%......]..h.#A..c.o.[.]!...F..........(D)?..4..;@w...r..m..J...crX9...C...".y.^\|8Z..!...cR....fXH...C..........C.Fg.s..).$..#j

Chrome Cache Entry: 937

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 938

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1208)
Category:	downloaded
Size (bytes):	12868
Entropy (8bit):	4.432170528779706
Encrypted:	false
SSDEEP:	192:FNKppFhprSi1lsmLffOmyL4bwQcvh+rPceSj4jn1u9fSQ0gOd2HelPEcP142lz14:FNKjFhQiQS1KudwelN+2yk5oEw
MD5:	4ED705906C1398B766339C87C94517DC
SHA1:	69C5BE0C72C8B43A8ACB273CDC7D20D7C63C44DF
SHA-256:	89455FDE2034524A07FD0303EABC74517C250704F0CCCC9B134F99290D4C130F
SHA-512:	602FAFC023DBEC818F8333762A6D7666C6D3B018E74B3A1DF4C51ED412E70208762D16E704C9D0396B19F101FDDEE5152D8C2BF5D3FA51D798332A14B8B7230F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/jk/gtm/gtm_ns.html?id=GTM-NB4W2NQ&cat=ad-free-mail&u29=aol&u9=ad-free-mail&u59=mbr_rusacqdsp00000691
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset=utf-8>. <title>gtm_ns</title>. <meta http-equiv="Content-Security-Policy" content="default-src 'self';script-src 'sha256-R5cOQQv0ir0+YzwPRmelzz0a8I378cXU6dJv+THqQ4E=' www.googletagmanager.com https://www.googleadservices.com;img-src www.googletagmanager.com https://events.xg4ken.com https://beacon.krxd.net https://pubads.g.doubleclick.net https://sp.analytics.yahoo.com https://5237.xg4ken.com https://s.amazon-adsystem.com www.google-analytics.com https://*.rfihub.com https://live.rezync.com https://secure.adnxs.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://trc.taboola.com https://www.facebook.com https://analytics.twitter.com https://t.co/i/adsct https://ad.doubleclick.net https://ext-inv-cdn.presage.io https://adservice.google.com/ https://alb.reddit.com https://beacon.lynx.cognitivlabs.com https://geo.yahoo.com/p https://www.emjcd.com https://pix.pub https://ade.g

Chrome Cache Entry: 939

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33589), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	58753
Entropy (8bit):	5.26167812703519
Encrypted:	false
SSDEEP:	768:y5B9KXqe7mdOgKY0hXpXVG8FoAKRXSdRKftld0VTScQI8rdFj8:EB9K6d8gghXnyXSuVld4z8Z6
MD5:	A9C11221224C7869C6B916618D892612
SHA1:	39C436EE6D2AFD6F851840AB4673C56CE0372D3E
SHA-256:	7B48A74FA0F94D83AE6D60C772F5E7AA66E7BE1B63CCF223CA14E34D3D7B0D22
SHA-512:	EA05BD1555D819AA35985D16EDA15F9A3805DA01F192156157739E30CE2A22D2888F8E4D1A2ED7A3FC2739CEF848B7EE882A5A628B3657E27AF979FE8F0EB09D
Malicious:	false
Reputation:	low
URL:	https://hbx.media.net/pubcid.php?itype=HB&cb=window.advBidxc.mnetCoRtusId
Preview:	try{ window.__mNPubCidCB = window.advBidxc.mnetCoRtusId ;/. This Source Code Form is subject to the terms of the Mozilla Public. * License, v. 2.0. If a copy of the MPL was not distributed with this file,. * You can obtain one at https://github.com/conversant/pubcid.js/blob/master/LICENSE. * Original github code https://github.com/conversant/pubcid.js. */.!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"s

Chrome Cache Entry: 940

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1725
Entropy (8bit):	7.676188922921497
Encrypted:	false
SSDEEP:	48:16LwRduIgejS5BbEObJAHkJj+dqWfk7AN8dfJZH:16LIuxMS/1bJAcCdqqu5
MD5:	05A539397B4DC91B238A9F42A747D792
SHA1:	377702E784DDCF9B9D5AE24FE29EA698B4C1F0FC
SHA-256:	DBF71AE2DB875E04E610C4464EA23408141D9186EA113FE405BE4E7CAD82D04C
SHA-512:	D6E3E7B94D93963714EC36B61F5E580F21114C2517403D4AFE14B5D2CCC086781709F1763769925B5FEC4334CBEBD5425577B0C6B1DA7963ABF8F47D7BAE358F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL............iw~................................................n\|......s........w..cpv.....y.................t...........o}.}.....................................m{..................................Tck......}.....................q.....\krw.....q...................................s..z..........{................u...."....}.Xgn.08..$2CKp~.>NV9JR..%r..^mt6FNK[cIY`@PX.)2..#CS[.%..!......,=E..7w..BRZdry....,5 2:..(\krO^e8IQEU]/@H9..8HPZipP`g#4=Vel+<D.+4N....Rbj."+...->F...%6?o.........-..A..H.......4EM...v........(0...eszGW^...t..............m{............<LT->G............M\d1..y...............".....\|..g..n.......'.............U..@..............)..........b.........;C............_qzr.......M..Sly............Y..............N...mtRNS.\kGL.'...w..3.._..}n..4..%D......T.sz.a.H......=........h......X.yB..l....f......;........Y......P....]......IDAT....eT.a....X..a.vwwwww{..~.d.C...%0.n0........N.c..?.B.r.

Chrome Cache Entry: 942

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	733
Entropy (8bit):	5.0890758327857375
Encrypted:	false
SSDEEP:	12:TMHdVZnnlRR/KYcYSF1+4HkpJqeaxM23pXqFwt5viVHrDdz6:2dznnbRLkFEvqeaxM23p6FwtAVLo
MD5:	F456007284E4510464D9DFDDABD3FB0E
SHA1:	3599ABDE3AA91ED0FF10EA647993335D9266FC4D
SHA-256:	C25F3A57F7858DE738E2F3CD49AE322E7D02D70484CF7B6DDE7DE302EB033AA8
SHA-512:	A2DC2A32B68DC7A9ED3184C6B122EEA834590B95FF69CF1EF7397A1700978992B11E9E4E5FFF3740AB8EC851776F6F43C45B0335322EE2AED21CADEF5E6469B1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/checkbox-unchecked.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 59 (86127) - https://sketch.com -->. <title>Tick_Checkbox_No</title>. <desc>Created with Sketch.</desc>. <g id="Account-Access" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="User-Name_Desktop_01" transform="translate(-24.000000, -336.000000)" stroke="#B9BDC5">. <g id="Tick_Checkbox_No" transform="translate(24.000000, 336.000000)">. <rect id="Rectangle" x="0.5" y="0.5" width="15" height="15" rx="2"></rect>. </g>. </g>. </g>.</svg>

Chrome Cache Entry: 943

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (692), with no line terminators
Category:	downloaded
Size (bytes):	692
Entropy (8bit):	5.456906732001199
Encrypted:	false
SSDEEP:	12:C3LTm9wyoS3D/13iRA3WhS3D/13TGxz6LphS3DJ313Z2MUahS3D/PkDp:CO+yoS3D/1OUyS3D/1DG9SS3Dh1JTvS4
MD5:	96EA3B620495B6EFD25F5B5257F829EB
SHA1:	44465D20A92753E21EC8B534258C82ED163FDABD
SHA-256:	53B110ECA97B7551238AE921E3359EE24866DDE60679C755BD002AC47C87B66E
SHA-512:	0B06CD9570892226968335840494DFA242635D764057845938DFDA0174F982D2CA7048815892DCC9B631D50CAB13EA045F36E3586F7EC88CCD624DD6561C77C4
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=849114&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 944

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2132
Entropy (8bit):	7.864903593053358
Encrypted:	false
SSDEEP:	48:+qdd+cpZ8nfu4zIekwgH5auRUY9tB2yY73V+OofHmJ:hdfD8n24zI+vlY9tAy0cmJ
MD5:	D489DF4119835883DF2F9A9D101126A0
SHA1:	4B9AC413FD7547B1934E19D9499906D8B2AED500
SHA-256:	65BF5CBCCFE011B9DD6C1220027BB3962974634BBA87CDDE91C18FD11E73100D
SHA-512:	70E080FE808BAD231BC487CE5EFB4F8CB4489B94ECFC182F65C951D578ECEAD4D1996C134AA9E4CCF1C794F78C38692B4989909413AFDC08008633FF041A00C9
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6zBU_wJNcAFiGnGb.42RrQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fwizards_wbg.png&client=76f99bdb8f78cd44cc0b&signature=834585294cb63f27e5a56fca336a13289db2965b
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................+\.....7..........-]............................/_+Ow......'Lu....!?.......3b.1a.,\.4c.7e.6eg...Zp.<V....?k...Hg.Dc..=j......z............u.....i}..8/Rz.(E-Qy.G................An............5cLk....@`.9[...............;\....Zu......Vr....Xt.........9g.......f...........h........7Y.8Z.........!Gq?_............................)Mvd~.....Ro..;i1T\|.Do......Nl..........t...%B...............Jh.Gf....q...}...aw Ep...Ur.j............\|........$A....3O..........8e.Cn...%Jt.q.5W~.........k........2b$Is..........Dd.............r.............{.........dy..............d~....Bb...............n........g{2T\|.....Tk..w........8R.\r..=...i....:.F_.@Y}5.O... tRNS.....S....z.Z.....-.+.........v.w....IDATH.Vw\.G.>@z....~....@.A@....4(..R..HT,x.h..5..5..5...L2s{.;..3.....vg.\|3..dW.{.I..\.u..<..F.u...s@.....pv..O..6*..ya..w.B'.U

Chrome Cache Entry: 945

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2004
Entropy (8bit):	7.682667849286243
Encrypted:	false
SSDEEP:	48:Yr2rAN8HmgcrDGfz4JF2rGSe6eM+LBuRxVFimghYIj:Yr2kBPWzQ2BerTmxVFiSIj
MD5:	232BFEE11DC835E60363E3D23A3ABF1A
SHA1:	FD00CA0DAAC48BD8D4FF5873EBF9930243D7C110
SHA-256:	D1E93E3E75F688EDE70BF8CDD0751A762F44656C2D51CEBD1CF8BBA28F92FC47
SHA-512:	D97B4AB6F965E504E0D087A0DF1423D6589C5908164AABBE9F9590BD8A872313BEE08244B6327761587FA1BE3D3FFF2FA0BE42332DCE2DBCD8A20113CD383564
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F51_f4QnCU8r4D1F_7XPNdQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fbucks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b6b15c2623764f5bc9deea68bb4e35729754770
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.................................................................................................................................................................................................................................................................................................................................................G........K .P%.W-.I.5kC?rKM\|V#_6..}&a8EvO.Z0].n.L n.o.M".R'....Y1.W,Q~Y.P'..~"^5...U+Y._.\2.U.\3.J..H.7mE.P&.K. ]4FwQ+d<...KzT.T)=qJHxRw.vm.n.Z1=qI<pH}.z.O$k.l.......Se.vW.i@sLs.s..2kG}.{......]7_.c\|.....i.k......CuNK}^........I\|]BwV...m.}.I..........(d?.Z2c.g...\.n...N.a..........~.{9nGf.i.......N".........k.m.........p.q...G..S(......v.u...V.\r.rX.^t.s...z.x3jB:oG...\|.z..}\|U.....~tRNS....~.^.v%...M*j.g..3.:7..GK......Z....../...t.....U.14...E...=...p...'..d.f....O..8.r....H...?.$......B...]...........w......IDAT....c`.....L..X5.m...{.$mSs5Vm...m.m

Chrome Cache Entry: 946

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65321), with no line terminators
Category:	downloaded
Size (bytes):	119287
Entropy (8bit):	5.536029160563187
Encrypted:	false
SSDEEP:	1536:KyQWTY8Hh1I0D5nPijPhbG8BC/qy5bS7QVK:cWTP/tiL20QVK
MD5:	6C49D081F68C8272B110412C4AD0418B
SHA1:	69EC46B7BDA8C29B9EEB9CD12923ACF03AFBCE17
SHA-256:	B8D80E41EFEEF11FF4E6D4F1BFDDF79D8FC08DFEFFC7492FB6612FD1EB83EE43
SHA-512:	5B05F351A0DFA46EE20A3E99651CA100027B3B6E057B2E6BCA171DAC40B9F618AC514CD55E3053FBF42B63F8A7D3F74AA7D692ACAEDAB85437CE9097A35A78D9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.3.9/pframe.js
Preview:	(()=>{var t={1556:function(t,i){"use strict";var e=this&&this.__spreadArrays\|\|function(){for(var t=0,i=0,e=arguments.length;i<e;i++)t+=arguments[i].length;var s=Array(t),n=0;for(i=0;i<e;i++)for(var o=arguments[i],r=0,a=o.length;r<a;r++,n++)s[n]=o[r];return s};Object.defineProperty(i,"__esModule",{value:!0});var s=function(){function t(t){void 0===t&&(t="anonymous"),this.name=t,this.l={},this.u=0}return t.prototype.destroy=function(){this.l={}},t.prototype.addEventListener=function(t,i,e){return this.l?this.p(t,i,e):""},t.prototype.addEventListeners=function(t,i,e){var s=this,n={};return this.l&&t.length?(t.forEach((function(t){var o=i.bind(e,t);n[t]=s.p(t,o,e)})),n):n},t.prototype.on=function(t,i,e){return Array.isArray(t)?this.addEventListeners(t,i,e):this.addEventListener(t,i,e)},t.prototype.removeEventListener=function(t,i){this.l&&t in this.l&&Object.prototype.hasOwnProperty.call(this.l[t],i)&&delete this.l[t][i]},t.prototype.removeEventListeners=function(t){if(this.l&&t)for(var i=

Chrome Cache Entry: 947

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (861)
Category:	downloaded
Size (bytes):	923
Entropy (8bit):	5.25079777978972
Encrypted:	false
SSDEEP:	24:QWXkxBM60SF5OICnTJLa5YW+dprupeX7CXlo9IGmf:QWUxBF5lC9LhW+dpCu748Iv
MD5:	9B42494665ED9AC86733DA512D8ABAB8
SHA1:	DDE26438F6AFA65E94A8F747FBDC375AF0A5F83A
SHA-256:	DC2D415222CC51181C4DC813BA9106B453F9C1E8A861587DAFEFB45DEAA6E071
SHA-512:	D85A207B823702CB165446121736C3DDE2F034486D507EB1D01A9D624CCF5B74B2EE6DC64125D97A4A2F73A8956E3176C2092AA7C90740894EFF5C450DDD9F9E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/omp-static/marketing-pages/dist/1.0.3681/vendor/libro/comps-template/js/bmsm.js
Preview:	/! For license information please see bmsm.js.LICENSE.txt /.this.LIBRO=this.LIBRO\|\|{},this.LIBRO.bmsm=function(n){"use strict";function t(n,t){var o="function"==typeof Symbol&&n[Symbol.iterator];if(!o)return n;var r,e,i=o.call(n),a=[];try{for(;(void 0===t\|\|t-- >0)&&!(r=i.next()).done;)a.push(r.value)}catch(n){e={error:n}}finally{try{r&&!r.done&&(o=i.return)&&o.call(i)}finally{if(e)throw e.error}}return a}function o(){for(var n=[],o=0;o<arguments.length;o++)n=n.concat(t(arguments[o]));return n}n.store.once("SAVINGS_PLAN_DATA",(function(t){!function(){for(var t,r=[],e=0;e<arguments.length;e++)r[e]=arguments[e];n.store.debug&&(t=n.logger.tag("bmsm")).info.apply(t,o(r))}("Handling incoming savings plan data: %s",t),"banner"in t.bmsm&&n.dom.applyFunction(".bmsm .bmsm__content",(function(o){o.innerHTML=t.bmsm.banner.long_text,n.dom.addClass(n.dom.getClosestParent(o,".bmsm"),"bmsm--is-active")}))}))}(LIBRO.common);

Chrome Cache Entry: 948

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2058
Entropy (8bit):	7.693955237627686
Encrypted:	false
SSDEEP:	48:rHNIWaW0UOi6P07xPgH+zGA4INM4oEF8DiaCCgMu59:rHNna7UOnP01BiFIi4/UijXMu59
MD5:	347467D488FF05AD50B871325961E71D
SHA1:	F149355185F7C53BE9E2A68881F0CD4C73DC8898
SHA-256:	D44854FE8E0F29260968FC5D780E35116FBB83A1FF92BD288C1368D5FC650EEE
SHA-512:	1B82F66F571DF567B727CF1CA88164B39783FC1C922463B539C2C8139C4803CB18CEB849BDAEE10C6350CF19DCCC487D839478F160E4A7D281FDA21363A027AA
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FgEMEg05RG7EAyPYgeoCKEg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190318%2F500x500%2Fsuns_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1ac189c890b767dc5ba2fede62df019e6086e563
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL................................v...........z........................Q..............p..b..\......y.........................................................e............q.........m.............v.....r.....{..k.............j.........X........................................................h....................................` .Y..^... ..(..$.` .."..7...i8!9)"..D<+!&#"..1.....H..!..W.K.. "##!..5..;.l..t..R N0 .."^5!.V .@![4 .K!.G!.R .\..I!..._ ..@.Z ..,.^..Z.4*....O .....L.]..B!.&"R1 .....{......r..N!.Y...v.U..]..[..i.vT.......U....^.....".C!F-!.._.L!...M!I.!.{.......n..@!,%"0&".b ]H.b6!..q;!l9!B,!\|>!.T V2!.w..]..Y..X ....!&!.\|..d..[....H....N..P.U>..Z.e7!gE....v..c.......X ...f...e...a ..4}L .w.y>!..A.m....xtRNS...6......&...f._?JvZ..I.S...........;....(\|..."3..L`..j.....e...9.........N.m....,.......n.....Z...U..............=.<...AIDAT....u\......1x78.!( .)g`..`...q}.y..}~..+`....

Chrome Cache Entry: 949

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.21704049178157
Encrypted:	false
SSDEEP:	3:CUdwltxlSle:Jle
MD5:	6C72E040039C5A29D2710A6E6F331C13
SHA1:	77A2919F56AFB1510DAC650D9682E50CB4866793
SHA-256:	9C41BA408EFAF3A7A36099370BC814E38B0AFD42229FA9E0E6040740620C85C0
SHA-512:	6A1A840CED2AB51B100B6D781D52CBB2453125986682428B2E44CF5C180971B90811D629CF22AA56944FC0F4F51B484B1655FC7AF5C2E908AEC337F95AC7572D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 950

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1991
Entropy (8bit):	3.8123462766897567
Encrypted:	false
SSDEEP:	24:YRZb2XoQXKcFI1kJkHI8LXbBnrjmKfbqEEG:YRZXQG1w6XvmUnEG
MD5:	2165DFAD04FA42A17B7A4D4A3E5DB7BF
SHA1:	31E57CF43133ADA4C069ADFD418D0ABF70F39B9E
SHA-256:	701658F6509CF1CB7E3B1EF3E38874A983F22C7AC1AAB8E5B77DC11F96B49547
SHA-512:	47121AEEEE658768E0ECA801F9F3CD73CAEDD160BA5FF58A2320401809C0CC7417AE68AD54310FF2BC58C2C963C7524BA2F9C7D0538FB9A6A72E447AA1FCC14C
Malicious:	false
Reputation:	low
Preview:	{"identifier":"help-central-usaol-navigation-rail-unauthenticated","content":"[\n {\n \"id\": \"products\",\n \"label\": \"Products\",\n \"url\": \"/a-z\"\n },\n {\n \"id\": \"shortcuts\",\n \"label\": \"Shortcuts\",\n \"subpanel\": {\n \"items\": [\n {\n \"type\": \"link\",\n \"label\": \"Reset My Password\",\n \"url\": \"https://login.aol.com/myaccount/security\"\n },\n {\n \"type\": \"link\",\n \"label\": \"AOL Mail Troubleshooting\",\n \"url\": \"/articles/aol-mail-troubleshooting\"\n },\n {\n \"type\": \"link\",\n \"label\": \"Minimum requirements for AOL Mail\",\n \"url\": \"/articles/what-are-the-minimum-system-requirements-for-aol-mail\"\n },\n {\

Chrome Cache Entry: 951

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x100, components 3
Category:	dropped
Size (bytes):	17102
Entropy (8bit):	7.921838134374089
Encrypted:	false
SSDEEP:	384:oyvb3JHytkaOxl4sJgXIHVDesYA6087L3JqQjBZGW+nStz0:EtkaOeLCtzGEqZGitz0
MD5:	4A5483A1A509AE238958EBE994BB2DF9
SHA1:	F6726E9427F4F79FFDC1BD49869DBAF04DDBFF84
SHA-256:	FDA19FD3BC838354E99DCFEB18235CCE6C7944C38E3658AAACB4E322726D78F0
SHA-512:	8FF18173D3F81DC33744A4CDDE1790557B8852947E9FF2FDF873BC30C297049897D78AEC4FD3AC4F11D407EFB622E0A41B87B0AC67D7112DA71FC9544C5614B2
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................d...........................................................................................?.).............................../IJ....$..............................t.&n........$.....$........$8..............v....x....Q..Q7g`......*..!,.$.03.2..5.lo;.....Y.Y.t.......t.......}\|......#...W..G.._...XGJ.7gb..e0.DV.G}c..;.....>f...............D..`.r..zH..........:h.l....9C.......e..k9..i.U......vYk.MFK.2..}.a.N.:..K...\/w.F..&P%$B.b$.Js....../.....T%.?>.._.9.c.a\|......xy.....-...i.1.....q_/......o.M.\M.....\....P.k......k...-....t..#,j"n...-.mS/...u?.{...-Un......{.k..G....6..:...\|.\|...m..o..T.C...}.....}..v........"G..Mfx........}..;.{,....<g>.o.~qB......}...?.;..'.v..r..........K....{.{....}.C.t6..w......A.qo/.8...3JgU{.4.A +..._=.g..2.o)... ..f.u..r.....)...V......0......g@_+...v...F.......

Chrome Cache Entry: 952

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=1000009&c7=https%3A%2F%2Fhelp.aol.com%2F&c8=AOL%20Help&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508431378
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 953

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1619
Entropy (8bit):	7.3339603715310115
Encrypted:	false
SSDEEP:	48:s8fMduisHPCXcIoGlwXO2MyBBwC31qh6MGBCWF:s8flNIoGCMyBBwC06hvF
MD5:	76F0AF63BA54FAFDB24C12012A4865B1
SHA1:	97AB3F8580BF3940DDFC53617A89E3BE411A8771
SHA-256:	CCA255F7548BA7A9FC1DF5207465DAAF2361C9A69F79D3C8B8905A8819894F16
SHA-512:	0A8004823BB3CE7BD59AD863E76D92203A38EE5CE0E1C5B613213C2FC7AE154C32A310DA0764BBA796D57013BE9FEBE12021D40B941EE77082243AFA2CAD1B30
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F......PLTEGpL.i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i.....i.R..x...............l..j........k..i.....s....&x..m..p..........,{.7........$v......................9.. s.}..[..g.................3..U.....C............o.0~....J......o..r.f............../}....u........=..k..Y..?..............b........M........"u.S..O..^..;.....i...........d....................{...........n........*z.......E..5..Zk.j...3tRNS.;..w...\|H....h.....?[j.2.........7M&.... ......-......IDATh...[.A...E..5.L;.:.SwH.PT@..R...2.#K;......../m.a.vy..w~../....~.y.Y.Y.(.\....$c.>....b....b}.L.....jJ....x.....A....C...I.O;.U.8... >OH...<d.....s...c..e.Li.....p....B.....#K@i....J.r....%..2.........P.h......l..j.0F7r7E..o..=..`B.W#....otY.......q6....p.l..$>w8..`....G,.&1>.F:....<.k_v,Q..Q..;..p.....%:@k....i.c.K.\.Q..!oO...+Z.>p..G.0.B.....\..p...V.x..WzzQc.F,..T.g..n#.....w

Chrome Cache Entry: 954

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 955

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2420), with no line terminators
Category:	downloaded
Size (bytes):	2420
Entropy (8bit):	5.735874039227183
Encrypted:	false
SSDEEP:	48:C2BqmbV2ndHVr6Vm2Bqj2Bqhybj/5CSnVCvVaS5IVjAGnydNnUq:C2BqmJ2nbrwm2Bqj2Bqhybj5PVCtaS5Z
MD5:	E7530DA4D61C4334F0C72C63B6C2647D
SHA1:	54C24B452AD1B5EA01DDBFAE45EC445B5E5836D7
SHA-256:	D68BECA8262CAA16B446CC4C44956F4EEB592431AE29444115D58CF3B613C634
SHA-512:	07B68B163C8D1D0678488FA518DF0A3A9662D672A3B51ABA825400896CF921E40157618CECDF6106B0C764F8F996839D6B2E651BCA77613FBDEABCF46952E0F8
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=75394303&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=UoaBawejSDGCz5KCfddEDg%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=5286816B-07A3-4831-82CF-92827DD7440E');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 5286816B-07A3-4831-82CF-92827DD7440E&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=5286816B-07A3-4831-82CF-92827DD7440E&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NTI4NjgxNkItMDdBMy00ODMxLTgyQ0YtOTI4MjdERDc0NDBF&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 956

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (435)
Category:	downloaded
Size (bytes):	71322
Entropy (8bit):	5.01910926584687
Encrypted:	false
SSDEEP:	768:O5eyA/54a9eALzFnC8yaB3v5J7OlFwSKBQNwlLIcdJBkbErYAJ5hQ4FkoniLhV8Q:O5eyAV5MaB3BJqlDxNUYN4eouIM
MD5:	69BDF7A3F646FD845BE9E064668B8F88
SHA1:	4E4D2AC16A5BCF1F4B81196332511C0C8EC52F1A
SHA-256:	5A7A69A6A177B7DF65824247CC5C769C686B4A0F2935D32EA172850AEBD4C621
SHA-512:	7285F06854E0E106561D47AEBCAFED0C278514F927596E1093AC8F276BCD641EEA7CA801BD0221EF8C80701E59E1AC849DD08071F3825D54A8F62879E3523DA1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/css/aolv2.css
Preview:	@charset "UTF-8";./! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /./* Document. ========================================================================== /./. 1. Correct the line height in all browsers.. * 2. Prevent adjustments of font size after orientation changes in iOS.. /.html {. line-height: 1.15;. / 1 /. -webkit-text-size-adjust: 100%;. / 2 /.}../ Sections.. ========================================================================== /./. Remove the margin in all browsers.. /.body {. margin: 0;.}../. Render the `main` element consistently in IE.. /.main {. display: block;.}../. Correct the font size and margin on `h1` elements within `section` and. * `article` contexts in Chrome, Firefox, and Safari.. /.h1 {. font-size: 2em;. margin: 0.67em 0;.}../ Grouping content.. ========================================================================== /./. 1. Add the correct box sizing in Firefox.. * 2

Chrome Cache Entry: 957

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2749
Entropy (8bit):	4.888793190554598
Encrypted:	false
SSDEEP:	48:chsKf7kvMOv7KROdvZv7JkacllbmlbmlbwTqBVL:uf7hqKodZcl88mTqBF
MD5:	CD917BBE4B8298AEBCA5DF5A54953D81
SHA1:	EF1078BDE5E72BD7FA9158CA5F7F55C0DA595191
SHA-256:	4302003A54CC9C99880CECE241980104481F1D5D753141AC87305A9E4D321DDF
SHA-512:	6A847DB67D16551D4EE8B6EC4F6BCB548C527FFCE502256A172A2838A48A25213C376C617581226F077B5361B2402EA010CA5CFBF6B5E9D5DCCE28C636464EAB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="102px" height="40px" viewBox="0 0 102 40" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54 (76480) - https://sketchapp.com -->. <title>AOL_KO</title>. <desc>Created with Sketch.</desc>. <g id="approved" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="iPhone-XR" transform="translate(-146.000000, -43.000000)" fill="#FFFFFF">. <g id="AOL_KO" transform="translate(146.000000, 43.000000)">. <g>. <path d="M54.6477469,8.76847291 C65.2095877,8.76847291 70.2753595,17.182266 70.2753595,24.3842365 C70.2753595,31.5763547 65.2095877,40 54.6477469,40 C44.085906,40 39.0103547,31.5862069 39.0103547,24.3842365 C39.0103547,17.182266 44.085906,8.76847291 54.6477469,8.76847291 M54.6477469,31.7832512 C58.4128476,31.7832512 61.6009588,28.6600985 61.6009588,24.3743842 C61.6009588,20.08867 58.4128476,16.

Chrome Cache Entry: 958

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 782 x 313, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16340
Entropy (8bit):	7.836920581525234
Encrypted:	false
SSDEEP:	384:npV+CRmBsI0zkDxcF1ewq12cz+/SOLp09ilF09y7X0xXmYvk:B8ykq1eH12czVOLp09iPGyT0lm3
MD5:	F9E0F24B60732CD95150A37FB003B871
SHA1:	1F2D68CC8D4EF8EF9E0159B8A5D450A466595546
SHA-256:	F3E22262B472EE52E51E9F053856DAF9A3F7CE59DD66D51F201F1EE7FAAF5690
SHA-512:	64B0AE7AD0B84B0FC39EB90C11045AA5D920A1F5BD059ED599FC15ADBDC2AF73F2251F0D28A4508B8F09E040684966FC6112AE4DDC749DB2B83D4EA2BD3EB8BF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......9.....9.wq....sRGB.........iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <xmp:CreatorTool>Adobe ImageReady</xmp:CreatorTool>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.)..=..=.IDATx....F..5g......#.N..#0'.A.H.@..H....LG 8.s".&..`...Mks.K...~z...Fwu.S.t......@...... ...@...... ...@...... ....%....J-.).... ..1....{.5.?..I....Oz&c.H..G.O.{.~../... ...@.....g....z.1<...Q&..@...... ....H..@K.K-.W..?.t.:.%H..@.......%@.PV._......8......... ...t%@..T..\..wc...4X.@... ...@....I..'........!...!...@...X....r.....{@..e........ ...@........nZ.v.L...o.8. ...@....@O.$.=.%...E?...sxN.m.@...... p.....@...........:.BtA...... .....8..../.,.r.y.

Chrome Cache Entry: 959

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	198912
Entropy (8bit):	7.998915273219039
Encrypted:	true
SSDEEP:	6144:tEYRTs0xjVSkkrIf0Jdvb40d7+8elWuXLz:tExwjVSkkr4idvb4Dyu7z
MD5:	40D9A5937AF186DA3E0A3080FE200045
SHA1:	F19224AC65237726118A5C3D382DDFE77D1AA15E
SHA-256:	47DD60D66E54B6C3FC2307B4264C34A3A4A943EEAD6680F9D3F62FB07A682C2E
SHA-512:	2E2222E93232957CECB3B83F45ECD7FAA33083D9AC9F9E433279A7D3E43A69C8C2758C2EF60322F34FE1ADE8399524200D4B8F8F87952B17739690B3BF1A8027
Malicious:	false
Reputation:	low
Preview:	......<6..g....tc.!.E.Q..<.`...?O.M.....o&.y {...........8...5..q...........?V.?.fGP...-bP..hU....K.... ....x.e..}.....Ez.nf...s.E.....}..._.;...U... ...Ud.J..O..tKVJn.dvq3...z.\..s..b[}0....A.O.5.l..W. .....].A`....H.XS6.....R.><....:.J.:.v:...M..l3_3..W\|.<I.`...-..}....d..>.A..G.....}.~#6j..(P`......<..Y.XX....d..9.E.],0.8...)..$q...X....Z\|......!f...h....F?....T?....bV.H.m.W...R.\|8\...^.f.... ...\.....e6..........g"...Tzf-JY}.<&D.r..Ar...K..h..d..;.z...&.U.....'.5..WR.B.../...T.5...D..4....S<.#..0lR9a...r.............Vm.N..1N..5.2.}.t..%..^q..-"@.......e.`..r..H.$w..5^XG.....=.......j....S0...V)...m...Fn.G...._.&...A..u....yxh......a.@.9.....{....nzu].W#...#3...j...-j.... Q..6.ah...1. \h.....'.B....^......1...Ibk..=.X.0m.O..ud..f..a.T5...eL...Z`.P.2.......C..)...e..(]D6..".~..S.....Rre...s.H.%w$=.@..zi......a..`...=u.4.I..p..D....=.[#..H.~......0.Y[.8.,.V....r,f..ok..S.-[.W\|p.@\|.....J@..@......QZ~...H.r$.,.a.\.mV-.c.F...

Chrome Cache Entry: 960

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2829
Entropy (8bit):	4.940740108008524
Encrypted:	false
SSDEEP:	48:/5eS4ZLJeS45XPTQHUaFYLA9CScXnGbV6LB9CScXnGbVtHtQFL0tvQHb2HtQFL0y:/yD6nuC6nu3wPawj
MD5:	597A5BA07CFBE0837EE1CC1067799195
SHA1:	BF631F369FD0A4DBBD41A6244C8ED69B57D29A83
SHA-256:	498BA102F3FE01BABDC3834D35620945ACFAB5D319C931D52BA86F2905BF9509
SHA-512:	DD7AC234E5DA65659431400DD3BA34F57A4B5F58E09870A0049D70A1EE7C4CFF5ED55EBB58F1ADCD5F3DE1961404B9A6E02A85F938E89A23D4E968B3DD51F1C1
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M21.4939 8.01361C16.2904 8.16665 12.0052 12.2988 11.393 17.3493C9.70957 17.0432 7.87304 17.0432 5.88348 18.2675C3.89391 19.4919 2.51652 21.4814 2.05739 23.7771C1.90435 25.1545 2.05739 26.3788 2.51652 27.6032C2.97565 28.6745 4.04696 29.4397 5.27131 29.4397H21.953C27.9217 29.4397 32.8191 24.5423 32.6661 18.5736C32.513 12.6049 27.4626 7.70752 21.4939 8.01361Z" fill="url(#paint0_linear_104_526)"/>.<path d="M21.4939 8.01361C16.2904 8.16665 12.0052 12.2988 11.393 17.3493C9.70957 17.0432 7.87304 17.0432 5.88348 18.2675C3.89391 19.4919 2.51652 21.4814 2.05739 23.7771C1.90435 25.1545 2.05739 26.3788 2.51652 27.6032C2.97565 28.6745 4.04696 29.4397 5.27131 29.4397H21.953C27.9217 29.4397 32.8191 24.5423 32.6661 18.5736C32.513 12.6049 27.4626 7.70752 21.4939 8.01361Z" fill="#7DCBFF" fill-opacity="0.05"/>.<g opacity="0.4">.<path fill-rule="evenodd" clip-rule="evenodd" d="M26.1996 18.5932C17.8319

Static File Info

⊘No static file info

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 4, 2024 00:26:14.837233067 CET	192.168.2.4	1.1.1.1	0xb78b	Standard query (0)	aolserv.pages.dev	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:14.838006973 CET	192.168.2.4	1.1.1.1	0x44bf	Standard query (0)	aolserv.pages.dev	65	IN (0x0001)	false
Mar 4, 2024 00:26:15.424731970 CET	192.168.2.4	1.1.1.1	0x85a8	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:15.425190926 CET	192.168.2.4	1.1.1.1	0x44d9	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:15.428855896 CET	192.168.2.4	1.1.1.1	0x2561	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:15.429076910 CET	192.168.2.4	1.1.1.1	0xbbd6	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:15.913726091 CET	192.168.2.4	1.1.1.1	0xba5b	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:15.913913012 CET	192.168.2.4	1.1.1.1	0x70cc	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:17.891701937 CET	192.168.2.4	1.1.1.1	0x99aa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:17.892105103 CET	192.168.2.4	1.1.1.1	0xace1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:27.728979111 CET	192.168.2.4	1.1.1.1	0xf2d2	Standard query (0)	www.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:27.732374907 CET	192.168.2.4	1.1.1.1	0x9dbb	Standard query (0)	www.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:28.824091911 CET	192.168.2.4	1.1.1.1	0x9582	Standard query (0)	s.aolcdn.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.824975967 CET	192.168.2.4	1.1.1.1	0x7d4c	Standard query (0)	s.aolcdn.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:28.825989962 CET	192.168.2.4	1.1.1.1	0xeb26	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.826893091 CET	192.168.2.4	1.1.1.1	0xa2bd	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:28.827795982 CET	192.168.2.4	1.1.1.1	0xeaee	Standard query (0)	consent.cmp.oath.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.828217983 CET	192.168.2.4	1.1.1.1	0xe1d5	Standard query (0)	consent.cmp.oath.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:28.828727007 CET	192.168.2.4	1.1.1.1	0x88e	Standard query (0)	beap.gemini.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.829688072 CET	192.168.2.4	1.1.1.1	0x2791	Standard query (0)	beap.gemini.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:28.920362949 CET	192.168.2.4	1.1.1.1	0x42d1	Standard query (0)	3p-geo.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.920769930 CET	192.168.2.4	1.1.1.1	0xa5dc	Standard query (0)	3p-geo.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:28.925395012 CET	192.168.2.4	1.1.1.1	0x60af	Standard query (0)	guce.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.926054955 CET	192.168.2.4	1.1.1.1	0x4ee1	Standard query (0)	guce.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:28.926862955 CET	192.168.2.4	1.1.1.1	0x74d	Standard query (0)	o.aolcdn.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.927388906 CET	192.168.2.4	1.1.1.1	0x935a	Standard query (0)	o.aolcdn.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:29.028466940 CET	192.168.2.4	1.1.1.1	0x371e	Standard query (0)	jill.fc.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.029165030 CET	192.168.2.4	1.1.1.1	0x21cf	Standard query (0)	jill.fc.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:29.030750036 CET	192.168.2.4	1.1.1.1	0x964a	Standard query (0)	yep.video.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.031375885 CET	192.168.2.4	1.1.1.1	0x8049	Standard query (0)	yep.video.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:32.870418072 CET	192.168.2.4	1.1.1.1	0x9aea	Standard query (0)	s.aolcdn.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.870703936 CET	192.168.2.4	1.1.1.1	0x4c2b	Standard query (0)	s.aolcdn.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:32.889363050 CET	192.168.2.4	1.1.1.1	0xe7ac	Standard query (0)	guce.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.889651060 CET	192.168.2.4	1.1.1.1	0x5482	Standard query (0)	guce.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:33.927753925 CET	192.168.2.4	1.1.1.1	0x7848	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:33.928353071 CET	192.168.2.4	1.1.1.1	0x4f8d	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.263407946 CET	192.168.2.4	1.1.1.1	0xe4de	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.263773918 CET	192.168.2.4	1.1.1.1	0x6ce1	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.476888895 CET	192.168.2.4	1.1.1.1	0xbb59	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.480802059 CET	192.168.2.4	1.1.1.1	0x4a7c	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.525665998 CET	192.168.2.4	1.1.1.1	0xbf40	Standard query (0)	membernotifications.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.526191950 CET	192.168.2.4	1.1.1.1	0xbd67	Standard query (0)	membernotifications.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.578659058 CET	192.168.2.4	1.1.1.1	0x5699	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.579979897 CET	192.168.2.4	1.1.1.1	0xa7df	Standard query (0)	c2shb-oao.ssp.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.580991983 CET	192.168.2.4	1.1.1.1	0x2b8f	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.581768036 CET	192.168.2.4	1.1.1.1	0x7be2	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.583189964 CET	192.168.2.4	1.1.1.1	0x6a00	Standard query (0)	m.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.583432913 CET	192.168.2.4	1.1.1.1	0xc646	Standard query (0)	m.hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.620223999 CET	192.168.2.4	1.1.1.1	0xc30a	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.620716095 CET	192.168.2.4	1.1.1.1	0x9958	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.648030996 CET	192.168.2.4	1.1.1.1	0x7c62	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.648441076 CET	192.168.2.4	1.1.1.1	0xb862	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.648996115 CET	192.168.2.4	1.1.1.1	0xc2af	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.649205923 CET	192.168.2.4	1.1.1.1	0x646c	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.675108910 CET	192.168.2.4	1.1.1.1	0xa6d1	Standard query (0)	rtb-cache.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.675344944 CET	192.168.2.4	1.1.1.1	0xa75a	Standard query (0)	rtb-cache.hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.714205980 CET	192.168.2.4	1.1.1.1	0x5675	Standard query (0)	video-api.yql.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.714616060 CET	192.168.2.4	1.1.1.1	0xf4b0	Standard query (0)	video-api.yql.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.818679094 CET	192.168.2.4	1.1.1.1	0x82ba	Standard query (0)	3p-udc.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.820236921 CET	192.168.2.4	1.1.1.1	0x7da6	Standard query (0)	3p-udc.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:34.944634914 CET	192.168.2.4	1.1.1.1	0xc939	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.944935083 CET	192.168.2.4	1.1.1.1	0x2e38	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:35.075570107 CET	192.168.2.4	1.1.1.1	0x3f2f	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.076209068 CET	192.168.2.4	1.1.1.1	0x5a70	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:35.576066971 CET	192.168.2.4	1.1.1.1	0xf607	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.576436996 CET	192.168.2.4	1.1.1.1	0x909f	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:35.933350086 CET	192.168.2.4	1.1.1.1	0x4211	Standard query (0)	www.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.933820009 CET	192.168.2.4	1.1.1.1	0x8a87	Standard query (0)	www.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:35.969607115 CET	192.168.2.4	1.1.1.1	0xca6e	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.970530033 CET	192.168.2.4	1.1.1.1	0x9481	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:35.983716965 CET	192.168.2.4	1.1.1.1	0x2f29	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.984018087 CET	192.168.2.4	1.1.1.1	0x3d70	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
Mar 4, 2024 00:26:36.790299892 CET	192.168.2.4	1.1.1.1	0x22ef	Standard query (0)	bats.video.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:36.790838957 CET	192.168.2.4	1.1.1.1	0xba8a	Standard query (0)	bats.video.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:37.572458982 CET	192.168.2.4	1.1.1.1	0xb56c	Standard query (0)	ncp-gw-video.media.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:37.572668076 CET	192.168.2.4	1.1.1.1	0x2e	Standard query (0)	ncp-gw-video.media.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:37.616100073 CET	192.168.2.4	1.1.1.1	0x7bf6	Standard query (0)	geo.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:37.617263079 CET	192.168.2.4	1.1.1.1	0x714a	Standard query (0)	geo.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:38.108011961 CET	192.168.2.4	1.1.1.1	0xc65a	Standard query (0)	display.bidder.taboola.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.109550953 CET	192.168.2.4	1.1.1.1	0x2a16	Standard query (0)	display.bidder.taboola.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:38.113111019 CET	192.168.2.4	1.1.1.1	0x229	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.113555908 CET	192.168.2.4	1.1.1.1	0x9ebb	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:38.117854118 CET	192.168.2.4	1.1.1.1	0xc833	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.119302988 CET	192.168.2.4	1.1.1.1	0xc86e	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:38.252681971 CET	192.168.2.4	1.1.1.1	0x5ba8	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.253076077 CET	192.168.2.4	1.1.1.1	0xe6f3	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:38.253842115 CET	192.168.2.4	1.1.1.1	0xbf96	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.254507065 CET	192.168.2.4	1.1.1.1	0xe516	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:38.260869026 CET	192.168.2.4	1.1.1.1	0xe173	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.261190891 CET	192.168.2.4	1.1.1.1	0x743a	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:38.309783936 CET	192.168.2.4	1.1.1.1	0x8b81	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.310695887 CET	192.168.2.4	1.1.1.1	0x12c9	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:38.321050882 CET	192.168.2.4	1.1.1.1	0xb764	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.321857929 CET	192.168.2.4	1.1.1.1	0x1d8b	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:39.198887110 CET	192.168.2.4	1.1.1.1	0xb37e	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:39.199641943 CET	192.168.2.4	1.1.1.1	0x379d	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:39.200653076 CET	192.168.2.4	1.1.1.1	0xb9b5	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:39.201167107 CET	192.168.2.4	1.1.1.1	0x211e	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:40.403744936 CET	192.168.2.4	1.1.1.1	0x782a	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.404038906 CET	192.168.2.4	1.1.1.1	0x7759	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:40.404916048 CET	192.168.2.4	1.1.1.1	0xae5a	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.405137062 CET	192.168.2.4	1.1.1.1	0xf2b3	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:40.410826921 CET	192.168.2.4	1.1.1.1	0xc4c7	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.411003113 CET	192.168.2.4	1.1.1.1	0xcb49	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:40.411408901 CET	192.168.2.4	1.1.1.1	0x3e3e	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.411593914 CET	192.168.2.4	1.1.1.1	0xf3f0	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.046925068 CET	192.168.2.4	1.1.1.1	0xdccd	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.047137022 CET	192.168.2.4	1.1.1.1	0x141a	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.047919989 CET	192.168.2.4	1.1.1.1	0x94eb	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.048341036 CET	192.168.2.4	1.1.1.1	0x53d9	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.048743963 CET	192.168.2.4	1.1.1.1	0x9667	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.049297094 CET	192.168.2.4	1.1.1.1	0x6f29	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.049882889 CET	192.168.2.4	1.1.1.1	0x2954	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.050092936 CET	192.168.2.4	1.1.1.1	0x2e0b	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.054980040 CET	192.168.2.4	1.1.1.1	0x9df4	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.055408955 CET	192.168.2.4	1.1.1.1	0x653d	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.056057930 CET	192.168.2.4	1.1.1.1	0xb993	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.056057930 CET	192.168.2.4	1.1.1.1	0xcd87	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.056543112 CET	192.168.2.4	1.1.1.1	0x9369	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.056813955 CET	192.168.2.4	1.1.1.1	0xb364	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.057466984 CET	192.168.2.4	1.1.1.1	0x30d1	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.057713985 CET	192.168.2.4	1.1.1.1	0x4851	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.058067083 CET	192.168.2.4	1.1.1.1	0xcfbf	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.058393002 CET	192.168.2.4	1.1.1.1	0xca05	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.058801889 CET	192.168.2.4	1.1.1.1	0x9472	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.061263084 CET	192.168.2.4	1.1.1.1	0x9932	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.062264919 CET	192.168.2.4	1.1.1.1	0x2a61	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.062661886 CET	192.168.2.4	1.1.1.1	0xc3da	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.070236921 CET	192.168.2.4	1.1.1.1	0xcfb6	Standard query (0)	players.brightcove.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.070483923 CET	192.168.2.4	1.1.1.1	0xf91e	Standard query (0)	players.brightcove.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:42.072076082 CET	192.168.2.4	1.1.1.1	0xe826	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.072460890 CET	192.168.2.4	1.1.1.1	0x6419	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.133476973 CET	192.168.2.4	1.1.1.1	0x46ef	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.134089947 CET	192.168.2.4	1.1.1.1	0x8223	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.135361910 CET	192.168.2.4	1.1.1.1	0xd428	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.135871887 CET	192.168.2.4	1.1.1.1	0xe43a	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.142811060 CET	192.168.2.4	1.1.1.1	0xf09f	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.143548965 CET	192.168.2.4	1.1.1.1	0xe783	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.144469976 CET	192.168.2.4	1.1.1.1	0x48f9	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.144774914 CET	192.168.2.4	1.1.1.1	0x29b4	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.152352095 CET	192.168.2.4	1.1.1.1	0x2a3f	Standard query (0)	medianet-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.152749062 CET	192.168.2.4	1.1.1.1	0x23ac	Standard query (0)	medianet-match.dotomi.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.169574022 CET	192.168.2.4	1.1.1.1	0x5cfd	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.169960976 CET	192.168.2.4	1.1.1.1	0xbb6a	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.170341015 CET	192.168.2.4	1.1.1.1	0xb2f8	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.170490026 CET	192.168.2.4	1.1.1.1	0x2616	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.212234974 CET	192.168.2.4	1.1.1.1	0xd23e	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.212934017 CET	192.168.2.4	1.1.1.1	0xc752	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.214221954 CET	192.168.2.4	1.1.1.1	0xc45c	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.214411020 CET	192.168.2.4	1.1.1.1	0x745a	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.467192888 CET	192.168.2.4	1.1.1.1	0x29c1	Standard query (0)	m.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.467192888 CET	192.168.2.4	1.1.1.1	0x968	Standard query (0)	m.hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.468518019 CET	192.168.2.4	1.1.1.1	0x174f	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.468518019 CET	192.168.2.4	1.1.1.1	0xada3	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.469244003 CET	192.168.2.4	1.1.1.1	0xbc10	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.469383955 CET	192.168.2.4	1.1.1.1	0xccea	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.470910072 CET	192.168.2.4	1.1.1.1	0x9b17	Standard query (0)	ncp-gw-video.media.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.471383095 CET	192.168.2.4	1.1.1.1	0x8b8d	Standard query (0)	ncp-gw-video.media.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.474118948 CET	192.168.2.4	1.1.1.1	0xe5e6	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.474850893 CET	192.168.2.4	1.1.1.1	0x3db2	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:43.720885038 CET	192.168.2.4	1.1.1.1	0x583e	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.721122980 CET	192.168.2.4	1.1.1.1	0xd262	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:44.121723890 CET	192.168.2.4	1.1.1.1	0x55ac	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:44.168237925 CET	192.168.2.4	1.1.1.1	0x4cac	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.168939114 CET	192.168.2.4	1.1.1.1	0x47fd	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:44.609827042 CET	192.168.2.4	1.1.1.1	0xf74b	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.610238075 CET	192.168.2.4	1.1.1.1	0x50e5	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:44.754415989 CET	192.168.2.4	1.1.1.1	0x4a68	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.758039951 CET	192.168.2.4	1.1.1.1	0xb8f2	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:45.342706919 CET	192.168.2.4	1.1.1.1	0xd2d0	Standard query (0)	de9a11s35xj3d.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.343055964 CET	192.168.2.4	1.1.1.1	0xdb80	Standard query (0)	de9a11s35xj3d.cloudfront.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:45.343669891 CET	192.168.2.4	1.1.1.1	0xbbb0	Standard query (0)	rtb-use.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.343916893 CET	192.168.2.4	1.1.1.1	0x9cfd	Standard query (0)	rtb-use.mfadsrvr.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:45.669697046 CET	192.168.2.4	1.1.1.1	0x713c	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.670411110 CET	192.168.2.4	1.1.1.1	0x1987	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:45.675153971 CET	192.168.2.4	1.1.1.1	0x8b4e	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.675683022 CET	192.168.2.4	1.1.1.1	0xe057	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:45.850383043 CET	192.168.2.4	1.1.1.1	0x3f63	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.851334095 CET	192.168.2.4	1.1.1.1	0x20ec	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:45.963268042 CET	192.168.2.4	1.1.1.1	0xfdc5	Standard query (0)	tsdtocl.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.963500023 CET	192.168.2.4	1.1.1.1	0x859f	Standard query (0)	tsdtocl.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:45.975579023 CET	192.168.2.4	1.1.1.1	0xcbf9	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.975797892 CET	192.168.2.4	1.1.1.1	0x6990	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.061407089 CET	192.168.2.4	1.1.1.1	0xfc55	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.061783075 CET	192.168.2.4	1.1.1.1	0xcd69	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.065566063 CET	192.168.2.4	1.1.1.1	0xb555	Standard query (0)	metrics.brightcove.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.065800905 CET	192.168.2.4	1.1.1.1	0x8f65	Standard query (0)	metrics.brightcove.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.269933939 CET	192.168.2.4	1.1.1.1	0x94ee	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.270262003 CET	192.168.2.4	1.1.1.1	0xc4b2	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.318727970 CET	192.168.2.4	1.1.1.1	0x37d7	Standard query (0)	edge-auth.api.brightcove.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.319020987 CET	192.168.2.4	1.1.1.1	0x3e31	Standard query (0)	edge-auth.api.brightcove.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.454679966 CET	192.168.2.4	1.1.1.1	0x66e2	Standard query (0)	video-api.yql.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.455435038 CET	192.168.2.4	1.1.1.1	0x56a1	Standard query (0)	video-api.yql.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.505490065 CET	192.168.2.4	1.1.1.1	0xfcbc	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.505697966 CET	192.168.2.4	1.1.1.1	0x28cb	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.740010977 CET	192.168.2.4	1.1.1.1	0x4759	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.740528107 CET	192.168.2.4	1.1.1.1	0xf5d6	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.784452915 CET	192.168.2.4	1.1.1.1	0x8914	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.784775019 CET	192.168.2.4	1.1.1.1	0x8f72	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.812333107 CET	192.168.2.4	1.1.1.1	0x5c74	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.812884092 CET	192.168.2.4	1.1.1.1	0x85ae	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.814066887 CET	192.168.2.4	1.1.1.1	0xfc16	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.814286947 CET	192.168.2.4	1.1.1.1	0xe184	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.818299055 CET	192.168.2.4	1.1.1.1	0xf82f	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.818594933 CET	192.168.2.4	1.1.1.1	0xc17c	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:46.820758104 CET	192.168.2.4	1.1.1.1	0x1b9e	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.821038008 CET	192.168.2.4	1.1.1.1	0x3183	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.123231888 CET	192.168.2.4	1.1.1.1	0x9ffc	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.123727083 CET	192.168.2.4	1.1.1.1	0xc904	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.163183928 CET	192.168.2.4	1.1.1.1	0xe3b2	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.163510084 CET	192.168.2.4	1.1.1.1	0x9b1b	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.181771040 CET	192.168.2.4	1.1.1.1	0x5a9b	Standard query (0)	ssp-sync.criteo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.182029963 CET	192.168.2.4	1.1.1.1	0xb8ee	Standard query (0)	ssp-sync.criteo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.195708036 CET	192.168.2.4	1.1.1.1	0x61d7	Standard query (0)	aol-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.196057081 CET	192.168.2.4	1.1.1.1	0x491f	Standard query (0)	aol-match.dotomi.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.280386925 CET	192.168.2.4	1.1.1.1	0x2417	Standard query (0)	noa.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.280666113 CET	192.168.2.4	1.1.1.1	0xd946	Standard query (0)	noa.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.305262089 CET	192.168.2.4	1.1.1.1	0xf969	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.305463076 CET	192.168.2.4	1.1.1.1	0xd255	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.307034016 CET	192.168.2.4	1.1.1.1	0xc56e	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.307332039 CET	192.168.2.4	1.1.1.1	0x41b4	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.313636065 CET	192.168.2.4	1.1.1.1	0xbd2f	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.313636065 CET	192.168.2.4	1.1.1.1	0x99bd	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.317789078 CET	192.168.2.4	1.1.1.1	0x3e61	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.317789078 CET	192.168.2.4	1.1.1.1	0x8c52	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.320149899 CET	192.168.2.4	1.1.1.1	0xa417	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.321314096 CET	192.168.2.4	1.1.1.1	0xff9d	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.341968060 CET	192.168.2.4	1.1.1.1	0x2bef	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.342509031 CET	192.168.2.4	1.1.1.1	0xedb9	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.489792109 CET	192.168.2.4	1.1.1.1	0x553d	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.490024090 CET	192.168.2.4	1.1.1.1	0xbef1	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.502861977 CET	192.168.2.4	1.1.1.1	0xa28	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.502862930 CET	192.168.2.4	1.1.1.1	0xf8ce	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.824115038 CET	192.168.2.4	1.1.1.1	0xfe4e	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.824115038 CET	192.168.2.4	1.1.1.1	0x9d0e	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:47.982372046 CET	192.168.2.4	1.1.1.1	0x8b82	Standard query (0)	a.sportradarserving.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.982605934 CET	192.168.2.4	1.1.1.1	0xc490	Standard query (0)	a.sportradarserving.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:48.060540915 CET	192.168.2.4	1.1.1.1	0x5700	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.060914993 CET	192.168.2.4	1.1.1.1	0xcfac	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:48.378098011 CET	192.168.2.4	1.1.1.1	0xc172	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.378348112 CET	192.168.2.4	1.1.1.1	0x81e7	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:48.422805071 CET	192.168.2.4	1.1.1.1	0x868e	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.423125029 CET	192.168.2.4	1.1.1.1	0x10c9	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:48.478663921 CET	192.168.2.4	1.1.1.1	0xc50c	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.479094028 CET	192.168.2.4	1.1.1.1	0x139b	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:48.482572079 CET	192.168.2.4	1.1.1.1	0x6bb4	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.482927084 CET	192.168.2.4	1.1.1.1	0x521b	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:48.604438066 CET	192.168.2.4	1.1.1.1	0x6777	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.604839087 CET	192.168.2.4	1.1.1.1	0xa75d	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:48.617228031 CET	192.168.2.4	1.1.1.1	0x612b	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.617228031 CET	192.168.2.4	1.1.1.1	0xb62a	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.221398115 CET	192.168.2.4	1.1.1.1	0x925f	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.222465992 CET	192.168.2.4	1.1.1.1	0x510c	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.228028059 CET	192.168.2.4	1.1.1.1	0x501b	Standard query (0)	manifest.prod.boltdns.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.228353024 CET	192.168.2.4	1.1.1.1	0xaf66	Standard query (0)	manifest.prod.boltdns.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.283519030 CET	192.168.2.4	1.1.1.1	0xa7d1	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.284115076 CET	192.168.2.4	1.1.1.1	0x59fa	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.381349087 CET	192.168.2.4	1.1.1.1	0x5818	Standard query (0)	tb.video.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.381349087 CET	192.168.2.4	1.1.1.1	0xb0a2	Standard query (0)	tb.video.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.438577890 CET	192.168.2.4	1.1.1.1	0x76b9	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.441838980 CET	192.168.2.4	1.1.1.1	0x4976	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.581218004 CET	192.168.2.4	1.1.1.1	0xcf5f	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.581471920 CET	192.168.2.4	1.1.1.1	0xe2b7	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.710300922 CET	192.168.2.4	1.1.1.1	0xce7	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.710656881 CET	192.168.2.4	1.1.1.1	0x35c6	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.711644888 CET	192.168.2.4	1.1.1.1	0xfa7d	Standard query (0)	i.ctnsnet.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.712001085 CET	192.168.2.4	1.1.1.1	0x993a	Standard query (0)	i.ctnsnet.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.716662884 CET	192.168.2.4	1.1.1.1	0xd431	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.717318058 CET	192.168.2.4	1.1.1.1	0x9a7b	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:49.965276957 CET	192.168.2.4	1.1.1.1	0x7185	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.965276957 CET	192.168.2.4	1.1.1.1	0x6c26	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:50.630675077 CET	192.168.2.4	1.1.1.1	0xd5bc	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.631251097 CET	192.168.2.4	1.1.1.1	0x9eff	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:50.652537107 CET	192.168.2.4	1.1.1.1	0xa8e5	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.652932882 CET	192.168.2.4	1.1.1.1	0xe080	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:50.661335945 CET	192.168.2.4	1.1.1.1	0xff48	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.661892891 CET	192.168.2.4	1.1.1.1	0xc03d	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:50.663105965 CET	192.168.2.4	1.1.1.1	0x80c4	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.663652897 CET	192.168.2.4	1.1.1.1	0x7f68	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:50.664865017 CET	192.168.2.4	1.1.1.1	0x9a66	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.665317059 CET	192.168.2.4	1.1.1.1	0xf2a2	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:50.666138887 CET	192.168.2.4	1.1.1.1	0xa88d	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.666553974 CET	192.168.2.4	1.1.1.1	0x7464	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:51.428950071 CET	192.168.2.4	1.1.1.1	0x4c07	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.431138039 CET	192.168.2.4	1.1.1.1	0xb73c	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:52.765877962 CET	192.168.2.4	1.1.1.1	0xd2c5	Standard query (0)	bcbolt446c5271-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:52.766107082 CET	192.168.2.4	1.1.1.1	0x6c8a	Standard query (0)	bcbolt446c5271-a.akamaihd.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:53.246685982 CET	192.168.2.4	1.1.1.1	0x681b	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:53.247629881 CET	192.168.2.4	1.1.1.1	0x832b	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:53.668740034 CET	192.168.2.4	1.1.1.1	0x740c	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:53.669197083 CET	192.168.2.4	1.1.1.1	0xfb25	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:54.617438078 CET	192.168.2.4	1.1.1.1	0xde78	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:54.618324041 CET	192.168.2.4	1.1.1.1	0x6d13	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.039499998 CET	192.168.2.4	1.1.1.1	0x7642	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.040021896 CET	192.168.2.4	1.1.1.1	0x5b59	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.354427099 CET	192.168.2.4	1.1.1.1	0xb0e8	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.355483055 CET	192.168.2.4	1.1.1.1	0x36e4	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.358371973 CET	192.168.2.4	1.1.1.1	0x92f5	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.359036922 CET	192.168.2.4	1.1.1.1	0xc6c1	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.360367060 CET	192.168.2.4	1.1.1.1	0x5f13	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.366122007 CET	192.168.2.4	1.1.1.1	0xdeb	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.366636992 CET	192.168.2.4	1.1.1.1	0xe466	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.367324114 CET	192.168.2.4	1.1.1.1	0x49fb	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.371730089 CET	192.168.2.4	1.1.1.1	0xcbc	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.372337103 CET	192.168.2.4	1.1.1.1	0xb469	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.373466969 CET	192.168.2.4	1.1.1.1	0x7a01	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.374087095 CET	192.168.2.4	1.1.1.1	0xc548	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.824572086 CET	192.168.2.4	1.1.1.1	0x6055	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.825273037 CET	192.168.2.4	1.1.1.1	0x92e3	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.826508045 CET	192.168.2.4	1.1.1.1	0xe364	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.826738119 CET	192.168.2.4	1.1.1.1	0xbd55	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.827534914 CET	192.168.2.4	1.1.1.1	0x400f	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.827734947 CET	192.168.2.4	1.1.1.1	0x81e9	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.828186035 CET	192.168.2.4	1.1.1.1	0xb950	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.828746080 CET	192.168.2.4	1.1.1.1	0x3e3	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.833708048 CET	192.168.2.4	1.1.1.1	0x6edb	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.833903074 CET	192.168.2.4	1.1.1.1	0xddc6	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.836287975 CET	192.168.2.4	1.1.1.1	0x35e6	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.837057114 CET	192.168.2.4	1.1.1.1	0x8885	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.930942059 CET	192.168.2.4	1.1.1.1	0xccae	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.931365013 CET	192.168.2.4	1.1.1.1	0xc13f	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.932316065 CET	192.168.2.4	1.1.1.1	0x108	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.932723045 CET	192.168.2.4	1.1.1.1	0xcc69	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:56.936336040 CET	192.168.2.4	1.1.1.1	0x5046	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.936832905 CET	192.168.2.4	1.1.1.1	0x1a7f	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.826255083 CET	192.168.2.4	1.1.1.1	0x9ed0	Standard query (0)	de9a11s35xj3d.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.826795101 CET	192.168.2.4	1.1.1.1	0x9f71	Standard query (0)	de9a11s35xj3d.cloudfront.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.830017090 CET	192.168.2.4	1.1.1.1	0x2f42	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.830794096 CET	192.168.2.4	1.1.1.1	0x73c	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.832333088 CET	192.168.2.4	1.1.1.1	0xebb4	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.833044052 CET	192.168.2.4	1.1.1.1	0x38a9	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.833877087 CET	192.168.2.4	1.1.1.1	0xd845	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.834129095 CET	192.168.2.4	1.1.1.1	0xf28f	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.835714102 CET	192.168.2.4	1.1.1.1	0xdc0a	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.836086035 CET	192.168.2.4	1.1.1.1	0xaf70	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.836622953 CET	192.168.2.4	1.1.1.1	0x4fc3	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.837100983 CET	192.168.2.4	1.1.1.1	0xd860	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.837604046 CET	192.168.2.4	1.1.1.1	0x8611	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.837924957 CET	192.168.2.4	1.1.1.1	0x36ba	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.838736057 CET	192.168.2.4	1.1.1.1	0x91f6	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.839024067 CET	192.168.2.4	1.1.1.1	0xdd58	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.844475031 CET	192.168.2.4	1.1.1.1	0xa613	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.844814062 CET	192.168.2.4	1.1.1.1	0xd3ca	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.851308107 CET	192.168.2.4	1.1.1.1	0xf749	Standard query (0)	metrics.brightcove.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.851527929 CET	192.168.2.4	1.1.1.1	0xbd59	Standard query (0)	metrics.brightcove.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.853952885 CET	192.168.2.4	1.1.1.1	0x4097	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.854505062 CET	192.168.2.4	1.1.1.1	0x5010	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.856232882 CET	192.168.2.4	1.1.1.1	0x21	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.856415033 CET	192.168.2.4	1.1.1.1	0x4aa6	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.864221096 CET	192.168.2.4	1.1.1.1	0x263d	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.864451885 CET	192.168.2.4	1.1.1.1	0xa973	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.865609884 CET	192.168.2.4	1.1.1.1	0xc682	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.865947962 CET	192.168.2.4	1.1.1.1	0x22e0	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.870954037 CET	192.168.2.4	1.1.1.1	0x62f3	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.871880054 CET	192.168.2.4	1.1.1.1	0xcf51	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.872916937 CET	192.168.2.4	1.1.1.1	0x290d	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.873462915 CET	192.168.2.4	1.1.1.1	0xfcd2	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:58.882522106 CET	192.168.2.4	1.1.1.1	0x8a1c	Standard query (0)	edge-auth.api.brightcove.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.883074999 CET	192.168.2.4	1.1.1.1	0x8a81	Standard query (0)	edge-auth.api.brightcove.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.576070070 CET	192.168.2.4	1.1.1.1	0xa986	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.576365948 CET	192.168.2.4	1.1.1.1	0x8024	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.579850912 CET	192.168.2.4	1.1.1.1	0x1717	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.580240011 CET	192.168.2.4	1.1.1.1	0x580e	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.592961073 CET	192.168.2.4	1.1.1.1	0x38d9	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.593238115 CET	192.168.2.4	1.1.1.1	0x6d21	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.595453978 CET	192.168.2.4	1.1.1.1	0x340f	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.595743895 CET	192.168.2.4	1.1.1.1	0xd406	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.601687908 CET	192.168.2.4	1.1.1.1	0xe9	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.601996899 CET	192.168.2.4	1.1.1.1	0x2048	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.662806988 CET	192.168.2.4	1.1.1.1	0xb342	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.663264036 CET	192.168.2.4	1.1.1.1	0x2d5b	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.820477009 CET	192.168.2.4	1.1.1.1	0x2297	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.820740938 CET	192.168.2.4	1.1.1.1	0x7098	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.941724062 CET	192.168.2.4	1.1.1.1	0x4d67	Standard query (0)	manifest.prod.boltdns.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.942455053 CET	192.168.2.4	1.1.1.1	0x290d	Standard query (0)	manifest.prod.boltdns.net	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.944601059 CET	192.168.2.4	1.1.1.1	0xd990	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.944601059 CET	192.168.2.4	1.1.1.1	0x1744	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.949179888 CET	192.168.2.4	1.1.1.1	0x6913	Standard query (0)	tb.video.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.949179888 CET	192.168.2.4	1.1.1.1	0x87a0	Standard query (0)	tb.video.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.950880051 CET	192.168.2.4	1.1.1.1	0xa79c	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.951128006 CET	192.168.2.4	1.1.1.1	0x96b6	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Mar 4, 2024 00:26:59.957374096 CET	192.168.2.4	1.1.1.1	0x922e	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.957617998 CET	192.168.2.4	1.1.1.1	0xab15	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:00.011091948 CET	192.168.2.4	1.1.1.1	0xc0ae	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.011687994 CET	192.168.2.4	1.1.1.1	0xb9f7	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:00.098875046 CET	192.168.2.4	1.1.1.1	0xf4cb	Standard query (0)	rtb-use.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.099363089 CET	192.168.2.4	1.1.1.1	0x659e	Standard query (0)	rtb-use.mfadsrvr.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:00.100512981 CET	192.168.2.4	1.1.1.1	0x7dc2	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.100743055 CET	192.168.2.4	1.1.1.1	0xabf0	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:00.162858963 CET	192.168.2.4	1.1.1.1	0xfd0b	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.163083076 CET	192.168.2.4	1.1.1.1	0xa07c	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:00.490947962 CET	192.168.2.4	1.1.1.1	0xc516	Standard query (0)	bcbolt446c5271-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.491252899 CET	192.168.2.4	1.1.1.1	0xc945	Standard query (0)	bcbolt446c5271-a.akamaihd.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:01.365303040 CET	192.168.2.4	1.1.1.1	0x7ec8	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:01.365814924 CET	192.168.2.4	1.1.1.1	0xc587	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.594068050 CET	192.168.2.4	1.1.1.1	0xb554	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.594527006 CET	192.168.2.4	1.1.1.1	0x260e	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.596434116 CET	192.168.2.4	1.1.1.1	0x78b1	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.596687078 CET	192.168.2.4	1.1.1.1	0xf93	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.602897882 CET	192.168.2.4	1.1.1.1	0x663a	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.603133917 CET	192.168.2.4	1.1.1.1	0x5125	Standard query (0)	pippio.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.623943090 CET	192.168.2.4	1.1.1.1	0x3e1a	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.624140024 CET	192.168.2.4	1.1.1.1	0xa6ba	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.646745920 CET	192.168.2.4	1.1.1.1	0x24e	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.647104979 CET	192.168.2.4	1.1.1.1	0xe771	Standard query (0)	dsum.casalemedia.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.772938013 CET	192.168.2.4	1.1.1.1	0x2878	Standard query (0)	help.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.773737907 CET	192.168.2.4	1.1.1.1	0xbf3f	Standard query (0)	help.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.839232922 CET	192.168.2.4	1.1.1.1	0x746d	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.839816093 CET	192.168.2.4	1.1.1.1	0x6a6a	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.840859890 CET	192.168.2.4	1.1.1.1	0x9e72	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.841281891 CET	192.168.2.4	1.1.1.1	0x23a7	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.843739033 CET	192.168.2.4	1.1.1.1	0xef27	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.843971014 CET	192.168.2.4	1.1.1.1	0x83	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:03.845993042 CET	192.168.2.4	1.1.1.1	0x1086	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.846437931 CET	192.168.2.4	1.1.1.1	0x35ea	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:05.623656034 CET	192.168.2.4	1.1.1.1	0xd937	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:05.624226093 CET	192.168.2.4	1.1.1.1	0xf056	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:06.091027021 CET	192.168.2.4	1.1.1.1	0x723e	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.091406107 CET	192.168.2.4	1.1.1.1	0xdb18	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:06.113132954 CET	192.168.2.4	1.1.1.1	0xefaa	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.113431931 CET	192.168.2.4	1.1.1.1	0x3546	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:06.195425987 CET	192.168.2.4	1.1.1.1	0xebfd	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.196368933 CET	192.168.2.4	1.1.1.1	0x6c41	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:06.784938097 CET	192.168.2.4	1.1.1.1	0xc068	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.785238028 CET	192.168.2.4	1.1.1.1	0xbca2	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:06.787194014 CET	192.168.2.4	1.1.1.1	0x7f97	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.787676096 CET	192.168.2.4	1.1.1.1	0x2d4d	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:06.794706106 CET	192.168.2.4	1.1.1.1	0x27	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.795109034 CET	192.168.2.4	1.1.1.1	0xc635	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:06.870004892 CET	192.168.2.4	1.1.1.1	0xf68e	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.870004892 CET	192.168.2.4	1.1.1.1	0xc91b	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:07.207634926 CET	192.168.2.4	1.1.1.1	0x5457	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:07.207961082 CET	192.168.2.4	1.1.1.1	0xd888	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:08.013044119 CET	192.168.2.4	1.1.1.1	0xc76f	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.013500929 CET	192.168.2.4	1.1.1.1	0xa4ee	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Mar 4, 2024 00:27:08.019714117 CET	192.168.2.4	1.1.1.1	0xdd9e	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.020415068 CET	192.168.2.4	1.1.1.1	0x53ca	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:08.029150009 CET	192.168.2.4	1.1.1.1	0x5945	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.029504061 CET	192.168.2.4	1.1.1.1	0x3d12	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:08.149957895 CET	192.168.2.4	1.1.1.1	0xfd1e	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.150973082 CET	192.168.2.4	1.1.1.1	0x8acc	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:08.152098894 CET	192.168.2.4	1.1.1.1	0x26c0	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.152993917 CET	192.168.2.4	1.1.1.1	0x9501	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:08.283570051 CET	192.168.2.4	1.1.1.1	0x812b	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.283835888 CET	192.168.2.4	1.1.1.1	0x47c3	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:09.901447058 CET	192.168.2.4	1.1.1.1	0x191e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:09.903192043 CET	192.168.2.4	1.1.1.1	0x783a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:10.505518913 CET	192.168.2.4	1.1.1.1	0x21f2	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.506953001 CET	192.168.2.4	1.1.1.1	0x48ba	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:10.506953001 CET	192.168.2.4	1.1.1.1	0xe911	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.507174969 CET	192.168.2.4	1.1.1.1	0xa790	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:10.523541927 CET	192.168.2.4	1.1.1.1	0xc881	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.523541927 CET	192.168.2.4	1.1.1.1	0x7e43	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:10.764652014 CET	192.168.2.4	1.1.1.1	0xadcc	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.764900923 CET	192.168.2.4	1.1.1.1	0x7a5b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:10.771809101 CET	192.168.2.4	1.1.1.1	0x7582	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.771996021 CET	192.168.2.4	1.1.1.1	0xa888	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:10.962135077 CET	192.168.2.4	1.1.1.1	0xab9f	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.962688923 CET	192.168.2.4	1.1.1.1	0x72e6	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:11.015954971 CET	192.168.2.4	1.1.1.1	0x569f	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:11.016179085 CET	192.168.2.4	1.1.1.1	0x10a	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Mar 4, 2024 00:27:11.141268969 CET	192.168.2.4	1.1.1.1	0x606d	Standard query (0)	help.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:11.141268969 CET	192.168.2.4	1.1.1.1	0xf40e	Standard query (0)	help.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:12.201539993 CET	192.168.2.4	1.1.1.1	0xacdb	Standard query (0)	api.content.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:12.201705933 CET	192.168.2.4	1.1.1.1	0x8c8b	Standard query (0)	api.content.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:12.557760954 CET	192.168.2.4	1.1.1.1	0x7a3f	Standard query (0)	oidc.help.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:12.559433937 CET	192.168.2.4	1.1.1.1	0xc6d4	Standard query (0)	oidc.help.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:12.851102114 CET	192.168.2.4	1.1.1.1	0x3909	Standard query (0)	api.content.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:12.851347923 CET	192.168.2.4	1.1.1.1	0x8299	Standard query (0)	api.content.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:13.391479969 CET	192.168.2.4	1.1.1.1	0x2efe	Standard query (0)	login.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:13.391812086 CET	192.168.2.4	1.1.1.1	0x21bd	Standard query (0)	login.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:14.681056976 CET	192.168.2.4	1.1.1.1	0x1689	Standard query (0)	api.login.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:14.681998014 CET	192.168.2.4	1.1.1.1	0xfe6a	Standard query (0)	api.login.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:15.448928118 CET	192.168.2.4	1.1.1.1	0xac53	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.449436903 CET	192.168.2.4	1.1.1.1	0xccd7	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:16.383610964 CET	192.168.2.4	1.1.1.1	0xf47c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:16.384558916 CET	192.168.2.4	1.1.1.1	0xfeb1	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:16.626111984 CET	192.168.2.4	1.1.1.1	0x6297	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:16.627098083 CET	192.168.2.4	1.1.1.1	0x82c1	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:17.714200020 CET	192.168.2.4	1.1.1.1	0xecb0	Standard query (0)	oidc.help.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:17.714593887 CET	192.168.2.4	1.1.1.1	0x9a78	Standard query (0)	oidc.help.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:17.768153906 CET	192.168.2.4	1.1.1.1	0x18c9	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:17.770262003 CET	192.168.2.4	1.1.1.1	0xcac5	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:18.234972000 CET	192.168.2.4	1.1.1.1	0x3b9a	Standard query (0)	login.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.235871077 CET	192.168.2.4	1.1.1.1	0x66e3	Standard query (0)	login.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:18.537472963 CET	192.168.2.4	1.1.1.1	0xa002	Standard query (0)	d1r51gnw3wu5rx.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.538244009 CET	192.168.2.4	1.1.1.1	0xf643	Standard query (0)	d1r51gnw3wu5rx.cloudfront.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:18.811361074 CET	192.168.2.4	1.1.1.1	0x7694	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.811743021 CET	192.168.2.4	1.1.1.1	0x84e8	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:18.822330952 CET	192.168.2.4	1.1.1.1	0x1a34	Standard query (0)	api.login.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.822782993 CET	192.168.2.4	1.1.1.1	0x1d94	Standard query (0)	api.login.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:20.954443932 CET	192.168.2.4	1.1.1.1	0xfd68	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:20.955152988 CET	192.168.2.4	1.1.1.1	0x2227	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:22.031778097 CET	192.168.2.4	1.1.1.1	0x2f0c	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.032147884 CET	192.168.2.4	1.1.1.1	0x311f	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:22.665328026 CET	192.168.2.4	1.1.1.1	0x5dcc	Standard query (0)	membership-cdn.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.665566921 CET	192.168.2.4	1.1.1.1	0x3fd7	Standard query (0)	membership-cdn.s3.amazonaws.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:22.693630934 CET	192.168.2.4	1.1.1.1	0x6001	Standard query (0)	checkoutnow.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.694041014 CET	192.168.2.4	1.1.1.1	0xaf60	Standard query (0)	checkoutnow.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:22.910300970 CET	192.168.2.4	1.1.1.1	0x3fe4	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.910528898 CET	192.168.2.4	1.1.1.1	0x5761	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:27.652710915 CET	192.168.2.4	1.1.1.1	0xffe	Standard query (0)	d1sjyfqescdy46.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:27.653074026 CET	192.168.2.4	1.1.1.1	0xffa9	Standard query (0)	d1sjyfqescdy46.cloudfront.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:28.029459000 CET	192.168.2.4	1.1.1.1	0x6856	Standard query (0)	membership-cdn.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.030138016 CET	192.168.2.4	1.1.1.1	0xf467	Standard query (0)	membership-cdn.s3.amazonaws.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:28.031091928 CET	192.168.2.4	1.1.1.1	0xf0dc	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.031431913 CET	192.168.2.4	1.1.1.1	0xb40c	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:28.403820038 CET	192.168.2.4	1.1.1.1	0x1e06	Standard query (0)	apis.falcon.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.404275894 CET	192.168.2.4	1.1.1.1	0x27c7	Standard query (0)	apis.falcon.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:28.538711071 CET	192.168.2.4	1.1.1.1	0xf2d2	Standard query (0)	8867627.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.539108992 CET	192.168.2.4	1.1.1.1	0x1cae	Standard query (0)	8867627.fls.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:28.564421892 CET	192.168.2.4	1.1.1.1	0xf5c8	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.564665079 CET	192.168.2.4	1.1.1.1	0xa643	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:28.652894020 CET	192.168.2.4	1.1.1.1	0x5bd5	Standard query (0)	13144298.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.653187990 CET	192.168.2.4	1.1.1.1	0x1a56	Standard query (0)	13144298.fls.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:29.118961096 CET	192.168.2.4	1.1.1.1	0x13ba	Standard query (0)	3p-geo.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.119302988 CET	192.168.2.4	1.1.1.1	0xe128	Standard query (0)	3p-geo.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:29.246424913 CET	192.168.2.4	1.1.1.1	0x3af2	Standard query (0)	aol.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.246424913 CET	192.168.2.4	1.1.1.1	0x269a	Standard query (0)	aol.tt.omtrdc.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:29.870419025 CET	192.168.2.4	1.1.1.1	0xfccb	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.871030092 CET	192.168.2.4	1.1.1.1	0xe8c4	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:30.058703899 CET	192.168.2.4	1.1.1.1	0x1364	Standard query (0)	mboxedge34.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:30.059176922 CET	192.168.2.4	1.1.1.1	0x3ced	Standard query (0)	mboxedge34.tt.omtrdc.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:30.394603968 CET	192.168.2.4	1.1.1.1	0x97f1	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:30.394898891 CET	192.168.2.4	1.1.1.1	0x5bbb	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:30.395956993 CET	192.168.2.4	1.1.1.1	0x8850	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:30.396321058 CET	192.168.2.4	1.1.1.1	0x16e5	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:31.406462908 CET	192.168.2.4	1.1.1.1	0x73fa	Standard query (0)	apis.falcon.aol.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.407007933 CET	192.168.2.4	1.1.1.1	0xe81f	Standard query (0)	apis.falcon.aol.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:31.604115963 CET	192.168.2.4	1.1.1.1	0x41e2	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.604521990 CET	192.168.2.4	1.1.1.1	0x6333	Standard query (0)	c2shb-oao.ssp.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:31.758924961 CET	192.168.2.4	1.1.1.1	0x3704	Standard query (0)	aol.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.759093046 CET	192.168.2.4	1.1.1.1	0xd96f	Standard query (0)	aol.tt.omtrdc.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:31.772025108 CET	192.168.2.4	1.1.1.1	0x72fe	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.772316933 CET	192.168.2.4	1.1.1.1	0xe17a	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:31.773776054 CET	192.168.2.4	1.1.1.1	0xa2ac	Standard query (0)	mboxedge34.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.774044037 CET	192.168.2.4	1.1.1.1	0x4a9b	Standard query (0)	mboxedge34.tt.omtrdc.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:32.621697903 CET	192.168.2.4	1.1.1.1	0x472b	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:32.621953964 CET	192.168.2.4	1.1.1.1	0x822a	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:32.928823948 CET	192.168.2.4	1.1.1.1	0x243d	Standard query (0)	pn.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:32.929027081 CET	192.168.2.4	1.1.1.1	0x140b	Standard query (0)	pn.ybp.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:33.561116934 CET	192.168.2.4	1.1.1.1	0x7fa8	Standard query (0)	us-east-1-web-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.561382055 CET	192.168.2.4	1.1.1.1	0x33da	Standard query (0)	us-east-1-web-oao.ssp.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:33.584446907 CET	192.168.2.4	1.1.1.1	0x11cd	Standard query (0)	products.gobankingrates.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.585455894 CET	192.168.2.4	1.1.1.1	0x4734	Standard query (0)	products.gobankingrates.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:33.723391056 CET	192.168.2.4	1.1.1.1	0x712e	Standard query (0)	cdn.js7k.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.723849058 CET	192.168.2.4	1.1.1.1	0x6fe9	Standard query (0)	cdn.js7k.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:34.062455893 CET	192.168.2.4	1.1.1.1	0x3a6	Standard query (0)	us-east-1-web-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:34.062798977 CET	192.168.2.4	1.1.1.1	0x56a6	Standard query (0)	us-east-1-web-oao.ssp.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:35.174880028 CET	192.168.2.4	1.1.1.1	0x922a	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:35.175429106 CET	192.168.2.4	1.1.1.1	0xd51a	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:36.019079924 CET	192.168.2.4	1.1.1.1	0x7a84	Standard query (0)	www.datadoghq-browser-agent.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.019435883 CET	192.168.2.4	1.1.1.1	0x9c43	Standard query (0)	www.datadoghq-browser-agent.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:36.212376118 CET	192.168.2.4	1.1.1.1	0x72ee	Standard query (0)	products.gobankingrates.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.212547064 CET	192.168.2.4	1.1.1.1	0x10d0	Standard query (0)	products.gobankingrates.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:36.627593994 CET	192.168.2.4	1.1.1.1	0x4e96	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.628165007 CET	192.168.2.4	1.1.1.1	0xc011	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:38.362999916 CET	192.168.2.4	1.1.1.1	0x55c0	Standard query (0)	bats.video.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:38.362999916 CET	192.168.2.4	1.1.1.1	0x37f9	Standard query (0)	bats.video.yahoo.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:38.660623074 CET	192.168.2.4	1.1.1.1	0xdd9e	Standard query (0)	cdn.rates.consumertrack.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:38.660841942 CET	192.168.2.4	1.1.1.1	0x863	Standard query (0)	cdn.rates.consumertrack.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:39.142021894 CET	192.168.2.4	1.1.1.1	0x2170	Standard query (0)	cdn.rates.consumertrack.com	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:39.142407894 CET	192.168.2.4	1.1.1.1	0x632e	Standard query (0)	cdn.rates.consumertrack.com	65	IN (0x0001)	false
Mar 4, 2024 00:27:40.040750027 CET	192.168.2.4	1.1.1.1	0x86d2	Standard query (0)	lg1.hb.yahoo.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.040940046 CET	192.168.2.4	1.1.1.1	0xf82b	Standard query (0)	lg1.hb.yahoo.net	65	IN (0x0001)	false
Mar 4, 2024 00:27:40.656908989 CET	192.168.2.4	1.1.1.1	0xd60c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.656999111 CET	192.168.2.4	1.1.1.1	0x886a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 4, 2024 00:26:14.930845976 CET	1.1.1.1	192.168.2.4	0xb78b	No error (0)	aolserv.pages.dev		172.66.47.75	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:14.930845976 CET	1.1.1.1	192.168.2.4	0xb78b	No error (0)	aolserv.pages.dev		172.66.44.181	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:14.931813955 CET	1.1.1.1	192.168.2.4	0x44bf	No error (0)	aolserv.pages.dev			65	IN (0x0001)	false
Mar 4, 2024 00:26:15.513135910 CET	1.1.1.1	192.168.2.4	0x44d9	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:15.513268948 CET	1.1.1.1	192.168.2.4	0x85a8	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:15.513268948 CET	1.1.1.1	192.168.2.4	0x85a8	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:15.513268948 CET	1.1.1.1	192.168.2.4	0x85a8	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:15.518511057 CET	1.1.1.1	192.168.2.4	0x2561	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:15.518511057 CET	1.1.1.1	192.168.2.4	0x2561	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:15.518511057 CET	1.1.1.1	192.168.2.4	0x2561	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:15.518511057 CET	1.1.1.1	192.168.2.4	0x2561	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:16.002116919 CET	1.1.1.1	192.168.2.4	0xba5b	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:16.002116919 CET	1.1.1.1	192.168.2.4	0xba5b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:16.002116919 CET	1.1.1.1	192.168.2.4	0xba5b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:16.002580881 CET	1.1.1.1	192.168.2.4	0x70cc	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:17.980382919 CET	1.1.1.1	192.168.2.4	0x99aa	No error (0)	www.google.com		142.251.40.196	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:17.980921984 CET	1.1.1.1	192.168.2.4	0xace1	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 4, 2024 00:26:27.818516970 CET	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	www.aol.com	media-router-aol1.prod.media.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:27.818516970 CET	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	media-router-aol1.prod.media.yahoo.com	media-router-aol1.prod.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:27.818516970 CET	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	media-router-aol1.prod.g03.yahoodns.net		76.13.32.141	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:27.821738958 CET	1.1.1.1	192.168.2.4	0x9dbb	No error (0)	www.aol.com	media-router-aol1.prod.media.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:27.821738958 CET	1.1.1.1	192.168.2.4	0x9dbb	No error (0)	media-router-aol1.prod.media.yahoo.com	media-router-aol1.prod.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:28.912410975 CET	1.1.1.1	192.168.2.4	0x9582	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:28.912410975 CET	1.1.1.1	192.168.2.4	0x9582	No error (0)	cs629.wpc.lambdacdn.net		192.229.211.36	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.913806915 CET	1.1.1.1	192.168.2.4	0x7d4c	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:28.913845062 CET	1.1.1.1	192.168.2.4	0xeb26	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:28.913845062 CET	1.1.1.1	192.168.2.4	0xeb26	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.913845062 CET	1.1.1.1	192.168.2.4	0xeb26	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.915134907 CET	1.1.1.1	192.168.2.4	0xa2bd	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:28.915955067 CET	1.1.1.1	192.168.2.4	0xeaee	No error (0)	consent.cmp.oath.com	cs550162656.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:28.915955067 CET	1.1.1.1	192.168.2.4	0xeaee	No error (0)	cs550162656.adn.psicdn.net		152.195.55.192	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.916383028 CET	1.1.1.1	192.168.2.4	0xe1d5	No error (0)	consent.cmp.oath.com	cs550162656.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:28.917218924 CET	1.1.1.1	192.168.2.4	0x88e	No error (0)	beap.gemini.yahoo.com	ds-beap1.cb.g01.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:28.917218924 CET	1.1.1.1	192.168.2.4	0x88e	No error (0)	ds-beap1.cb.g01.yahoodns.net		74.6.138.72	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:28.917254925 CET	1.1.1.1	192.168.2.4	0x2791	No error (0)	beap.gemini.yahoo.com	ds-beap1.cb.g01.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.009995937 CET	1.1.1.1	192.168.2.4	0x42d1	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.009995937 CET	1.1.1.1	192.168.2.4	0x42d1	No error (0)	fam-geo-atsv2.prod.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.010936975 CET	1.1.1.1	192.168.2.4	0xa5dc	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	guce.aol.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.198.146.149	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.206.94.134	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		44.194.74.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		3.95.78.73	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.164.80.50	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.238.219.49	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.6.135.141	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015083075 CET	1.1.1.1	192.168.2.4	0x60af	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		3.83.198.235	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015146017 CET	1.1.1.1	192.168.2.4	0x4ee1	No error (0)	guce.aol.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015146017 CET	1.1.1.1	192.168.2.4	0x4ee1	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.015178919 CET	1.1.1.1	192.168.2.4	0x935a	No error (0)	o.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.016827106 CET	1.1.1.1	192.168.2.4	0x74d	No error (0)	o.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.016827106 CET	1.1.1.1	192.168.2.4	0x74d	No error (0)	cs629.wpc.lambdacdn.net		192.229.211.36	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.116456985 CET	1.1.1.1	192.168.2.4	0x371e	No error (0)	jill.fc.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.116456985 CET	1.1.1.1	192.168.2.4	0x371e	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.116456985 CET	1.1.1.1	192.168.2.4	0x371e	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.117367983 CET	1.1.1.1	192.168.2.4	0x21cf	No error (0)	jill.fc.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.118504047 CET	1.1.1.1	192.168.2.4	0x964a	No error (0)	yep.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:29.118504047 CET	1.1.1.1	192.168.2.4	0x964a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.118504047 CET	1.1.1.1	192.168.2.4	0x964a	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:29.120543957 CET	1.1.1.1	192.168.2.4	0x8049	No error (0)	yep.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:32.959508896 CET	1.1.1.1	192.168.2.4	0x9aea	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:32.959508896 CET	1.1.1.1	192.168.2.4	0x9aea	No error (0)	cs629.wpc.lambdacdn.net		192.229.211.36	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.961034060 CET	1.1.1.1	192.168.2.4	0x4c2b	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	guce.aol.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		35.170.143.77	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.45.92.120	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.3.141.53	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.197.231.84	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		54.221.208.97	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.23.45.237	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.238.97.214	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.977722883 CET	1.1.1.1	192.168.2.4	0xe7ac	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		34.238.219.49	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:32.978791952 CET	1.1.1.1	192.168.2.4	0x5482	No error (0)	guce.aol.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:32.978791952 CET	1.1.1.1	192.168.2.4	0x5482	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.017366886 CET	1.1.1.1	192.168.2.4	0x7848	No error (0)	hb.yahoo.net		23.40.179.72	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.017366886 CET	1.1.1.1	192.168.2.4	0x7848	No error (0)	hb.yahoo.net		23.40.179.9	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.017366886 CET	1.1.1.1	192.168.2.4	0x7848	No error (0)	hb.yahoo.net		23.40.179.70	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.017366886 CET	1.1.1.1	192.168.2.4	0x7848	No error (0)	hb.yahoo.net		23.40.179.4	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.017366886 CET	1.1.1.1	192.168.2.4	0x7848	No error (0)	hb.yahoo.net		23.40.179.5	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.017366886 CET	1.1.1.1	192.168.2.4	0x7848	No error (0)	hb.yahoo.net		23.40.179.6	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.017366886 CET	1.1.1.1	192.168.2.4	0x7848	No error (0)	hb.yahoo.net		23.40.179.78	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.017366886 CET	1.1.1.1	192.168.2.4	0x7848	No error (0)	hb.yahoo.net		23.40.179.76	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.352022886 CET	1.1.1.1	192.168.2.4	0xe4de	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.352022886 CET	1.1.1.1	192.168.2.4	0xe4de	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.352022886 CET	1.1.1.1	192.168.2.4	0xe4de	No error (0)	cs964199420.wpc.mucdn.net		152.199.24.48	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.352058887 CET	1.1.1.1	192.168.2.4	0x6ce1	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.352058887 CET	1.1.1.1	192.168.2.4	0x6ce1	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.565062046 CET	1.1.1.1	192.168.2.4	0xbb59	No error (0)	sb.scorecardresearch.com		18.238.49.52	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.565062046 CET	1.1.1.1	192.168.2.4	0xbb59	No error (0)	sb.scorecardresearch.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.565062046 CET	1.1.1.1	192.168.2.4	0xbb59	No error (0)	sb.scorecardresearch.com		18.238.49.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.565062046 CET	1.1.1.1	192.168.2.4	0xbb59	No error (0)	sb.scorecardresearch.com		18.238.49.74	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.613972902 CET	1.1.1.1	192.168.2.4	0xbf40	No error (0)	membernotifications.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.613972902 CET	1.1.1.1	192.168.2.4	0xbf40	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.613972902 CET	1.1.1.1	192.168.2.4	0xbf40	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.614656925 CET	1.1.1.1	192.168.2.4	0xbd67	No error (0)	membernotifications.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.668401957 CET	1.1.1.1	192.168.2.4	0x5699	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.668401957 CET	1.1.1.1	192.168.2.4	0x5699	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.668401957 CET	1.1.1.1	192.168.2.4	0x5699	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.668401957 CET	1.1.1.1	192.168.2.4	0x5699	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		52.4.33.45	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.668401957 CET	1.1.1.1	192.168.2.4	0x5699	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.92.156.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.668401957 CET	1.1.1.1	192.168.2.4	0x5699	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.230.217.116	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.668401957 CET	1.1.1.1	192.168.2.4	0x5699	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		34.236.83.94	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.669558048 CET	1.1.1.1	192.168.2.4	0x2b8f	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.669639111 CET	1.1.1.1	192.168.2.4	0xa7df	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.669639111 CET	1.1.1.1	192.168.2.4	0xa7df	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.669639111 CET	1.1.1.1	192.168.2.4	0xa7df	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.671576023 CET	1.1.1.1	192.168.2.4	0x6a00	No error (0)	m.hb.yahoo.net		34.111.85.214	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.708965063 CET	1.1.1.1	192.168.2.4	0xc30a	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.708965063 CET	1.1.1.1	192.168.2.4	0xc30a	No error (0)	securepubads46.g.doubleclick.net		142.251.35.162	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.710069895 CET	1.1.1.1	192.168.2.4	0x9958	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.739037991 CET	1.1.1.1	192.168.2.4	0x7c62	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.739037991 CET	1.1.1.1	192.168.2.4	0x7c62	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.739037991 CET	1.1.1.1	192.168.2.4	0x7c62	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.739037991 CET	1.1.1.1	192.168.2.4	0x7c62	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.739037991 CET	1.1.1.1	192.168.2.4	0x7c62	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.739049911 CET	1.1.1.1	192.168.2.4	0xb862	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.739126921 CET	1.1.1.1	192.168.2.4	0xc2af	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.762938023 CET	1.1.1.1	192.168.2.4	0xa6d1	No error (0)	rtb-cache.hb.yahoo.net		34.110.207.99	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.802401066 CET	1.1.1.1	192.168.2.4	0xf4b0	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.802587032 CET	1.1.1.1	192.168.2.4	0x5675	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.802587032 CET	1.1.1.1	192.168.2.4	0x5675	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.802587032 CET	1.1.1.1	192.168.2.4	0x5675	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.909584045 CET	1.1.1.1	192.168.2.4	0x82ba	No error (0)	3p-udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:34.909584045 CET	1.1.1.1	192.168.2.4	0x82ba	No error (0)	udc-ats.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:34.909898043 CET	1.1.1.1	192.168.2.4	0x7da6	No error (0)	3p-udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:35.032475948 CET	1.1.1.1	192.168.2.4	0xc939	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:35.032475948 CET	1.1.1.1	192.168.2.4	0xc939	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:35.032475948 CET	1.1.1.1	192.168.2.4	0xc939	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:35.032475948 CET	1.1.1.1	192.168.2.4	0xc939	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.032475948 CET	1.1.1.1	192.168.2.4	0xc939	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.033097982 CET	1.1.1.1	192.168.2.4	0x2e38	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:35.033097982 CET	1.1.1.1	192.168.2.4	0x2e38	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:35.033097982 CET	1.1.1.1	192.168.2.4	0x2e38	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:35.164464951 CET	1.1.1.1	192.168.2.4	0x3f2f	No error (0)	hb.yahoo.net		104.102.251.136	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.164464951 CET	1.1.1.1	192.168.2.4	0x3f2f	No error (0)	hb.yahoo.net		104.102.251.154	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.164464951 CET	1.1.1.1	192.168.2.4	0x3f2f	No error (0)	hb.yahoo.net		104.102.251.208	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.164464951 CET	1.1.1.1	192.168.2.4	0x3f2f	No error (0)	hb.yahoo.net		104.102.251.153	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.164464951 CET	1.1.1.1	192.168.2.4	0x3f2f	No error (0)	hb.yahoo.net		104.102.251.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.164464951 CET	1.1.1.1	192.168.2.4	0x3f2f	No error (0)	hb.yahoo.net		104.102.251.179	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.164464951 CET	1.1.1.1	192.168.2.4	0x3f2f	No error (0)	hb.yahoo.net		104.102.251.161	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.664725065 CET	1.1.1.1	192.168.2.4	0xf607	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:35.664725065 CET	1.1.1.1	192.168.2.4	0xf607	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.664725065 CET	1.1.1.1	192.168.2.4	0xf607	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:35.664880991 CET	1.1.1.1	192.168.2.4	0x909f	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:36.022820950 CET	1.1.1.1	192.168.2.4	0x4211	No error (0)	www.aol.com	media-router-aol1.prod.media.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:36.022820950 CET	1.1.1.1	192.168.2.4	0x4211	No error (0)	media-router-aol1.prod.media.yahoo.com	media-router-aol1.prod.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:36.022820950 CET	1.1.1.1	192.168.2.4	0x4211	No error (0)	media-router-aol1.prod.g03.yahoodns.net		76.13.32.141	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:36.023823023 CET	1.1.1.1	192.168.2.4	0x8a87	No error (0)	www.aol.com	media-router-aol1.prod.media.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:36.023823023 CET	1.1.1.1	192.168.2.4	0x8a87	No error (0)	media-router-aol1.prod.media.yahoo.com	media-router-aol1.prod.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:36.057646990 CET	1.1.1.1	192.168.2.4	0xca6e	No error (0)	sb.scorecardresearch.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:36.057646990 CET	1.1.1.1	192.168.2.4	0xca6e	No error (0)	sb.scorecardresearch.com		18.238.49.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:36.057646990 CET	1.1.1.1	192.168.2.4	0xca6e	No error (0)	sb.scorecardresearch.com		18.238.49.52	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:36.057646990 CET	1.1.1.1	192.168.2.4	0xca6e	No error (0)	sb.scorecardresearch.com		18.238.49.74	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:36.072145939 CET	1.1.1.1	192.168.2.4	0x2f29	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:36.878808975 CET	1.1.1.1	192.168.2.4	0xba8a	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:36.879117012 CET	1.1.1.1	192.168.2.4	0x22ef	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:36.879117012 CET	1.1.1.1	192.168.2.4	0x22ef	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:36.879117012 CET	1.1.1.1	192.168.2.4	0x22ef	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:37.661503077 CET	1.1.1.1	192.168.2.4	0xb56c	No error (0)	ncp-gw-video.media.yahoo.com	ncp-gw-video.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:37.661503077 CET	1.1.1.1	192.168.2.4	0xb56c	No error (0)	ncp-gw-video.g03.yahoodns.net		74.6.143.22	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:37.668714046 CET	1.1.1.1	192.168.2.4	0x2e	No error (0)	ncp-gw-video.media.yahoo.com	ncp-gw-video.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:37.704037905 CET	1.1.1.1	192.168.2.4	0x7bf6	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:37.704037905 CET	1.1.1.1	192.168.2.4	0x7bf6	No error (0)	geo-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:37.705317974 CET	1.1.1.1	192.168.2.4	0x714a	No error (0)	geo.yahoo.com	geo-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.197457075 CET	1.1.1.1	192.168.2.4	0x2a16	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.197657108 CET	1.1.1.1	192.168.2.4	0xc65a	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.197657108 CET	1.1.1.1	192.168.2.4	0xc65a	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.197657108 CET	1.1.1.1	192.168.2.4	0xc65a	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.197657108 CET	1.1.1.1	192.168.2.4	0xc65a	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.197657108 CET	1.1.1.1	192.168.2.4	0xc65a	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.201529026 CET	1.1.1.1	192.168.2.4	0x229	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.201529026 CET	1.1.1.1	192.168.2.4	0x229	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.202171087 CET	1.1.1.1	192.168.2.4	0x9ebb	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Mar 4, 2024 00:26:38.205198050 CET	1.1.1.1	192.168.2.4	0xc833	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.205198050 CET	1.1.1.1	192.168.2.4	0xc833	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.205198050 CET	1.1.1.1	192.168.2.4	0xc833	No error (0)	gob-njr3.pubmnet.com		104.36.115.111	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.207988977 CET	1.1.1.1	192.168.2.4	0xc86e	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.207988977 CET	1.1.1.1	192.168.2.4	0xc86e	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.341064930 CET	1.1.1.1	192.168.2.4	0x5ba8	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.341064930 CET	1.1.1.1	192.168.2.4	0x5ba8	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.341064930 CET	1.1.1.1	192.168.2.4	0x5ba8	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.341064930 CET	1.1.1.1	192.168.2.4	0x5ba8	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.341064930 CET	1.1.1.1	192.168.2.4	0x5ba8	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.341700077 CET	1.1.1.1	192.168.2.4	0xbf96	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.342452049 CET	1.1.1.1	192.168.2.4	0xe6f3	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.343518972 CET	1.1.1.1	192.168.2.4	0xe516	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.349054098 CET	1.1.1.1	192.168.2.4	0x743a	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.349543095 CET	1.1.1.1	192.168.2.4	0xe173	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.349543095 CET	1.1.1.1	192.168.2.4	0xe173	No error (0)	securepubads46.g.doubleclick.net		142.251.40.98	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.398142099 CET	1.1.1.1	192.168.2.4	0x8b81	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.398581982 CET	1.1.1.1	192.168.2.4	0x12c9	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:38.409145117 CET	1.1.1.1	192.168.2.4	0xb764	No error (0)	lg1.hb.yahoo.net		23.40.179.59	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.409145117 CET	1.1.1.1	192.168.2.4	0xb764	No error (0)	lg1.hb.yahoo.net		23.40.179.64	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.409145117 CET	1.1.1.1	192.168.2.4	0xb764	No error (0)	lg1.hb.yahoo.net		23.40.179.54	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.409145117 CET	1.1.1.1	192.168.2.4	0xb764	No error (0)	lg1.hb.yahoo.net		23.40.179.56	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.409145117 CET	1.1.1.1	192.168.2.4	0xb764	No error (0)	lg1.hb.yahoo.net		23.40.179.62	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.409145117 CET	1.1.1.1	192.168.2.4	0xb764	No error (0)	lg1.hb.yahoo.net		23.40.179.58	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.409145117 CET	1.1.1.1	192.168.2.4	0xb764	No error (0)	lg1.hb.yahoo.net		23.40.179.52	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:38.409145117 CET	1.1.1.1	192.168.2.4	0xb764	No error (0)	lg1.hb.yahoo.net		23.40.179.57	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:39.287106037 CET	1.1.1.1	192.168.2.4	0xb37e	No error (0)	contextual.media.net		23.47.168.66	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:39.289280891 CET	1.1.1.1	192.168.2.4	0xb9b5	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:39.289280891 CET	1.1.1.1	192.168.2.4	0xb9b5	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:39.289736032 CET	1.1.1.1	192.168.2.4	0x211e	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
Mar 4, 2024 00:26:39.667426109 CET	1.1.1.1	192.168.2.4	0x7c71	No error (0)	pagead-googlehosted.l.google.com		142.251.41.1	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.492734909 CET	1.1.1.1	192.168.2.4	0x782a	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.492734909 CET	1.1.1.1	192.168.2.4	0x782a	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.492734909 CET	1.1.1.1	192.168.2.4	0x782a	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.492734909 CET	1.1.1.1	192.168.2.4	0x782a	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.492734909 CET	1.1.1.1	192.168.2.4	0x782a	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.493232965 CET	1.1.1.1	192.168.2.4	0x7759	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.493753910 CET	1.1.1.1	192.168.2.4	0xae5a	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.493753910 CET	1.1.1.1	192.168.2.4	0xae5a	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.493753910 CET	1.1.1.1	192.168.2.4	0xae5a	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.493753910 CET	1.1.1.1	192.168.2.4	0xae5a	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.493753910 CET	1.1.1.1	192.168.2.4	0xae5a	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.494153023 CET	1.1.1.1	192.168.2.4	0xf2b3	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.494153023 CET	1.1.1.1	192.168.2.4	0xf2b3	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.494153023 CET	1.1.1.1	192.168.2.4	0xf2b3	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.499114037 CET	1.1.1.1	192.168.2.4	0xc4c7	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.499114037 CET	1.1.1.1	192.168.2.4	0xc4c7	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:40.500047922 CET	1.1.1.1	192.168.2.4	0xcb49	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 4, 2024 00:26:40.500526905 CET	1.1.1.1	192.168.2.4	0xf3f0	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.500526905 CET	1.1.1.1	192.168.2.4	0xf3f0	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.500941992 CET	1.1.1.1	192.168.2.4	0x3e3e	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:40.500941992 CET	1.1.1.1	192.168.2.4	0x3e3e	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.135242939 CET	1.1.1.1	192.168.2.4	0xdccd	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.135242939 CET	1.1.1.1	192.168.2.4	0xdccd	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.135242939 CET	1.1.1.1	192.168.2.4	0xdccd	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.135242939 CET	1.1.1.1	192.168.2.4	0xdccd	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.135242939 CET	1.1.1.1	192.168.2.4	0xdccd	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.135668039 CET	1.1.1.1	192.168.2.4	0x141a	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.136713028 CET	1.1.1.1	192.168.2.4	0x94eb	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.137976885 CET	1.1.1.1	192.168.2.4	0x6f29	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.137990952 CET	1.1.1.1	192.168.2.4	0x9667	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.137990952 CET	1.1.1.1	192.168.2.4	0x9667	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.137990952 CET	1.1.1.1	192.168.2.4	0x9667	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.137990952 CET	1.1.1.1	192.168.2.4	0x9667	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.137990952 CET	1.1.1.1	192.168.2.4	0x9667	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.138001919 CET	1.1.1.1	192.168.2.4	0x2954	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.138001919 CET	1.1.1.1	192.168.2.4	0x2954	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.206.105.187	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.237.57.219	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.210.148.34	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.228.41.144	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.218.25.210	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.218.15.45	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.219.111.117	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147161007 CET	1.1.1.1	192.168.2.4	0x9df4	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.237.180.133	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147413015 CET	1.1.1.1	192.168.2.4	0x653d	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147413015 CET	1.1.1.1	192.168.2.4	0x653d	No error (0)	vap.lijit.com	nae.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147413015 CET	1.1.1.1	192.168.2.4	0x653d	No error (0)	nae.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147425890 CET	1.1.1.1	192.168.2.4	0xb364	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147425890 CET	1.1.1.1	192.168.2.4	0xb364	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147425890 CET	1.1.1.1	192.168.2.4	0xb364	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147437096 CET	1.1.1.1	192.168.2.4	0xb993	No error (0)	visitor.omnitagjs.com	visitor-usa02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147437096 CET	1.1.1.1	192.168.2.4	0xb993	No error (0)	visitor-usa02.omnitagjs.com		195.244.31.11	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147437096 CET	1.1.1.1	192.168.2.4	0xb993	No error (0)	visitor-usa02.omnitagjs.com		195.244.31.10	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147448063 CET	1.1.1.1	192.168.2.4	0x9369	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147448063 CET	1.1.1.1	192.168.2.4	0x9369	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147448063 CET	1.1.1.1	192.168.2.4	0x9369	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147466898 CET	1.1.1.1	192.168.2.4	0x30d1	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147479057 CET	1.1.1.1	192.168.2.4	0xcd87	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147490978 CET	1.1.1.1	192.168.2.4	0xcfbf	No error (0)	cs.media.net		23.199.48.23	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.147639036 CET	1.1.1.1	192.168.2.4	0x4851	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.148411989 CET	1.1.1.1	192.168.2.4	0x9472	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.148411989 CET	1.1.1.1	192.168.2.4	0x9472	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.148411989 CET	1.1.1.1	192.168.2.4	0x9472	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.148411989 CET	1.1.1.1	192.168.2.4	0x9472	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.151036024 CET	1.1.1.1	192.168.2.4	0x9932	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.151036024 CET	1.1.1.1	192.168.2.4	0x9932	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.151421070 CET	1.1.1.1	192.168.2.4	0x2a61	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.151421070 CET	1.1.1.1	192.168.2.4	0x2a61	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.151421070 CET	1.1.1.1	192.168.2.4	0x2a61	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.151421070 CET	1.1.1.1	192.168.2.4	0x2a61	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.158833981 CET	1.1.1.1	192.168.2.4	0xcfb6	No error (0)	players.brightcove.net	players.brightcove.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.159842014 CET	1.1.1.1	192.168.2.4	0xe826	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.159842014 CET	1.1.1.1	192.168.2.4	0xe826	No error (0)	image6v2.pubmnet.com	pugm88000nfc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.159842014 CET	1.1.1.1	192.168.2.4	0xe826	No error (0)	pugm88000nfc.pubmnet.com		104.36.115.113	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:42.160206079 CET	1.1.1.1	192.168.2.4	0xf91e	No error (0)	players.brightcove.net	players.brightcove.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.160756111 CET	1.1.1.1	192.168.2.4	0x6419	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:42.160756111 CET	1.1.1.1	192.168.2.4	0x6419	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.222070932 CET	1.1.1.1	192.168.2.4	0x46ef	No error (0)	hbx.media.net		23.199.48.23	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.224266052 CET	1.1.1.1	192.168.2.4	0xd428	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.225790024 CET	1.1.1.1	192.168.2.4	0xe43a	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.232598066 CET	1.1.1.1	192.168.2.4	0xe783	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.232744932 CET	1.1.1.1	192.168.2.4	0xf09f	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.232744932 CET	1.1.1.1	192.168.2.4	0xf09f	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.233549118 CET	1.1.1.1	192.168.2.4	0x48f9	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.234445095 CET	1.1.1.1	192.168.2.4	0x29b4	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.241070032 CET	1.1.1.1	192.168.2.4	0x2a3f	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.242280960 CET	1.1.1.1	192.168.2.4	0x23ac	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.258080006 CET	1.1.1.1	192.168.2.4	0xb2f8	No error (0)	cm.g.doubleclick.net		142.251.41.2	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.258203030 CET	1.1.1.1	192.168.2.4	0x5cfd	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.300174952 CET	1.1.1.1	192.168.2.4	0xd23e	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.300174952 CET	1.1.1.1	192.168.2.4	0xd23e	No error (0)	cdn.w55c.net		54.211.182.170	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.300174952 CET	1.1.1.1	192.168.2.4	0xd23e	No error (0)	cdn.w55c.net		54.209.215.183	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.300174952 CET	1.1.1.1	192.168.2.4	0xd23e	No error (0)	cdn.w55c.net		54.196.48.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.300174952 CET	1.1.1.1	192.168.2.4	0xd23e	No error (0)	cdn.w55c.net		52.4.8.36	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.300174952 CET	1.1.1.1	192.168.2.4	0xd23e	No error (0)	cdn.w55c.net		54.156.131.113	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.300174952 CET	1.1.1.1	192.168.2.4	0xd23e	No error (0)	cdn.w55c.net		52.7.155.131	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.300174952 CET	1.1.1.1	192.168.2.4	0xd23e	No error (0)	cdn.w55c.net		54.196.108.52	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.300174952 CET	1.1.1.1	192.168.2.4	0xd23e	No error (0)	cdn.w55c.net		52.55.162.55	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.301552057 CET	1.1.1.1	192.168.2.4	0xc752	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.302318096 CET	1.1.1.1	192.168.2.4	0x745a	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.302800894 CET	1.1.1.1	192.168.2.4	0xc45c	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.302800894 CET	1.1.1.1	192.168.2.4	0xc45c	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.556230068 CET	1.1.1.1	192.168.2.4	0x29c1	No error (0)	m.hb.yahoo.net		34.111.85.214	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.557214975 CET	1.1.1.1	192.168.2.4	0x174f	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.557554960 CET	1.1.1.1	192.168.2.4	0xbc10	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.557554960 CET	1.1.1.1	192.168.2.4	0xbc10	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.558573008 CET	1.1.1.1	192.168.2.4	0xccea	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Mar 4, 2024 00:26:43.560434103 CET	1.1.1.1	192.168.2.4	0x8b8d	No error (0)	ncp-gw-video.media.yahoo.com	ncp-gw-video.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.562820911 CET	1.1.1.1	192.168.2.4	0xe5e6	No error (0)	lg1.hb.yahoo.net		23.40.179.68	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.562820911 CET	1.1.1.1	192.168.2.4	0xe5e6	No error (0)	lg1.hb.yahoo.net		23.40.179.72	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.562820911 CET	1.1.1.1	192.168.2.4	0xe5e6	No error (0)	lg1.hb.yahoo.net		23.40.179.69	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.562820911 CET	1.1.1.1	192.168.2.4	0xe5e6	No error (0)	lg1.hb.yahoo.net		23.40.179.76	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.562820911 CET	1.1.1.1	192.168.2.4	0xe5e6	No error (0)	lg1.hb.yahoo.net		23.40.179.73	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.562820911 CET	1.1.1.1	192.168.2.4	0xe5e6	No error (0)	lg1.hb.yahoo.net		23.40.179.78	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.562820911 CET	1.1.1.1	192.168.2.4	0xe5e6	No error (0)	lg1.hb.yahoo.net		23.40.179.70	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.562820911 CET	1.1.1.1	192.168.2.4	0xe5e6	No error (0)	lg1.hb.yahoo.net		23.40.179.4	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.579885006 CET	1.1.1.1	192.168.2.4	0x9b17	No error (0)	ncp-gw-video.media.yahoo.com	ncp-gw-video.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.579885006 CET	1.1.1.1	192.168.2.4	0x9b17	No error (0)	ncp-gw-video.g03.yahoodns.net		74.6.143.22	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:43.809437990 CET	1.1.1.1	192.168.2.4	0xd262	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:43.810430050 CET	1.1.1.1	192.168.2.4	0x583e	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:44.256659031 CET	1.1.1.1	192.168.2.4	0x4cac	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:44.256913900 CET	1.1.1.1	192.168.2.4	0x47fd	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:44.698281050 CET	1.1.1.1	192.168.2.4	0xf74b	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:44.698281050 CET	1.1.1.1	192.168.2.4	0xf74b	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.698281050 CET	1.1.1.1	192.168.2.4	0xf74b	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.698281050 CET	1.1.1.1	192.168.2.4	0xf74b	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.698281050 CET	1.1.1.1	192.168.2.4	0xf74b	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.699656010 CET	1.1.1.1	192.168.2.4	0x50e5	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:44.845031977 CET	1.1.1.1	192.168.2.4	0x4a68	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:44.845031977 CET	1.1.1.1	192.168.2.4	0x4a68	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.845031977 CET	1.1.1.1	192.168.2.4	0x4a68	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.845031977 CET	1.1.1.1	192.168.2.4	0x4a68	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.845031977 CET	1.1.1.1	192.168.2.4	0x4a68	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:44.847683907 CET	1.1.1.1	192.168.2.4	0xb8f2	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:45.430926085 CET	1.1.1.1	192.168.2.4	0xd2d0	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.3	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.430926085 CET	1.1.1.1	192.168.2.4	0xd2d0	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.125	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.430926085 CET	1.1.1.1	192.168.2.4	0xd2d0	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.136	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.430926085 CET	1.1.1.1	192.168.2.4	0xd2d0	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.139	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.432709932 CET	1.1.1.1	192.168.2.4	0xbbb0	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:45.432709932 CET	1.1.1.1	192.168.2.4	0xbbb0	No error (0)	pool-bid-gce-us.dorpat.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.434045076 CET	1.1.1.1	192.168.2.4	0x9cfd	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:45.758826017 CET	1.1.1.1	192.168.2.4	0x1987	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:45.758888006 CET	1.1.1.1	192.168.2.4	0x713c	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:45.762712002 CET	1.1.1.1	192.168.2.4	0x8b4e	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:45.762712002 CET	1.1.1.1	192.168.2.4	0x8b4e	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:45.763458967 CET	1.1.1.1	192.168.2.4	0xe057	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.050775051 CET	1.1.1.1	192.168.2.4	0xfdc5	No error (0)	tsdtocl.com		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.050775051 CET	1.1.1.1	192.168.2.4	0xfdc5	No error (0)	tsdtocl.com		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.050775051 CET	1.1.1.1	192.168.2.4	0xfdc5	No error (0)	tsdtocl.com		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.050775051 CET	1.1.1.1	192.168.2.4	0xfdc5	No error (0)	tsdtocl.com		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.063206911 CET	1.1.1.1	192.168.2.4	0xcbf9	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.063206911 CET	1.1.1.1	192.168.2.4	0xcbf9	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.063206911 CET	1.1.1.1	192.168.2.4	0xcbf9	No error (0)	cs964199420.wpc.mucdn.net		152.199.24.48	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.063693047 CET	1.1.1.1	192.168.2.4	0x6990	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.063693047 CET	1.1.1.1	192.168.2.4	0x6990	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.148811102 CET	1.1.1.1	192.168.2.4	0xfc55	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.148811102 CET	1.1.1.1	192.168.2.4	0xfc55	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.148811102 CET	1.1.1.1	192.168.2.4	0xfc55	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.149808884 CET	1.1.1.1	192.168.2.4	0xcd69	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.149808884 CET	1.1.1.1	192.168.2.4	0xcd69	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.154021025 CET	1.1.1.1	192.168.2.4	0xb555	No error (0)	metrics.brightcove.com		35.244.232.184	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.358947039 CET	1.1.1.1	192.168.2.4	0x94ee	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.359154940 CET	1.1.1.1	192.168.2.4	0xc4b2	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.409034967 CET	1.1.1.1	192.168.2.4	0x3e31	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.410358906 CET	1.1.1.1	192.168.2.4	0x37d7	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.410358906 CET	1.1.1.1	192.168.2.4	0x37d7	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.410358906 CET	1.1.1.1	192.168.2.4	0x37d7	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.410358906 CET	1.1.1.1	192.168.2.4	0x37d7	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.410358906 CET	1.1.1.1	192.168.2.4	0x37d7	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.544512987 CET	1.1.1.1	192.168.2.4	0x66e2	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.544512987 CET	1.1.1.1	192.168.2.4	0x66e2	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.544512987 CET	1.1.1.1	192.168.2.4	0x66e2	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.545006990 CET	1.1.1.1	192.168.2.4	0x56a1	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.593801022 CET	1.1.1.1	192.168.2.4	0x28cb	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.594331026 CET	1.1.1.1	192.168.2.4	0xfcbc	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.594331026 CET	1.1.1.1	192.168.2.4	0xfcbc	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828355074 CET	1.1.1.1	192.168.2.4	0xf5d6	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828682899 CET	1.1.1.1	192.168.2.4	0x4759	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828682899 CET	1.1.1.1	192.168.2.4	0x4759	No error (0)	idaas-ext.cph.liveintent.com		52.86.42.47	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828682899 CET	1.1.1.1	192.168.2.4	0x4759	No error (0)	idaas-ext.cph.liveintent.com		44.199.17.254	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828682899 CET	1.1.1.1	192.168.2.4	0x4759	No error (0)	idaas-ext.cph.liveintent.com		35.168.220.0	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828682899 CET	1.1.1.1	192.168.2.4	0x4759	No error (0)	idaas-ext.cph.liveintent.com		52.202.23.212	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828682899 CET	1.1.1.1	192.168.2.4	0x4759	No error (0)	idaas-ext.cph.liveintent.com		3.225.42.164	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828682899 CET	1.1.1.1	192.168.2.4	0x4759	No error (0)	idaas-ext.cph.liveintent.com		3.213.30.39	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828682899 CET	1.1.1.1	192.168.2.4	0x4759	No error (0)	idaas-ext.cph.liveintent.com		3.218.15.224	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.828682899 CET	1.1.1.1	192.168.2.4	0x4759	No error (0)	idaas-ext.cph.liveintent.com		3.229.253.235	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.872376919 CET	1.1.1.1	192.168.2.4	0x8914	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.901451111 CET	1.1.1.1	192.168.2.4	0x5c74	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.901451111 CET	1.1.1.1	192.168.2.4	0x5c74	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.902383089 CET	1.1.1.1	192.168.2.4	0x85ae	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 4, 2024 00:26:46.902448893 CET	1.1.1.1	192.168.2.4	0xfc16	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.902448893 CET	1.1.1.1	192.168.2.4	0xfc16	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.902448893 CET	1.1.1.1	192.168.2.4	0xfc16	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.902448893 CET	1.1.1.1	192.168.2.4	0xfc16	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.902448893 CET	1.1.1.1	192.168.2.4	0xfc16	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:46.906536102 CET	1.1.1.1	192.168.2.4	0xf82f	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.906691074 CET	1.1.1.1	192.168.2.4	0xc17c	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:46.909461975 CET	1.1.1.1	192.168.2.4	0x1b9e	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.211468935 CET	1.1.1.1	192.168.2.4	0x9ffc	No error (0)	sync.intentiq.com		18.173.219.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.211468935 CET	1.1.1.1	192.168.2.4	0x9ffc	No error (0)	sync.intentiq.com		18.173.219.5	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.211468935 CET	1.1.1.1	192.168.2.4	0x9ffc	No error (0)	sync.intentiq.com		18.173.219.12	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.211468935 CET	1.1.1.1	192.168.2.4	0x9ffc	No error (0)	sync.intentiq.com		18.173.219.51	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.251857996 CET	1.1.1.1	192.168.2.4	0xe3b2	No error (0)	match.prod.bidr.io		52.71.191.116	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.251857996 CET	1.1.1.1	192.168.2.4	0xe3b2	No error (0)	match.prod.bidr.io		52.7.25.40	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.251857996 CET	1.1.1.1	192.168.2.4	0xe3b2	No error (0)	match.prod.bidr.io		52.55.200.220	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.251857996 CET	1.1.1.1	192.168.2.4	0xe3b2	No error (0)	match.prod.bidr.io		54.144.44.5	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.251857996 CET	1.1.1.1	192.168.2.4	0xe3b2	No error (0)	match.prod.bidr.io		52.73.72.64	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.251857996 CET	1.1.1.1	192.168.2.4	0xe3b2	No error (0)	match.prod.bidr.io		52.72.52.29	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.251857996 CET	1.1.1.1	192.168.2.4	0xe3b2	No error (0)	match.prod.bidr.io		54.157.187.206	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.251857996 CET	1.1.1.1	192.168.2.4	0xe3b2	No error (0)	match.prod.bidr.io		54.157.153.111	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.269469023 CET	1.1.1.1	192.168.2.4	0xb8ee	No error (0)	ssp-sync.criteo.com	ssp-sync.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.269944906 CET	1.1.1.1	192.168.2.4	0x5a9b	No error (0)	ssp-sync.criteo.com	ssp-sync.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.269944906 CET	1.1.1.1	192.168.2.4	0x5a9b	No error (0)	ssp-sync.va1.vip.prod.criteo.com		74.119.119.73	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.285206079 CET	1.1.1.1	192.168.2.4	0x61d7	No error (0)	aol-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.285522938 CET	1.1.1.1	192.168.2.4	0x491f	No error (0)	aol-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.368031025 CET	1.1.1.1	192.168.2.4	0xd946	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.368990898 CET	1.1.1.1	192.168.2.4	0x2417	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.368990898 CET	1.1.1.1	192.168.2.4	0x2417	No error (0)	noa-atsv2.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.393840075 CET	1.1.1.1	192.168.2.4	0xf969	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.396501064 CET	1.1.1.1	192.168.2.4	0xc56e	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.401282072 CET	1.1.1.1	192.168.2.4	0x99bd	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.401282072 CET	1.1.1.1	192.168.2.4	0x99bd	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.401282072 CET	1.1.1.1	192.168.2.4	0x99bd	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.405884027 CET	1.1.1.1	192.168.2.4	0x3e61	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.405884027 CET	1.1.1.1	192.168.2.4	0x3e61	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.196.218.225	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.405884027 CET	1.1.1.1	192.168.2.4	0x3e61	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.72.99.63	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.405884027 CET	1.1.1.1	192.168.2.4	0x3e61	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.169.189.143	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.405884027 CET	1.1.1.1	192.168.2.4	0x3e61	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.0.238.104	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.406461954 CET	1.1.1.1	192.168.2.4	0x8c52	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.409156084 CET	1.1.1.1	192.168.2.4	0xa417	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.409156084 CET	1.1.1.1	192.168.2.4	0xa417	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.409156084 CET	1.1.1.1	192.168.2.4	0xa417	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.409156084 CET	1.1.1.1	192.168.2.4	0xa417	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.409156084 CET	1.1.1.1	192.168.2.4	0xa417	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.410456896 CET	1.1.1.1	192.168.2.4	0xff9d	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.410456896 CET	1.1.1.1	192.168.2.4	0xff9d	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.410456896 CET	1.1.1.1	192.168.2.4	0xff9d	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.430749893 CET	1.1.1.1	192.168.2.4	0x2bef	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.430749893 CET	1.1.1.1	192.168.2.4	0x2bef	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.430749893 CET	1.1.1.1	192.168.2.4	0x2bef	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.431224108 CET	1.1.1.1	192.168.2.4	0xedb9	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.431224108 CET	1.1.1.1	192.168.2.4	0xedb9	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.579158068 CET	1.1.1.1	192.168.2.4	0x553d	No error (0)	sync.ipredictive.com		52.44.19.224	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.579158068 CET	1.1.1.1	192.168.2.4	0x553d	No error (0)	sync.ipredictive.com		54.144.130.108	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.579158068 CET	1.1.1.1	192.168.2.4	0x553d	No error (0)	sync.ipredictive.com		54.156.63.88	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.579158068 CET	1.1.1.1	192.168.2.4	0x553d	No error (0)	sync.ipredictive.com		52.70.183.86	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.579158068 CET	1.1.1.1	192.168.2.4	0x553d	No error (0)	sync.ipredictive.com		54.167.240.199	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.579158068 CET	1.1.1.1	192.168.2.4	0x553d	No error (0)	sync.ipredictive.com		52.87.49.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.579158068 CET	1.1.1.1	192.168.2.4	0x553d	No error (0)	sync.ipredictive.com		52.44.231.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.579158068 CET	1.1.1.1	192.168.2.4	0x553d	No error (0)	sync.ipredictive.com		54.158.199.195	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.590847969 CET	1.1.1.1	192.168.2.4	0xa28	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.590847969 CET	1.1.1.1	192.168.2.4	0xa28	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.592428923 CET	1.1.1.1	192.168.2.4	0xf8ce	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.592428923 CET	1.1.1.1	192.168.2.4	0xf8ce	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.911561966 CET	1.1.1.1	192.168.2.4	0xfe4e	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.911561966 CET	1.1.1.1	192.168.2.4	0xfe4e	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.911561966 CET	1.1.1.1	192.168.2.4	0xfe4e	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.911561966 CET	1.1.1.1	192.168.2.4	0xfe4e	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.911561966 CET	1.1.1.1	192.168.2.4	0xfe4e	No error (0)	global.px.quantserve.com		192.184.68.149	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.911561966 CET	1.1.1.1	192.168.2.4	0xfe4e	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.911561966 CET	1.1.1.1	192.168.2.4	0xfe4e	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:47.911921024 CET	1.1.1.1	192.168.2.4	0x9d0e	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:47.911921024 CET	1.1.1.1	192.168.2.4	0x9d0e	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.071223021 CET	1.1.1.1	192.168.2.4	0x8b82	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.071223021 CET	1.1.1.1	192.168.2.4	0x8b82	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.071223021 CET	1.1.1.1	192.168.2.4	0x8b82	No error (0)	pool-use.zagreb.iponweb.net		35.211.233.246	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.071474075 CET	1.1.1.1	192.168.2.4	0xc490	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.071474075 CET	1.1.1.1	192.168.2.4	0xc490	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.147839069 CET	1.1.1.1	192.168.2.4	0x5700	No error (0)	sync1.intentiq.com		18.173.219.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.147839069 CET	1.1.1.1	192.168.2.4	0x5700	No error (0)	sync1.intentiq.com		18.173.219.5	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.147839069 CET	1.1.1.1	192.168.2.4	0x5700	No error (0)	sync1.intentiq.com		18.173.219.51	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.147839069 CET	1.1.1.1	192.168.2.4	0x5700	No error (0)	sync1.intentiq.com		18.173.219.12	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.466183901 CET	1.1.1.1	192.168.2.4	0xc172	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.466183901 CET	1.1.1.1	192.168.2.4	0xc172	No error (0)	securepubads46.g.doubleclick.net		142.250.72.98	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.468133926 CET	1.1.1.1	192.168.2.4	0x81e7	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.510457039 CET	1.1.1.1	192.168.2.4	0x10c9	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.510824919 CET	1.1.1.1	192.168.2.4	0x868e	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.510824919 CET	1.1.1.1	192.168.2.4	0x868e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.510824919 CET	1.1.1.1	192.168.2.4	0x868e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.510824919 CET	1.1.1.1	192.168.2.4	0x868e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.510824919 CET	1.1.1.1	192.168.2.4	0x868e	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.568069935 CET	1.1.1.1	192.168.2.4	0xc50c	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.569422007 CET	1.1.1.1	192.168.2.4	0x139b	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.572765112 CET	1.1.1.1	192.168.2.4	0x6bb4	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.572765112 CET	1.1.1.1	192.168.2.4	0x6bb4	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.572765112 CET	1.1.1.1	192.168.2.4	0x6bb4	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.572765112 CET	1.1.1.1	192.168.2.4	0x6bb4	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.572765112 CET	1.1.1.1	192.168.2.4	0x6bb4	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.573152065 CET	1.1.1.1	192.168.2.4	0x521b	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.692514896 CET	1.1.1.1	192.168.2.4	0x6777	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.692514896 CET	1.1.1.1	192.168.2.4	0x6777	No error (0)	image4-v2.pubmnet.com	spug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.692514896 CET	1.1.1.1	192.168.2.4	0x6777	No error (0)	spug-njrpb.pubmnet.com		162.248.18.34	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.692720890 CET	1.1.1.1	192.168.2.4	0xa75d	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.692720890 CET	1.1.1.1	192.168.2.4	0xa75d	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.705379009 CET	1.1.1.1	192.168.2.4	0x612b	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.705379009 CET	1.1.1.1	192.168.2.4	0x612b	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.705379009 CET	1.1.1.1	192.168.2.4	0x612b	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:48.705691099 CET	1.1.1.1	192.168.2.4	0xb62a	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:48.705691099 CET	1.1.1.1	192.168.2.4	0xb62a	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.309549093 CET	1.1.1.1	192.168.2.4	0x925f	No error (0)	s0.2mdn.net		142.251.40.198	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.316595078 CET	1.1.1.1	192.168.2.4	0xaf66	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.318197012 CET	1.1.1.1	192.168.2.4	0x501b	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.318197012 CET	1.1.1.1	192.168.2.4	0x501b	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.318197012 CET	1.1.1.1	192.168.2.4	0x501b	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.318197012 CET	1.1.1.1	192.168.2.4	0x501b	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.318197012 CET	1.1.1.1	192.168.2.4	0x501b	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.371336937 CET	1.1.1.1	192.168.2.4	0x59fa	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.371336937 CET	1.1.1.1	192.168.2.4	0x59fa	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.371336937 CET	1.1.1.1	192.168.2.4	0x59fa	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.198.32.5	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		35.168.126.208	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.198.80.221	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.206.162.80	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		18.205.220.157	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.194.249.125	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.3.29.96	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.372730970 CET	1.1.1.1	192.168.2.4	0xa7d1	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		35.172.77.183	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.470004082 CET	1.1.1.1	192.168.2.4	0xb0a2	No error (0)	tb.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.470004082 CET	1.1.1.1	192.168.2.4	0xb0a2	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.470004082 CET	1.1.1.1	192.168.2.4	0xb0a2	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.470875025 CET	1.1.1.1	192.168.2.4	0x5818	No error (0)	tb.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.527750015 CET	1.1.1.1	192.168.2.4	0x76b9	No error (0)	rtb.gumgum.com		54.158.147.217	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.527750015 CET	1.1.1.1	192.168.2.4	0x76b9	No error (0)	rtb.gumgum.com		3.208.117.149	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.527750015 CET	1.1.1.1	192.168.2.4	0x76b9	No error (0)	rtb.gumgum.com		34.197.21.17	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.527750015 CET	1.1.1.1	192.168.2.4	0x76b9	No error (0)	rtb.gumgum.com		3.214.40.224	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.527750015 CET	1.1.1.1	192.168.2.4	0x76b9	No error (0)	rtb.gumgum.com		54.174.1.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.527750015 CET	1.1.1.1	192.168.2.4	0x76b9	No error (0)	rtb.gumgum.com		52.206.193.222	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.527750015 CET	1.1.1.1	192.168.2.4	0x76b9	No error (0)	rtb.gumgum.com		3.231.66.172	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.527750015 CET	1.1.1.1	192.168.2.4	0x76b9	No error (0)	rtb.gumgum.com		18.233.231.182	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.669553995 CET	1.1.1.1	192.168.2.4	0xcf5f	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.669750929 CET	1.1.1.1	192.168.2.4	0xe2b7	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.799618006 CET	1.1.1.1	192.168.2.4	0xce7	No error (0)	rtb.adentifi.com		100.26.88.123	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.799618006 CET	1.1.1.1	192.168.2.4	0xce7	No error (0)	rtb.adentifi.com		44.195.10.56	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.799618006 CET	1.1.1.1	192.168.2.4	0xce7	No error (0)	rtb.adentifi.com		54.161.137.68	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.799618006 CET	1.1.1.1	192.168.2.4	0xce7	No error (0)	rtb.adentifi.com		54.86.210.76	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.799618006 CET	1.1.1.1	192.168.2.4	0xce7	No error (0)	rtb.adentifi.com		44.217.228.46	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.799618006 CET	1.1.1.1	192.168.2.4	0xce7	No error (0)	rtb.adentifi.com		3.226.225.52	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.800760984 CET	1.1.1.1	192.168.2.4	0xfa7d	No error (0)	i.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.805284977 CET	1.1.1.1	192.168.2.4	0xd431	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:49.805284977 CET	1.1.1.1	192.168.2.4	0xd431	No error (0)	match-us-east-1-ecs.sharethrough.com		52.21.191.144	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.805284977 CET	1.1.1.1	192.168.2.4	0xd431	No error (0)	match-us-east-1-ecs.sharethrough.com		34.234.232.243	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.805284977 CET	1.1.1.1	192.168.2.4	0xd431	No error (0)	match-us-east-1-ecs.sharethrough.com		44.214.226.19	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.805284977 CET	1.1.1.1	192.168.2.4	0xd431	No error (0)	match-us-east-1-ecs.sharethrough.com		3.211.103.63	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.805284977 CET	1.1.1.1	192.168.2.4	0xd431	No error (0)	match-us-east-1-ecs.sharethrough.com		54.158.247.251	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.805284977 CET	1.1.1.1	192.168.2.4	0xd431	No error (0)	match-us-east-1-ecs.sharethrough.com		107.22.212.84	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.805284977 CET	1.1.1.1	192.168.2.4	0xd431	No error (0)	match-us-east-1-ecs.sharethrough.com		3.86.0.244	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.805284977 CET	1.1.1.1	192.168.2.4	0xd431	No error (0)	match-us-east-1-ecs.sharethrough.com		100.24.220.190	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:49.806488037 CET	1.1.1.1	192.168.2.4	0x9a7b	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.054294109 CET	1.1.1.1	192.168.2.4	0x7185	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.719054937 CET	1.1.1.1	192.168.2.4	0x9eff	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.719054937 CET	1.1.1.1	192.168.2.4	0x9eff	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.719105005 CET	1.1.1.1	192.168.2.4	0xd5bc	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.719105005 CET	1.1.1.1	192.168.2.4	0xd5bc	No error (0)	image4-v2.pubmnet.com	spug33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.719105005 CET	1.1.1.1	192.168.2.4	0xd5bc	No error (0)	spug33000-fpb.pubmnet.com		104.36.113.111	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.740900040 CET	1.1.1.1	192.168.2.4	0xe080	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.742094994 CET	1.1.1.1	192.168.2.4	0xa8e5	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.742094994 CET	1.1.1.1	192.168.2.4	0xa8e5	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.749727964 CET	1.1.1.1	192.168.2.4	0xc03d	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.750108957 CET	1.1.1.1	192.168.2.4	0xff48	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.202.146.197	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.211.136.228	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		174.129.26.128	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.224.183.16	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.225.14.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.85.7.255	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.85.59.182	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751585007 CET	1.1.1.1	192.168.2.4	0x80c4	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.94.147.184	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751791954 CET	1.1.1.1	192.168.2.4	0x7f68	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751791954 CET	1.1.1.1	192.168.2.4	0x7f68	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.751791954 CET	1.1.1.1	192.168.2.4	0x7f68	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.752511978 CET	1.1.1.1	192.168.2.4	0x9a66	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.752511978 CET	1.1.1.1	192.168.2.4	0x9a66	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.225.214.90	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.752511978 CET	1.1.1.1	192.168.2.4	0x9a66	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.225.214.117	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.752511978 CET	1.1.1.1	192.168.2.4	0x9a66	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.225.214.50	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.752511978 CET	1.1.1.1	192.168.2.4	0x9a66	No error (0)	d20qwf0wrdtevy.cloudfront.net		13.225.214.84	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.753604889 CET	1.1.1.1	192.168.2.4	0xf2a2	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.754323006 CET	1.1.1.1	192.168.2.4	0xa88d	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:50.754323006 CET	1.1.1.1	192.168.2.4	0xa88d	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:50.755357027 CET	1.1.1.1	192.168.2.4	0x7464	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.517543077 CET	1.1.1.1	192.168.2.4	0x4c07	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:51.519851923 CET	1.1.1.1	192.168.2.4	0xb73c	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:52.853710890 CET	1.1.1.1	192.168.2.4	0xd2c5	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:52.855310917 CET	1.1.1.1	192.168.2.4	0x6c8a	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:53.336272001 CET	1.1.1.1	192.168.2.4	0x681b	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:53.336272001 CET	1.1.1.1	192.168.2.4	0x681b	No error (0)	adserver.technoratimedia.com		193.122.128.135	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:53.337253094 CET	1.1.1.1	192.168.2.4	0x832b	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:53.757280111 CET	1.1.1.1	192.168.2.4	0x740c	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:53.757280111 CET	1.1.1.1	192.168.2.4	0x740c	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:53.757280111 CET	1.1.1.1	192.168.2.4	0x740c	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:53.758249998 CET	1.1.1.1	192.168.2.4	0xfb25	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:53.758249998 CET	1.1.1.1	192.168.2.4	0xfb25	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:54.705070019 CET	1.1.1.1	192.168.2.4	0xde78	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:54.706572056 CET	1.1.1.1	192.168.2.4	0x6d13	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.127208948 CET	1.1.1.1	192.168.2.4	0x7642	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.127208948 CET	1.1.1.1	192.168.2.4	0x7642	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.127208948 CET	1.1.1.1	192.168.2.4	0x7642	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.127208948 CET	1.1.1.1	192.168.2.4	0x7642	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.127208948 CET	1.1.1.1	192.168.2.4	0x7642	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.128693104 CET	1.1.1.1	192.168.2.4	0x5b59	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.128693104 CET	1.1.1.1	192.168.2.4	0x5b59	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.128693104 CET	1.1.1.1	192.168.2.4	0x5b59	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.443661928 CET	1.1.1.1	192.168.2.4	0xb0e8	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.443661928 CET	1.1.1.1	192.168.2.4	0xb0e8	No error (0)	idaas6.cph.liveintent.com		52.202.127.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.443661928 CET	1.1.1.1	192.168.2.4	0xb0e8	No error (0)	idaas6.cph.liveintent.com		34.200.65.252	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.443661928 CET	1.1.1.1	192.168.2.4	0xb0e8	No error (0)	idaas6.cph.liveintent.com		54.204.110.249	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.444744110 CET	1.1.1.1	192.168.2.4	0x36e4	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.447099924 CET	1.1.1.1	192.168.2.4	0x92f5	No error (0)	sync.srv.stackadapt.com		54.165.23.128	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.447099924 CET	1.1.1.1	192.168.2.4	0x92f5	No error (0)	sync.srv.stackadapt.com		54.165.180.24	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.447099924 CET	1.1.1.1	192.168.2.4	0x92f5	No error (0)	sync.srv.stackadapt.com		54.162.21.52	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.447099924 CET	1.1.1.1	192.168.2.4	0x92f5	No error (0)	sync.srv.stackadapt.com		54.175.57.3	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.447099924 CET	1.1.1.1	192.168.2.4	0x92f5	No error (0)	sync.srv.stackadapt.com		52.73.22.46	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.447099924 CET	1.1.1.1	192.168.2.4	0x92f5	No error (0)	sync.srv.stackadapt.com		54.205.171.153	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.447099924 CET	1.1.1.1	192.168.2.4	0x92f5	No error (0)	sync.srv.stackadapt.com		54.225.140.70	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.447099924 CET	1.1.1.1	192.168.2.4	0x92f5	No error (0)	sync.srv.stackadapt.com		54.205.227.51	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.448250055 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.448250055 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.195.157.207	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.448250055 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.193.176.79	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.448250055 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.200.208.38	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.448250055 CET	1.1.1.1	192.168.2.4	0x5f13	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.199.176.223	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.455034018 CET	1.1.1.1	192.168.2.4	0xe466	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.455948114 CET	1.1.1.1	192.168.2.4	0xdeb	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.460474968 CET	1.1.1.1	192.168.2.4	0xcbc	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.460474968 CET	1.1.1.1	192.168.2.4	0xcbc	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.460858107 CET	1.1.1.1	192.168.2.4	0xb469	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.170.179	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.155.183	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.224.56	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.164.50	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.247.195	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.163.30	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.239.14	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.162.167	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.461527109 CET	1.1.1.1	192.168.2.4	0x7a01	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.188.9	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.470027924 CET	1.1.1.1	192.168.2.4	0xc548	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.913116932 CET	1.1.1.1	192.168.2.4	0x6055	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.915221930 CET	1.1.1.1	192.168.2.4	0xe364	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.915221930 CET	1.1.1.1	192.168.2.4	0xe364	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.915524960 CET	1.1.1.1	192.168.2.4	0xbd55	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.915844917 CET	1.1.1.1	192.168.2.4	0x400f	No error (0)	gocm.c.appier.net	cm121.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.915844917 CET	1.1.1.1	192.168.2.4	0x400f	No error (0)	cm121.appier.org		172.104.70.67	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.916261911 CET	1.1.1.1	192.168.2.4	0x81e9	No error (0)	gocm.c.appier.net	cm119.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.916374922 CET	1.1.1.1	192.168.2.4	0xb950	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.916374922 CET	1.1.1.1	192.168.2.4	0xb950	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.916374922 CET	1.1.1.1	192.168.2.4	0xb950	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.916374922 CET	1.1.1.1	192.168.2.4	0xb950	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.916924000 CET	1.1.1.1	192.168.2.4	0x3e3	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:56.922753096 CET	1.1.1.1	192.168.2.4	0x6edb	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:56.925769091 CET	1.1.1.1	192.168.2.4	0x35e6	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:57.021061897 CET	1.1.1.1	192.168.2.4	0x108	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:57.022269964 CET	1.1.1.1	192.168.2.4	0xcc69	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:57.022629023 CET	1.1.1.1	192.168.2.4	0xccae	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:57.022629023 CET	1.1.1.1	192.168.2.4	0xccae	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:57.025480032 CET	1.1.1.1	192.168.2.4	0x5046	No error (0)	thrtle.com		52.201.82.109	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:57.025480032 CET	1.1.1.1	192.168.2.4	0x5046	No error (0)	thrtle.com		34.224.160.74	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:57.025480032 CET	1.1.1.1	192.168.2.4	0x5046	No error (0)	thrtle.com		54.204.240.70	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:57.025480032 CET	1.1.1.1	192.168.2.4	0x5046	No error (0)	thrtle.com		54.209.87.180	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.914736032 CET	1.1.1.1	192.168.2.4	0x9ed0	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.136	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.914736032 CET	1.1.1.1	192.168.2.4	0x9ed0	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.139	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.914736032 CET	1.1.1.1	192.168.2.4	0x9ed0	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.3	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.914736032 CET	1.1.1.1	192.168.2.4	0x9ed0	No error (0)	de9a11s35xj3d.cloudfront.net		18.238.79.125	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.918971062 CET	1.1.1.1	192.168.2.4	0x2f42	No error (0)	crb.kargo.com		34.193.135.180	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.918971062 CET	1.1.1.1	192.168.2.4	0x2f42	No error (0)	crb.kargo.com		100.24.145.252	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.918971062 CET	1.1.1.1	192.168.2.4	0x2f42	No error (0)	crb.kargo.com		50.19.17.70	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.918971062 CET	1.1.1.1	192.168.2.4	0x2f42	No error (0)	crb.kargo.com		34.228.193.198	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.918971062 CET	1.1.1.1	192.168.2.4	0x2f42	No error (0)	crb.kargo.com		54.85.185.243	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.918971062 CET	1.1.1.1	192.168.2.4	0x2f42	No error (0)	crb.kargo.com		52.207.53.229	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921220064 CET	1.1.1.1	192.168.2.4	0x38a9	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921714067 CET	1.1.1.1	192.168.2.4	0xebb4	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921714067 CET	1.1.1.1	192.168.2.4	0xebb4	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.203.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921714067 CET	1.1.1.1	192.168.2.4	0xebb4	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.72.166.179	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921714067 CET	1.1.1.1	192.168.2.4	0xebb4	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.54.202.217	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921714067 CET	1.1.1.1	192.168.2.4	0xebb4	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		54.144.208.232	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921714067 CET	1.1.1.1	192.168.2.4	0xebb4	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.71.77.34	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921714067 CET	1.1.1.1	192.168.2.4	0xebb4	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.45.42.225	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921714067 CET	1.1.1.1	192.168.2.4	0xebb4	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.22.88.168	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.921714067 CET	1.1.1.1	192.168.2.4	0xebb4	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.72.183.217	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.923424006 CET	1.1.1.1	192.168.2.4	0xdc0a	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.924356937 CET	1.1.1.1	192.168.2.4	0xd845	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.924448013 CET	1.1.1.1	192.168.2.4	0x4fc3	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.924448013 CET	1.1.1.1	192.168.2.4	0x4fc3	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.924448013 CET	1.1.1.1	192.168.2.4	0x4fc3	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.924531937 CET	1.1.1.1	192.168.2.4	0xaf70	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.926887989 CET	1.1.1.1	192.168.2.4	0x8611	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.58	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.926887989 CET	1.1.1.1	192.168.2.4	0x8611	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.69	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.926887989 CET	1.1.1.1	192.168.2.4	0x8611	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.15	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.926887989 CET	1.1.1.1	192.168.2.4	0x8611	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.37	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.926966906 CET	1.1.1.1	192.168.2.4	0x91f6	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.932559013 CET	1.1.1.1	192.168.2.4	0xa613	No error (0)	contextual.media.net		23.47.168.66	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.940335989 CET	1.1.1.1	192.168.2.4	0xf749	No error (0)	metrics.brightcove.com		35.244.232.184	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.943800926 CET	1.1.1.1	192.168.2.4	0x4097	No error (0)	cs.media.net		23.77.240.29	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.946069002 CET	1.1.1.1	192.168.2.4	0x21	No error (0)	hb.yahoo.net		184.29.143.235	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.946069002 CET	1.1.1.1	192.168.2.4	0x21	No error (0)	hb.yahoo.net		184.29.143.240	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.946069002 CET	1.1.1.1	192.168.2.4	0x21	No error (0)	hb.yahoo.net		184.29.143.233	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.946069002 CET	1.1.1.1	192.168.2.4	0x21	No error (0)	hb.yahoo.net		184.29.143.234	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.946069002 CET	1.1.1.1	192.168.2.4	0x21	No error (0)	hb.yahoo.net		184.29.143.242	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.946069002 CET	1.1.1.1	192.168.2.4	0x21	No error (0)	hb.yahoo.net		184.29.143.208	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.946069002 CET	1.1.1.1	192.168.2.4	0x21	No error (0)	hb.yahoo.net		184.29.143.209	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.946069002 CET	1.1.1.1	192.168.2.4	0x21	No error (0)	hb.yahoo.net		184.29.143.232	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.952344894 CET	1.1.1.1	192.168.2.4	0x263d	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.952344894 CET	1.1.1.1	192.168.2.4	0x263d	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.952344894 CET	1.1.1.1	192.168.2.4	0x263d	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.954298019 CET	1.1.1.1	192.168.2.4	0xa973	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.954298019 CET	1.1.1.1	192.168.2.4	0xa973	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.954457045 CET	1.1.1.1	192.168.2.4	0xc682	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.955326080 CET	1.1.1.1	192.168.2.4	0x22e0	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.959673882 CET	1.1.1.1	192.168.2.4	0x62f3	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.959673882 CET	1.1.1.1	192.168.2.4	0x62f3	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.959673882 CET	1.1.1.1	192.168.2.4	0x62f3	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.959673882 CET	1.1.1.1	192.168.2.4	0x62f3	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.960572958 CET	1.1.1.1	192.168.2.4	0xcf51	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.960572958 CET	1.1.1.1	192.168.2.4	0xcf51	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.962220907 CET	1.1.1.1	192.168.2.4	0xfcd2	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.964302063 CET	1.1.1.1	192.168.2.4	0x290d	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.964302063 CET	1.1.1.1	192.168.2.4	0x290d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.144.200.164	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.964302063 CET	1.1.1.1	192.168.2.4	0x290d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.208.153.83	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.964302063 CET	1.1.1.1	192.168.2.4	0x290d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.209.165.65	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.964302063 CET	1.1.1.1	192.168.2.4	0x290d	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		35.169.189.143	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.971313953 CET	1.1.1.1	192.168.2.4	0x8a1c	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:58.971313953 CET	1.1.1.1	192.168.2.4	0x8a1c	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.971313953 CET	1.1.1.1	192.168.2.4	0x8a1c	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.971313953 CET	1.1.1.1	192.168.2.4	0x8a1c	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.971313953 CET	1.1.1.1	192.168.2.4	0x8a1c	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:58.972624063 CET	1.1.1.1	192.168.2.4	0x8a81	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.664793968 CET	1.1.1.1	192.168.2.4	0xa986	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.664793968 CET	1.1.1.1	192.168.2.4	0xa986	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.664793968 CET	1.1.1.1	192.168.2.4	0xa986	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.664793968 CET	1.1.1.1	192.168.2.4	0xa986	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.664793968 CET	1.1.1.1	192.168.2.4	0xa986	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.667887926 CET	1.1.1.1	192.168.2.4	0x1717	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.667887926 CET	1.1.1.1	192.168.2.4	0x1717	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.668204069 CET	1.1.1.1	192.168.2.4	0x580e	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Mar 4, 2024 00:26:59.680851936 CET	1.1.1.1	192.168.2.4	0x6d21	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.680913925 CET	1.1.1.1	192.168.2.4	0x38d9	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.684175968 CET	1.1.1.1	192.168.2.4	0xd406	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.684175968 CET	1.1.1.1	192.168.2.4	0xd406	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.684259892 CET	1.1.1.1	192.168.2.4	0x340f	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.684259892 CET	1.1.1.1	192.168.2.4	0x340f	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.684259892 CET	1.1.1.1	192.168.2.4	0x340f	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.690227985 CET	1.1.1.1	192.168.2.4	0xe9	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.690227985 CET	1.1.1.1	192.168.2.4	0xe9	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.690227985 CET	1.1.1.1	192.168.2.4	0xe9	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.690490007 CET	1.1.1.1	192.168.2.4	0x2048	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.690490007 CET	1.1.1.1	192.168.2.4	0x2048	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.751960993 CET	1.1.1.1	192.168.2.4	0xb342	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.908536911 CET	1.1.1.1	192.168.2.4	0x2297	No error (0)	bcp.crwdcntrl.net		52.205.86.205	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.908536911 CET	1.1.1.1	192.168.2.4	0x2297	No error (0)	bcp.crwdcntrl.net		52.203.57.111	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.908536911 CET	1.1.1.1	192.168.2.4	0x2297	No error (0)	bcp.crwdcntrl.net		54.165.143.148	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.908536911 CET	1.1.1.1	192.168.2.4	0x2297	No error (0)	bcp.crwdcntrl.net		54.243.148.230	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.908536911 CET	1.1.1.1	192.168.2.4	0x2297	No error (0)	bcp.crwdcntrl.net		54.157.149.99	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.908536911 CET	1.1.1.1	192.168.2.4	0x2297	No error (0)	bcp.crwdcntrl.net		52.20.193.216	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.908536911 CET	1.1.1.1	192.168.2.4	0x2297	No error (0)	bcp.crwdcntrl.net		3.214.48.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:26:59.908536911 CET	1.1.1.1	192.168.2.4	0x2297	No error (0)	bcp.crwdcntrl.net		52.0.10.132	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.030698061 CET	1.1.1.1	192.168.2.4	0x4d67	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.030698061 CET	1.1.1.1	192.168.2.4	0x4d67	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.030698061 CET	1.1.1.1	192.168.2.4	0x4d67	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.030698061 CET	1.1.1.1	192.168.2.4	0x4d67	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.030698061 CET	1.1.1.1	192.168.2.4	0x4d67	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.032751083 CET	1.1.1.1	192.168.2.4	0x290d	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.032803059 CET	1.1.1.1	192.168.2.4	0xd990	No error (0)	sync1.intentiq.com		18.173.219.51	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.032803059 CET	1.1.1.1	192.168.2.4	0xd990	No error (0)	sync1.intentiq.com		18.173.219.5	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.032803059 CET	1.1.1.1	192.168.2.4	0xd990	No error (0)	sync1.intentiq.com		18.173.219.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.032803059 CET	1.1.1.1	192.168.2.4	0xd990	No error (0)	sync1.intentiq.com		18.173.219.12	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.038161993 CET	1.1.1.1	192.168.2.4	0x6913	No error (0)	tb.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.038161993 CET	1.1.1.1	192.168.2.4	0x6913	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.038161993 CET	1.1.1.1	192.168.2.4	0x6913	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.038861990 CET	1.1.1.1	192.168.2.4	0xa79c	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.038861990 CET	1.1.1.1	192.168.2.4	0xa79c	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.038861990 CET	1.1.1.1	192.168.2.4	0xa79c	No error (0)	pug-njrpb.pubmnet.com		162.248.18.37	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.039371967 CET	1.1.1.1	192.168.2.4	0x87a0	No error (0)	tb.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.039458990 CET	1.1.1.1	192.168.2.4	0x96b6	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.039458990 CET	1.1.1.1	192.168.2.4	0x96b6	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.047610044 CET	1.1.1.1	192.168.2.4	0x922e	No error (0)	aax-eu.amazon-adsystem.com		67.220.228.201	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.100886106 CET	1.1.1.1	192.168.2.4	0xc0ae	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.187779903 CET	1.1.1.1	192.168.2.4	0xf4cb	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.187779903 CET	1.1.1.1	192.168.2.4	0xf4cb	No error (0)	pool-bid-gce-us.dorpat.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.190327883 CET	1.1.1.1	192.168.2.4	0xabf0	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.190429926 CET	1.1.1.1	192.168.2.4	0x659e	No error (0)	rtb-use.mfadsrvr.com	pool-bid-gce-us.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.194602013 CET	1.1.1.1	192.168.2.4	0x7dc2	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.252177000 CET	1.1.1.1	192.168.2.4	0xa07c	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Mar 4, 2024 00:27:00.252294064 CET	1.1.1.1	192.168.2.4	0xfd0b	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.252294064 CET	1.1.1.1	192.168.2.4	0xfd0b	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:00.580135107 CET	1.1.1.1	192.168.2.4	0xc945	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:00.581645012 CET	1.1.1.1	192.168.2.4	0xc516	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:01.454112053 CET	1.1.1.1	192.168.2.4	0x7ec8	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:01.454112053 CET	1.1.1.1	192.168.2.4	0x7ec8	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:01.454739094 CET	1.1.1.1	192.168.2.4	0xc587	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.682590961 CET	1.1.1.1	192.168.2.4	0xb554	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.682590961 CET	1.1.1.1	192.168.2.4	0xb554	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.683487892 CET	1.1.1.1	192.168.2.4	0x260e	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.683487892 CET	1.1.1.1	192.168.2.4	0x260e	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.684612989 CET	1.1.1.1	192.168.2.4	0x78b1	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.684612989 CET	1.1.1.1	192.168.2.4	0x78b1	No error (0)	d2wcz8sc48ztgm.cloudfront.net		18.164.124.109	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.684612989 CET	1.1.1.1	192.168.2.4	0x78b1	No error (0)	d2wcz8sc48ztgm.cloudfront.net		18.164.124.14	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.684612989 CET	1.1.1.1	192.168.2.4	0x78b1	No error (0)	d2wcz8sc48ztgm.cloudfront.net		18.164.124.67	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.684612989 CET	1.1.1.1	192.168.2.4	0x78b1	No error (0)	d2wcz8sc48ztgm.cloudfront.net		18.164.124.82	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.686955929 CET	1.1.1.1	192.168.2.4	0xf93	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.691517115 CET	1.1.1.1	192.168.2.4	0x663a	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.713179111 CET	1.1.1.1	192.168.2.4	0x3e1a	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.719585896 CET	1.1.1.1	192.168.2.4	0xa6ba	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.735472918 CET	1.1.1.1	192.168.2.4	0x24e	No error (0)	dsum.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.735472918 CET	1.1.1.1	192.168.2.4	0x24e	No error (0)	dsum.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.735646963 CET	1.1.1.1	192.168.2.4	0xe771	No error (0)	dsum.casalemedia.com			65	IN (0x0001)	false
Mar 4, 2024 00:27:03.876321077 CET	1.1.1.1	192.168.2.4	0x2878	No error (0)	help.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.876321077 CET	1.1.1.1	192.168.2.4	0x2878	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.876321077 CET	1.1.1.1	192.168.2.4	0x2878	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.878985882 CET	1.1.1.1	192.168.2.4	0xbf3f	No error (0)	help.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.106.87	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.227.224.80	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.213.195.87	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		174.129.26.128	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.223.139.0	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.198.222.120	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.0.201.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.927664995 CET	1.1.1.1	192.168.2.4	0x746d	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.85.206.93	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.928738117 CET	1.1.1.1	192.168.2.4	0x6a6a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.928738117 CET	1.1.1.1	192.168.2.4	0x6a6a	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.928738117 CET	1.1.1.1	192.168.2.4	0x6a6a	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.929462910 CET	1.1.1.1	192.168.2.4	0x9e72	No error (0)	crb.kargo.com		34.193.135.180	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.929462910 CET	1.1.1.1	192.168.2.4	0x9e72	No error (0)	crb.kargo.com		34.228.193.198	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.929462910 CET	1.1.1.1	192.168.2.4	0x9e72	No error (0)	crb.kargo.com		52.207.53.229	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.929462910 CET	1.1.1.1	192.168.2.4	0x9e72	No error (0)	crb.kargo.com		54.85.185.243	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.929462910 CET	1.1.1.1	192.168.2.4	0x9e72	No error (0)	crb.kargo.com		50.19.17.70	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.929462910 CET	1.1.1.1	192.168.2.4	0x9e72	No error (0)	crb.kargo.com		100.24.145.252	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.932339907 CET	1.1.1.1	192.168.2.4	0xef27	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.932339907 CET	1.1.1.1	192.168.2.4	0xef27	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:03.934046984 CET	1.1.1.1	192.168.2.4	0x1086	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:03.934098959 CET	1.1.1.1	192.168.2.4	0x35ea	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:05.712008953 CET	1.1.1.1	192.168.2.4	0xd937	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:05.712182045 CET	1.1.1.1	192.168.2.4	0xf056	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:06.180229902 CET	1.1.1.1	192.168.2.4	0x723e	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.69	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.180229902 CET	1.1.1.1	192.168.2.4	0x723e	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.15	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.180229902 CET	1.1.1.1	192.168.2.4	0x723e	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.37	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.180229902 CET	1.1.1.1	192.168.2.4	0x723e	No error (0)	synchroscript.deliveryengine.adswizz.com		18.238.55.58	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.201755047 CET	1.1.1.1	192.168.2.4	0x3546	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:06.201984882 CET	1.1.1.1	192.168.2.4	0xefaa	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:06.201984882 CET	1.1.1.1	192.168.2.4	0xefaa	No error (0)	idaas6.cph.liveintent.com		54.204.110.249	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.201984882 CET	1.1.1.1	192.168.2.4	0xefaa	No error (0)	idaas6.cph.liveintent.com		52.202.127.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.201984882 CET	1.1.1.1	192.168.2.4	0xefaa	No error (0)	idaas6.cph.liveintent.com		34.200.65.252	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.283495903 CET	1.1.1.1	192.168.2.4	0xebfd	No error (0)	googleads.g.doubleclick.net		142.250.176.194	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.285087109 CET	1.1.1.1	192.168.2.4	0x6c41	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 4, 2024 00:27:06.873882055 CET	1.1.1.1	192.168.2.4	0xc068	No error (0)	thrtle.com		34.224.160.74	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.873882055 CET	1.1.1.1	192.168.2.4	0xc068	No error (0)	thrtle.com		52.201.82.109	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.873882055 CET	1.1.1.1	192.168.2.4	0xc068	No error (0)	thrtle.com		54.204.240.70	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.873882055 CET	1.1.1.1	192.168.2.4	0xc068	No error (0)	thrtle.com		54.209.87.180	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.875091076 CET	1.1.1.1	192.168.2.4	0x7f97	No error (0)	cm.g.doubleclick.net		142.251.40.226	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.883451939 CET	1.1.1.1	192.168.2.4	0xc635	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:06.884361982 CET	1.1.1.1	192.168.2.4	0x27	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:06.884361982 CET	1.1.1.1	192.168.2.4	0x27	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:06.959295988 CET	1.1.1.1	192.168.2.4	0xf68e	No error (0)	aax-eu.amazon-adsystem.com		67.220.226.233	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:07.295557976 CET	1.1.1.1	192.168.2.4	0x5457	No error (0)	js-agent.newrelic.com	dualstack.k.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:07.297127008 CET	1.1.1.1	192.168.2.4	0xd888	No error (0)	js-agent.newrelic.com	dualstack.k.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.101121902 CET	1.1.1.1	192.168.2.4	0xc76f	No error (0)	match.prod.bidr.io		54.145.107.21	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.101121902 CET	1.1.1.1	192.168.2.4	0xc76f	No error (0)	match.prod.bidr.io		52.55.200.220	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.101121902 CET	1.1.1.1	192.168.2.4	0xc76f	No error (0)	match.prod.bidr.io		52.72.52.29	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.101121902 CET	1.1.1.1	192.168.2.4	0xc76f	No error (0)	match.prod.bidr.io		54.144.44.5	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.101121902 CET	1.1.1.1	192.168.2.4	0xc76f	No error (0)	match.prod.bidr.io		54.152.133.200	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.101121902 CET	1.1.1.1	192.168.2.4	0xc76f	No error (0)	match.prod.bidr.io		52.7.42.46	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.101121902 CET	1.1.1.1	192.168.2.4	0xc76f	No error (0)	match.prod.bidr.io		52.71.191.116	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.101121902 CET	1.1.1.1	192.168.2.4	0xc76f	No error (0)	match.prod.bidr.io		52.7.25.40	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.107491970 CET	1.1.1.1	192.168.2.4	0xdd9e	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.108702898 CET	1.1.1.1	192.168.2.4	0x53ca	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.118134022 CET	1.1.1.1	192.168.2.4	0x5945	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.239176035 CET	1.1.1.1	192.168.2.4	0x8acc	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.239176035 CET	1.1.1.1	192.168.2.4	0x8acc	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.240433931 CET	1.1.1.1	192.168.2.4	0x26c0	No error (0)	bcp.crwdcntrl.net		54.243.148.230	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.240433931 CET	1.1.1.1	192.168.2.4	0x26c0	No error (0)	bcp.crwdcntrl.net		3.214.48.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.240433931 CET	1.1.1.1	192.168.2.4	0x26c0	No error (0)	bcp.crwdcntrl.net		54.165.143.148	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.240433931 CET	1.1.1.1	192.168.2.4	0x26c0	No error (0)	bcp.crwdcntrl.net		44.215.73.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.240433931 CET	1.1.1.1	192.168.2.4	0x26c0	No error (0)	bcp.crwdcntrl.net		54.157.149.99	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.240433931 CET	1.1.1.1	192.168.2.4	0x26c0	No error (0)	bcp.crwdcntrl.net		52.205.86.205	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.240433931 CET	1.1.1.1	192.168.2.4	0x26c0	No error (0)	bcp.crwdcntrl.net		52.203.57.111	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.240433931 CET	1.1.1.1	192.168.2.4	0x26c0	No error (0)	bcp.crwdcntrl.net		52.20.193.216	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.253947973 CET	1.1.1.1	192.168.2.4	0xfd1e	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.253947973 CET	1.1.1.1	192.168.2.4	0xfd1e	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.371870995 CET	1.1.1.1	192.168.2.4	0x812b	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.371870995 CET	1.1.1.1	192.168.2.4	0x812b	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.371870995 CET	1.1.1.1	192.168.2.4	0x812b	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:08.372097015 CET	1.1.1.1	192.168.2.4	0x47c3	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:08.372097015 CET	1.1.1.1	192.168.2.4	0x47c3	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:09.989516020 CET	1.1.1.1	192.168.2.4	0x191e	No error (0)	www.google.com		142.250.80.100	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:09.990647078 CET	1.1.1.1	192.168.2.4	0x783a	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 4, 2024 00:27:10.593647957 CET	1.1.1.1	192.168.2.4	0x21f2	No error (0)	sync.intentiq.com		18.173.219.51	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.593647957 CET	1.1.1.1	192.168.2.4	0x21f2	No error (0)	sync.intentiq.com		18.173.219.5	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.593647957 CET	1.1.1.1	192.168.2.4	0x21f2	No error (0)	sync.intentiq.com		18.173.219.12	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.593647957 CET	1.1.1.1	192.168.2.4	0x21f2	No error (0)	sync.intentiq.com		18.173.219.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.594760895 CET	1.1.1.1	192.168.2.4	0xa790	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:10.596185923 CET	1.1.1.1	192.168.2.4	0xe911	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:10.596185923 CET	1.1.1.1	192.168.2.4	0xe911	No error (0)	match-us-east-1-ecs.sharethrough.com		18.205.47.0	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.596185923 CET	1.1.1.1	192.168.2.4	0xe911	No error (0)	match-us-east-1-ecs.sharethrough.com		107.22.212.84	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.596185923 CET	1.1.1.1	192.168.2.4	0xe911	No error (0)	match-us-east-1-ecs.sharethrough.com		44.214.226.19	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.596185923 CET	1.1.1.1	192.168.2.4	0xe911	No error (0)	match-us-east-1-ecs.sharethrough.com		34.234.232.243	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.596185923 CET	1.1.1.1	192.168.2.4	0xe911	No error (0)	match-us-east-1-ecs.sharethrough.com		3.211.103.63	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.596185923 CET	1.1.1.1	192.168.2.4	0xe911	No error (0)	match-us-east-1-ecs.sharethrough.com		52.21.191.144	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.596185923 CET	1.1.1.1	192.168.2.4	0xe911	No error (0)	match-us-east-1-ecs.sharethrough.com		34.226.127.128	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.596185923 CET	1.1.1.1	192.168.2.4	0xe911	No error (0)	match-us-east-1-ecs.sharethrough.com		3.231.11.210	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.612725019 CET	1.1.1.1	192.168.2.4	0xc881	No error (0)	pmp.mxptint.net		204.2.226.29	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.853041887 CET	1.1.1.1	192.168.2.4	0xadcc	No error (0)	googleads.g.doubleclick.net		142.251.40.162	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:10.853601933 CET	1.1.1.1	192.168.2.4	0x7a5b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 4, 2024 00:27:10.860735893 CET	1.1.1.1	192.168.2.4	0xa888	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:10.860778093 CET	1.1.1.1	192.168.2.4	0x7582	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:11.050285101 CET	1.1.1.1	192.168.2.4	0x72e6	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:11.050285101 CET	1.1.1.1	192.168.2.4	0x72e6	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:11.050957918 CET	1.1.1.1	192.168.2.4	0xab9f	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:11.050957918 CET	1.1.1.1	192.168.2.4	0xab9f	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:11.050957918 CET	1.1.1.1	192.168.2.4	0xab9f	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:11.104172945 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:11.104172945 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:11.104172945 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:11.104172945 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:11.241206884 CET	1.1.1.1	192.168.2.4	0x606d	No error (0)	help.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:11.241206884 CET	1.1.1.1	192.168.2.4	0x606d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:11.241206884 CET	1.1.1.1	192.168.2.4	0x606d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:11.242503881 CET	1.1.1.1	192.168.2.4	0xf40e	No error (0)	help.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:12.294450998 CET	1.1.1.1	192.168.2.4	0xacdb	No error (0)	api.content.aol.com	prod.msicontent.pse.public.aol.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:12.294450998 CET	1.1.1.1	192.168.2.4	0xacdb	No error (0)	prod.msicontent.pse.public.aol.com		52.2.7.46	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:12.294450998 CET	1.1.1.1	192.168.2.4	0xacdb	No error (0)	prod.msicontent.pse.public.aol.com		52.71.97.125	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:12.323009968 CET	1.1.1.1	192.168.2.4	0x8c8b	No error (0)	api.content.aol.com	prod.msicontent.pse.public.aol.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:12.657234907 CET	1.1.1.1	192.168.2.4	0x7a3f	No error (0)	oidc.help.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:12.657234907 CET	1.1.1.1	192.168.2.4	0x7a3f	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:12.666757107 CET	1.1.1.1	192.168.2.4	0xc6d4	No error (0)	oidc.help.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:12.949752092 CET	1.1.1.1	192.168.2.4	0x8299	No error (0)	api.content.aol.com	prod.msicontent.pse.public.aol.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:12.949836969 CET	1.1.1.1	192.168.2.4	0x3909	No error (0)	api.content.aol.com	prod.msicontent.pse.public.aol.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:12.949836969 CET	1.1.1.1	192.168.2.4	0x3909	No error (0)	prod.msicontent.pse.public.aol.com		52.71.97.125	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:12.949836969 CET	1.1.1.1	192.168.2.4	0x3909	No error (0)	prod.msicontent.pse.public.aol.com		52.2.7.46	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:13.480662107 CET	1.1.1.1	192.168.2.4	0x2efe	No error (0)	login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:13.480662107 CET	1.1.1.1	192.168.2.4	0x2efe	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:13.481139898 CET	1.1.1.1	192.168.2.4	0x21bd	No error (0)	login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:14.769848108 CET	1.1.1.1	192.168.2.4	0xfe6a	No error (0)	api.login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:14.771413088 CET	1.1.1.1	192.168.2.4	0x1689	No error (0)	api.login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:14.771413088 CET	1.1.1.1	192.168.2.4	0x1689	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.536945105 CET	1.1.1.1	192.168.2.4	0xac53	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:15.536945105 CET	1.1.1.1	192.168.2.4	0xac53	No error (0)	cdn.w55c.net		52.7.155.131	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.536945105 CET	1.1.1.1	192.168.2.4	0xac53	No error (0)	cdn.w55c.net		54.196.108.52	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.536945105 CET	1.1.1.1	192.168.2.4	0xac53	No error (0)	cdn.w55c.net		54.211.182.170	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.536945105 CET	1.1.1.1	192.168.2.4	0xac53	No error (0)	cdn.w55c.net		54.196.48.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.536945105 CET	1.1.1.1	192.168.2.4	0xac53	No error (0)	cdn.w55c.net		54.156.131.113	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.536945105 CET	1.1.1.1	192.168.2.4	0xac53	No error (0)	cdn.w55c.net		52.55.162.55	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.536945105 CET	1.1.1.1	192.168.2.4	0xac53	No error (0)	cdn.w55c.net		52.86.169.182	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.536945105 CET	1.1.1.1	192.168.2.4	0xac53	No error (0)	cdn.w55c.net		52.4.8.36	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:15.537312031 CET	1.1.1.1	192.168.2.4	0xccd7	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:16.471200943 CET	1.1.1.1	192.168.2.4	0xf47c	No error (0)	ad.doubleclick.net		142.251.40.230	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:16.472201109 CET	1.1.1.1	192.168.2.4	0xfeb1	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 4, 2024 00:27:16.714832067 CET	1.1.1.1	192.168.2.4	0x6297	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:16.714832067 CET	1.1.1.1	192.168.2.4	0x6297	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:16.714832067 CET	1.1.1.1	192.168.2.4	0x6297	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:16.715670109 CET	1.1.1.1	192.168.2.4	0x82c1	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:17.812263012 CET	1.1.1.1	192.168.2.4	0xecb0	No error (0)	oidc.help.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:17.812263012 CET	1.1.1.1	192.168.2.4	0xecb0	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:17.813852072 CET	1.1.1.1	192.168.2.4	0x9a78	No error (0)	oidc.help.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:17.856836081 CET	1.1.1.1	192.168.2.4	0x18c9	No error (0)	ad.doubleclick.net		142.250.72.102	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:17.859184027 CET	1.1.1.1	192.168.2.4	0xcac5	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 4, 2024 00:27:18.323081017 CET	1.1.1.1	192.168.2.4	0x3b9a	No error (0)	login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:18.323081017 CET	1.1.1.1	192.168.2.4	0x3b9a	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.324501991 CET	1.1.1.1	192.168.2.4	0x66e3	No error (0)	login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:18.643306971 CET	1.1.1.1	192.168.2.4	0xa002	No error (0)	d1r51gnw3wu5rx.cloudfront.net		13.35.90.16	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.643306971 CET	1.1.1.1	192.168.2.4	0xa002	No error (0)	d1r51gnw3wu5rx.cloudfront.net		13.35.90.28	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.643306971 CET	1.1.1.1	192.168.2.4	0xa002	No error (0)	d1r51gnw3wu5rx.cloudfront.net		13.35.90.203	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.643306971 CET	1.1.1.1	192.168.2.4	0xa002	No error (0)	d1r51gnw3wu5rx.cloudfront.net		13.35.90.59	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.900070906 CET	1.1.1.1	192.168.2.4	0x7694	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.911140919 CET	1.1.1.1	192.168.2.4	0x1a34	No error (0)	api.login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:18.911140919 CET	1.1.1.1	192.168.2.4	0x1a34	No error (0)	ds-ats.member.g02.yahoodns.net		67.195.204.151	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:18.911474943 CET	1.1.1.1	192.168.2.4	0x1d94	No error (0)	api.login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:21.042984962 CET	1.1.1.1	192.168.2.4	0xfd68	No error (0)	sync.crwdcntrl.net		52.0.10.132	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:21.042984962 CET	1.1.1.1	192.168.2.4	0xfd68	No error (0)	sync.crwdcntrl.net		54.243.148.230	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:21.042984962 CET	1.1.1.1	192.168.2.4	0xfd68	No error (0)	sync.crwdcntrl.net		52.205.86.205	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:21.042984962 CET	1.1.1.1	192.168.2.4	0xfd68	No error (0)	sync.crwdcntrl.net		54.157.149.99	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:21.042984962 CET	1.1.1.1	192.168.2.4	0xfd68	No error (0)	sync.crwdcntrl.net		3.234.204.143	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:21.042984962 CET	1.1.1.1	192.168.2.4	0xfd68	No error (0)	sync.crwdcntrl.net		3.214.48.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:21.042984962 CET	1.1.1.1	192.168.2.4	0xfd68	No error (0)	sync.crwdcntrl.net		52.20.193.216	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:21.042984962 CET	1.1.1.1	192.168.2.4	0xfd68	No error (0)	sync.crwdcntrl.net		54.165.143.148	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.120307922 CET	1.1.1.1	192.168.2.4	0x2f0c	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.763699055 CET	1.1.1.1	192.168.2.4	0x3fd7	No error (0)	membership-cdn.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:22.763699055 CET	1.1.1.1	192.168.2.4	0x3fd7	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	membership-cdn.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.50.121	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.184.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.216.201	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.199.105	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.163.209	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.30.202	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.236.217	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.775273085 CET	1.1.1.1	192.168.2.4	0x5dcc	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.126.153	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.808681965 CET	1.1.1.1	192.168.2.4	0xaf60	No error (0)	checkoutnow.aol.com	checkout.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:22.808681965 CET	1.1.1.1	192.168.2.4	0xaf60	No error (0)	checkout.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:22.827497005 CET	1.1.1.1	192.168.2.4	0x6001	No error (0)	checkoutnow.aol.com	checkout.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:22.827497005 CET	1.1.1.1	192.168.2.4	0x6001	No error (0)	checkout.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:22.827497005 CET	1.1.1.1	192.168.2.4	0x6001	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.827497005 CET	1.1.1.1	192.168.2.4	0x6001	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.998780012 CET	1.1.1.1	192.168.2.4	0x3fe4	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:22.998780012 CET	1.1.1.1	192.168.2.4	0x3fe4	No error (0)	spdc-global.pbp.gysm.yahoodns.net		76.13.32.146	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:22.998979092 CET	1.1.1.1	192.168.2.4	0x5761	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:27.750500917 CET	1.1.1.1	192.168.2.4	0xffe	No error (0)	d1sjyfqescdy46.cloudfront.net		108.138.125.44	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:27.750500917 CET	1.1.1.1	192.168.2.4	0xffe	No error (0)	d1sjyfqescdy46.cloudfront.net		108.138.125.125	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:27.750500917 CET	1.1.1.1	192.168.2.4	0xffe	No error (0)	d1sjyfqescdy46.cloudfront.net		108.138.125.14	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:27.750500917 CET	1.1.1.1	192.168.2.4	0xffe	No error (0)	d1sjyfqescdy46.cloudfront.net		108.138.125.130	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.119265079 CET	1.1.1.1	192.168.2.4	0xb40c	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.119499922 CET	1.1.1.1	192.168.2.4	0xf0dc	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.119499922 CET	1.1.1.1	192.168.2.4	0xf0dc	No error (0)	spdc-global.pbp.gysm.yahoodns.net		76.13.32.146	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.138617039 CET	1.1.1.1	192.168.2.4	0xf467	No error (0)	membership-cdn.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.138617039 CET	1.1.1.1	192.168.2.4	0xf467	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	membership-cdn.s3.amazonaws.com	s3-1-w.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	s3-1-w.amazonaws.com	s3-w.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	s3-w.us-east-1.amazonaws.com		54.231.163.129	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	s3-w.us-east-1.amazonaws.com		52.217.75.52	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.35.185	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.115.59	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.53.81	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	s3-w.us-east-1.amazonaws.com		52.216.112.11	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	s3-w.us-east-1.amazonaws.com		3.5.29.185	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.139556885 CET	1.1.1.1	192.168.2.4	0x6856	No error (0)	s3-w.us-east-1.amazonaws.com		16.182.35.57	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.524938107 CET	1.1.1.1	192.168.2.4	0x1e06	No error (0)	apis.falcon.aol.com	apis.falcon.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.524938107 CET	1.1.1.1	192.168.2.4	0x1e06	No error (0)	apis.falcon.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.524938107 CET	1.1.1.1	192.168.2.4	0x1e06	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.524938107 CET	1.1.1.1	192.168.2.4	0x1e06	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.585424900 CET	1.1.1.1	192.168.2.4	0x27c7	No error (0)	apis.falcon.aol.com	apis.falcon.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.585424900 CET	1.1.1.1	192.168.2.4	0x27c7	No error (0)	apis.falcon.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.628648043 CET	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	8867627.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.628648043 CET	1.1.1.1	192.168.2.4	0xf2d2	No error (0)	dart.l.doubleclick.net		142.251.32.102	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.639775991 CET	1.1.1.1	192.168.2.4	0x1cae	No error (0)	8867627.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.654040098 CET	1.1.1.1	192.168.2.4	0xf5c8	No error (0)	ad.doubleclick.net		142.251.40.230	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.654055119 CET	1.1.1.1	192.168.2.4	0xa643	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 4, 2024 00:27:28.758102894 CET	1.1.1.1	192.168.2.4	0x5bd5	No error (0)	13144298.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:28.758102894 CET	1.1.1.1	192.168.2.4	0x5bd5	No error (0)	dart.l.doubleclick.net		142.250.80.102	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:28.760524988 CET	1.1.1.1	192.168.2.4	0x1a56	No error (0)	13144298.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:29.207848072 CET	1.1.1.1	192.168.2.4	0x13ba	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:29.207848072 CET	1.1.1.1	192.168.2.4	0x13ba	No error (0)	fam-geo-atsv2.prod.media.g03.yahoodns.net		66.218.87.15	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.208760023 CET	1.1.1.1	192.168.2.4	0xe128	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	aol.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.39.117	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.38.189	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.38.217	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.38.132	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.39.65	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.39.93	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.38.236	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.335890055 CET	1.1.1.1	192.168.2.4	0x3af2	No error (0)	adobetarget.data.adobedc.net		63.140.39.82	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.343713045 CET	1.1.1.1	192.168.2.4	0x269a	No error (0)	aol.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:29.959469080 CET	1.1.1.1	192.168.2.4	0xfccb	No error (0)	adservice.google.com		142.250.81.226	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:29.959485054 CET	1.1.1.1	192.168.2.4	0xe8c4	No error (0)	adservice.google.com			65	IN (0x0001)	false
Mar 4, 2024 00:27:30.148814917 CET	1.1.1.1	192.168.2.4	0x1364	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:30.148814917 CET	1.1.1.1	192.168.2.4	0x1364	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:30.148814917 CET	1.1.1.1	192.168.2.4	0x1364	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		23.20.189.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:30.148814917 CET	1.1.1.1	192.168.2.4	0x1364	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		54.205.210.54	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:30.148814917 CET	1.1.1.1	192.168.2.4	0x1364	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		35.169.173.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:30.148992062 CET	1.1.1.1	192.168.2.4	0x3ced	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:30.148992062 CET	1.1.1.1	192.168.2.4	0x3ced	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:30.482474089 CET	1.1.1.1	192.168.2.4	0x5bbb	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 4, 2024 00:27:30.482625961 CET	1.1.1.1	192.168.2.4	0x97f1	No error (0)	ad.doubleclick.net		142.251.40.230	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:30.484919071 CET	1.1.1.1	192.168.2.4	0x8850	No error (0)	ad.doubleclick.net		142.251.40.166	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:30.485662937 CET	1.1.1.1	192.168.2.4	0x16e5	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 4, 2024 00:27:31.488624096 CET	1.1.1.1	192.168.2.4	0xdbfa	No error (0)	windowsupdatebg.s.llnwi.net		69.164.46.128	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.488624096 CET	1.1.1.1	192.168.2.4	0xdbfa	No error (0)	windowsupdatebg.s.llnwi.net		69.164.46.0	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.524115086 CET	1.1.1.1	192.168.2.4	0xe81f	No error (0)	apis.falcon.aol.com	apis.falcon.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.524115086 CET	1.1.1.1	192.168.2.4	0xe81f	No error (0)	apis.falcon.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.613153934 CET	1.1.1.1	192.168.2.4	0x73fa	No error (0)	apis.falcon.aol.com	apis.falcon.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.613153934 CET	1.1.1.1	192.168.2.4	0x73fa	No error (0)	apis.falcon.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.613153934 CET	1.1.1.1	192.168.2.4	0x73fa	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.613153934 CET	1.1.1.1	192.168.2.4	0x73fa	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.692142963 CET	1.1.1.1	192.168.2.4	0x41e2	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.692142963 CET	1.1.1.1	192.168.2.4	0x41e2	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.692142963 CET	1.1.1.1	192.168.2.4	0x41e2	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.692142963 CET	1.1.1.1	192.168.2.4	0x41e2	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.230.217.116	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.692142963 CET	1.1.1.1	192.168.2.4	0x41e2	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.92.156.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.692142963 CET	1.1.1.1	192.168.2.4	0x41e2	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		52.4.33.45	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.692142963 CET	1.1.1.1	192.168.2.4	0x41e2	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		34.236.83.94	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.693818092 CET	1.1.1.1	192.168.2.4	0x6333	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.693818092 CET	1.1.1.1	192.168.2.4	0x6333	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.693818092 CET	1.1.1.1	192.168.2.4	0x6333	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	aol.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.39.240	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.39.35	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.39.22	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.38.55	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.39.15	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852360010 CET	1.1.1.1	192.168.2.4	0x3704	No error (0)	adobetarget.data.adobedc.net		63.140.38.138	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.852427959 CET	1.1.1.1	192.168.2.4	0xd96f	No error (0)	aol.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.860095024 CET	1.1.1.1	192.168.2.4	0xe17a	No error (0)	adservice.google.com			65	IN (0x0001)	false
Mar 4, 2024 00:27:31.860754967 CET	1.1.1.1	192.168.2.4	0x72fe	No error (0)	adservice.google.com		142.251.35.162	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.861871958 CET	1.1.1.1	192.168.2.4	0xa2ac	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.861871958 CET	1.1.1.1	192.168.2.4	0xa2ac	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.861871958 CET	1.1.1.1	192.168.2.4	0xa2ac	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		54.205.210.54	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.861871958 CET	1.1.1.1	192.168.2.4	0xa2ac	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		23.20.189.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.861871958 CET	1.1.1.1	192.168.2.4	0xa2ac	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		35.169.173.155	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:31.863289118 CET	1.1.1.1	192.168.2.4	0x4a9b	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:31.863289118 CET	1.1.1.1	192.168.2.4	0x4a9b	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:32.710387945 CET	1.1.1.1	192.168.2.4	0x472b	No error (0)	lg1.hb.yahoo.net		23.40.179.62	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:32.710387945 CET	1.1.1.1	192.168.2.4	0x472b	No error (0)	lg1.hb.yahoo.net		23.40.179.53	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:32.710387945 CET	1.1.1.1	192.168.2.4	0x472b	No error (0)	lg1.hb.yahoo.net		23.40.179.59	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:32.710387945 CET	1.1.1.1	192.168.2.4	0x472b	No error (0)	lg1.hb.yahoo.net		23.40.179.56	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:32.710387945 CET	1.1.1.1	192.168.2.4	0x472b	No error (0)	lg1.hb.yahoo.net		23.40.179.58	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:32.710387945 CET	1.1.1.1	192.168.2.4	0x472b	No error (0)	lg1.hb.yahoo.net		23.40.179.63	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:32.710387945 CET	1.1.1.1	192.168.2.4	0x472b	No error (0)	lg1.hb.yahoo.net		23.40.179.49	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:32.710387945 CET	1.1.1.1	192.168.2.4	0x472b	No error (0)	lg1.hb.yahoo.net		23.40.179.50	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.018687963 CET	1.1.1.1	192.168.2.4	0x243d	No error (0)	pn.ybp.yahoo.com	ds-ycpi-pn-ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:33.018687963 CET	1.1.1.1	192.168.2.4	0x243d	No error (0)	ds-ycpi-pn-ybp.gysm.yahoodns.net		34.225.231.221	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.018687963 CET	1.1.1.1	192.168.2.4	0x243d	No error (0)	ds-ycpi-pn-ybp.gysm.yahoodns.net		52.20.216.88	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.018687963 CET	1.1.1.1	192.168.2.4	0x243d	No error (0)	ds-ycpi-pn-ybp.gysm.yahoodns.net		18.211.75.227	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.018687963 CET	1.1.1.1	192.168.2.4	0x243d	No error (0)	ds-ycpi-pn-ybp.gysm.yahoodns.net		44.209.231.7	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.019120932 CET	1.1.1.1	192.168.2.4	0x140b	No error (0)	pn.ybp.yahoo.com	ds-ycpi-pn-ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:33.649490118 CET	1.1.1.1	192.168.2.4	0x7fa8	No error (0)	us-east-1-web-oao.ssp.yahoo.com	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:33.649490118 CET	1.1.1.1	192.168.2.4	0x7fa8	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		52.4.33.45	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.649490118 CET	1.1.1.1	192.168.2.4	0x7fa8	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		34.236.83.94	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.649490118 CET	1.1.1.1	192.168.2.4	0x7fa8	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.230.217.116	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.649490118 CET	1.1.1.1	192.168.2.4	0x7fa8	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.92.156.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.649966002 CET	1.1.1.1	192.168.2.4	0x33da	No error (0)	us-east-1-web-oao.ssp.yahoo.com	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:33.672360897 CET	1.1.1.1	192.168.2.4	0x11cd	No error (0)	products.gobankingrates.com		18.173.132.129	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.672360897 CET	1.1.1.1	192.168.2.4	0x11cd	No error (0)	products.gobankingrates.com		18.173.132.105	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.672360897 CET	1.1.1.1	192.168.2.4	0x11cd	No error (0)	products.gobankingrates.com		18.173.132.63	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.672360897 CET	1.1.1.1	192.168.2.4	0x11cd	No error (0)	products.gobankingrates.com		18.173.132.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.811765909 CET	1.1.1.1	192.168.2.4	0x712e	No error (0)	cdn.js7k.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:33.811765909 CET	1.1.1.1	192.168.2.4	0x712e	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.811765909 CET	1.1.1.1	192.168.2.4	0x712e	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:33.812377930 CET	1.1.1.1	192.168.2.4	0x6fe9	No error (0)	cdn.js7k.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:34.152309895 CET	1.1.1.1	192.168.2.4	0x56a6	No error (0)	us-east-1-web-oao.ssp.yahoo.com	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:34.152657986 CET	1.1.1.1	192.168.2.4	0x3a6	No error (0)	us-east-1-web-oao.ssp.yahoo.com	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:34.152657986 CET	1.1.1.1	192.168.2.4	0x3a6	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		52.4.33.45	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:34.152657986 CET	1.1.1.1	192.168.2.4	0x3a6	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		34.236.83.94	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:34.152657986 CET	1.1.1.1	192.168.2.4	0x3a6	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.92.156.8	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:34.152657986 CET	1.1.1.1	192.168.2.4	0x3a6	No error (0)	ssp-ats-prod-us-east-1.one-mobile-prod.aws.oath.cloud		3.230.217.116	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:35.263807058 CET	1.1.1.1	192.168.2.4	0x922a	No error (0)	sb.scorecardresearch.com		108.138.128.93	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:35.263807058 CET	1.1.1.1	192.168.2.4	0x922a	No error (0)	sb.scorecardresearch.com		108.138.128.112	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:35.263807058 CET	1.1.1.1	192.168.2.4	0x922a	No error (0)	sb.scorecardresearch.com		108.138.128.77	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:35.263807058 CET	1.1.1.1	192.168.2.4	0x922a	No error (0)	sb.scorecardresearch.com		108.138.128.56	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.107997894 CET	1.1.1.1	192.168.2.4	0x7a84	No error (0)	www.datadoghq-browser-agent.com		108.138.129.160	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.331113100 CET	1.1.1.1	192.168.2.4	0x72ee	No error (0)	products.gobankingrates.com		18.173.132.105	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.331113100 CET	1.1.1.1	192.168.2.4	0x72ee	No error (0)	products.gobankingrates.com		18.173.132.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.331113100 CET	1.1.1.1	192.168.2.4	0x72ee	No error (0)	products.gobankingrates.com		18.173.132.129	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.331113100 CET	1.1.1.1	192.168.2.4	0x72ee	No error (0)	products.gobankingrates.com		18.173.132.63	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.715869904 CET	1.1.1.1	192.168.2.4	0x4e96	No error (0)	sb.scorecardresearch.com		18.238.49.124	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.715869904 CET	1.1.1.1	192.168.2.4	0x4e96	No error (0)	sb.scorecardresearch.com		18.238.49.52	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.715869904 CET	1.1.1.1	192.168.2.4	0x4e96	No error (0)	sb.scorecardresearch.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:36.715869904 CET	1.1.1.1	192.168.2.4	0x4e96	No error (0)	sb.scorecardresearch.com		18.238.49.74	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:38.451659918 CET	1.1.1.1	192.168.2.4	0x37f9	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:38.452501059 CET	1.1.1.1	192.168.2.4	0x55c0	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 4, 2024 00:27:38.452501059 CET	1.1.1.1	192.168.2.4	0x55c0	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:38.452501059 CET	1.1.1.1	192.168.2.4	0x55c0	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:38.749784946 CET	1.1.1.1	192.168.2.4	0xdd9e	No error (0)	cdn.rates.consumertrack.com		54.230.163.99	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:38.749784946 CET	1.1.1.1	192.168.2.4	0xdd9e	No error (0)	cdn.rates.consumertrack.com		54.230.163.87	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:38.749784946 CET	1.1.1.1	192.168.2.4	0xdd9e	No error (0)	cdn.rates.consumertrack.com		54.230.163.86	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:38.749784946 CET	1.1.1.1	192.168.2.4	0xdd9e	No error (0)	cdn.rates.consumertrack.com		54.230.163.73	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:39.258692980 CET	1.1.1.1	192.168.2.4	0x2170	No error (0)	cdn.rates.consumertrack.com		54.230.163.99	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:39.258692980 CET	1.1.1.1	192.168.2.4	0x2170	No error (0)	cdn.rates.consumertrack.com		54.230.163.86	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:39.258692980 CET	1.1.1.1	192.168.2.4	0x2170	No error (0)	cdn.rates.consumertrack.com		54.230.163.87	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:39.258692980 CET	1.1.1.1	192.168.2.4	0x2170	No error (0)	cdn.rates.consumertrack.com		54.230.163.73	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.128736019 CET	1.1.1.1	192.168.2.4	0x86d2	No error (0)	lg1.hb.yahoo.net		23.40.179.25	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.128736019 CET	1.1.1.1	192.168.2.4	0x86d2	No error (0)	lg1.hb.yahoo.net		23.40.179.18	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.128736019 CET	1.1.1.1	192.168.2.4	0x86d2	No error (0)	lg1.hb.yahoo.net		23.40.179.28	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.128736019 CET	1.1.1.1	192.168.2.4	0x86d2	No error (0)	lg1.hb.yahoo.net		23.40.179.33	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.128736019 CET	1.1.1.1	192.168.2.4	0x86d2	No error (0)	lg1.hb.yahoo.net		23.40.179.30	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.128736019 CET	1.1.1.1	192.168.2.4	0x86d2	No error (0)	lg1.hb.yahoo.net		23.40.179.27	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.128736019 CET	1.1.1.1	192.168.2.4	0x86d2	No error (0)	lg1.hb.yahoo.net		23.40.179.35	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.128736019 CET	1.1.1.1	192.168.2.4	0x86d2	No error (0)	lg1.hb.yahoo.net		23.40.179.21	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.745349884 CET	1.1.1.1	192.168.2.4	0xd60c	No error (0)	ad.doubleclick.net		142.251.40.166	A (IP address)	IN (0x0001)	false
Mar 4, 2024 00:27:40.745817900 CET	1.1.1.1	192.168.2.4	0x886a	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	172.66.47.75	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:15 UTC	673	OUT	GET /robots.txtIP: HTTP/1.1 Host: aolserv.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:15 UTC	760	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 8224 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "e0c2072622c8a0764114ea05cc3e8e9c" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nQA%2B6UqffIGh7BfdSUDO827kWrlptt%2BzO6C1Bdy%2BBgaIJJu9AbHDAGunxbnY%2BxOHiTQZfTl324VomEzga00656iDTXtDPnA5mxSDAZJmBgmx4KRPa%2FRRWWDuBYI32gBd4KdrJQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 85ed63f1abf443f9-EWR alt-svc: h3=":443"; ma=86400
2024-03-03 23:26:15 UTC	609	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 69 64 3d 22 53 74 65 6e 63 69 6c 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 67 72 69 64 20 6c 69 67 68 74 2d 74 68 65 6d 65 20 22 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 20 Data Ascii: <!DOCTYPE html><html id="Stencil" class="no-js grid light-theme "> <head> <meta charset="utf-8"> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no"/> <meta name="format-detection" content="telephone=no">
2024-03-03 23:26:15 UTC	1369	IN	Data Raw: 4f 54 46 79 55 42 50 54 6e 58 74 75 6b 32 63 50 70 71 66 76 37 5a 76 5a 39 36 30 4a 67 71 73 56 38 46 6f 6d 4e 33 6e 37 59 30 22 2f 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 77 6d 2f 6c 6f 67 69 6e 2f 61 6f 6c 2d 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 70 72 65 63 6f 6d 70 6f 73 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 77 6d 2f 6c 6f 67 69 6e 2f 61 6f 6c 2d 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 22 3e 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 Data Ascii: OTFyUBPTnXtuk2cPpqfv7ZvZ960JgqsV8FomN3n7Y0"/> <link rel="apple-touch-icon" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png"> <link rel="apple-touch-icon-precomposed" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png"> <link href="https
2024-03-03 23:26:15 UTC	1369	IN	Data Raw: 55 53 22 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 22 2f 3e 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 77 6d 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 79 62 61 72 2f 61 6f 6c 2d 6c 6f 67 6f 2d 77 68 69 74 65 2d 76 30 2e 30 2e 34 2e 70 6e 67 22 20 61 6c 74 3d 22 41 6f 6c 22 20 63 6c 61 73 73 3d 22 64 61 72 6b 2d 6d 6f 64 65 2d 6c 6f 67 6f 20 6c 6f 67 6f 20 61 6f 6c 2d 65 6e 2d 55 53 22 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 22 2f 3e 20 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 68 61 6c 6c 65 6e 67 65 20 79 69 64 2d 63 68 61 6c 6c 65 6e 67 65 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 68 61 6c 6c 65 6e 67 65 2d 68 65 61 64 65 72 22 3e Data Ascii: US" width="100" height=""/> <img src="https://s.yimg.com/wm/assets/images/ybar/aol-logo-white-v0.0.4.png" alt="Aol" class="dark-mode-logo logo aol-en-US" width="100" height=""/> </div><div class="challenge yid-challenge"> <div class="challenge-header">
2024-03-03 23:26:15 UTC	1369	IN	Data Raw: 6c 69 3e 3c 6c 69 20 64 61 74 61 2d 66 69 6c 6c 3d 22 67 6d 61 69 6c 2e 63 6f 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 33 22 3e 67 6d 61 69 6c 2e 63 6f 6d 3c 2f 6c 69 3e 3c 6c 69 20 64 61 74 61 2d 66 69 6c 6c 3d 22 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 34 22 3e 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 3c 2f 6c 69 3e 3c 6c 69 20 64 61 74 61 2d 66 69 6c 6c 3d 22 61 6f 6c 2e 63 6f 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 35 22 3e 61 6f 6c 2e 63 6f 6d 3c 2f 6c 69 3e 3c 2f 75 6c 3e 20 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0d 0a 09 0d 0a 09 3c 70 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 2d 65 72 72 6f 72 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 6d 73 67 20 68 69 64 65 22 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 3e 3c 2f 70 3e 3c 64 69 76 20 63 Data Ascii: li><li data-fill="gmail.com" tabindex="3">gmail.com</li><li data-fill="outlook.com" tabindex="4">outlook.com</li><li data-fill="aol.com" tabindex="5">aol.com</li></ul> </div></div><p id="username-error" class="error-msg hide" role="alert"></p><div c
2024-03-03 23:26:15 UTC	1369	IN	Data Raw: 75 65 20 77 69 74 68 20 3c 2f 64 69 76 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 73 6f 63 69 61 6c 2d 6c 6f 67 69 6e 22 3e 20 3c 6c 69 20 63 6c 61 73 73 3d 22 69 74 65 6d 73 2d 63 6f 6e 74 2d 32 22 3e 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 69 64 3d 22 74 70 61 2d 67 6f 6f 67 6c 65 2d 62 75 74 74 6f 6e 22 20 6e 61 6d 65 3d 22 74 70 61 50 72 6f 76 69 64 65 72 22 20 76 61 6c 75 65 3d 22 67 6f 6f 67 6c 65 22 20 63 6c 61 73 73 3d 22 70 75 72 65 2d 62 75 74 74 6f 6e 20 73 63 2d 62 75 74 74 6f 6e 20 69 74 65 6d 73 2d 32 20 73 63 2d 67 6f 6f 67 6c 65 20 73 63 2d 67 6f 6f 67 6c 65 2d 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 72 61 70 69 64 2d 74 72 61 63 6b 69 6e 67 3d 22 74 72 75 65 22 20 64 61 74 61 2d 79 6c 6b 3d 22 65 6c 6d 3a 62 74 6e 3b Data Ascii: ue with </div><ul class="social-login"> <li class="items-cont-2"> <button type="submit" id="tpa-google-button" name="tpaProvider" value="google" class="pure-button sc-button items-2 sc-google sc-google-button" data-rapid-tracking="true" data-ylk="elm:btn;
2024-03-03 23:26:15 UTC	1369	IN	Data Raw: 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 2d 68 69 64 65 2d 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 20 68 69 64 65 2d 70 77 22 20 69 64 3d 22 70 61 73 73 77 6f 72 64 2d 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 74 69 74 6c 65 3d 22 53 68 6f 77 26 6e 62 73 70 3b 70 61 73 73 77 6f 72 64 22 20 64 61 74 61 2d 72 61 70 69 64 2d 74 72 61 63 6b 69 6e 67 3d 22 74 72 75 65 22 20 64 61 74 61 2d 79 6c 6b 3d 22 65 6c 6d 3a 62 74 6e 3b 65 6c 6d 74 3a 74 6f 67 67 6c 65 3b 73 6c 6b 3a 74 6f 67 67 6c 65 2d 73 68 6f 77 2d 70 61 73 73 77 64 3b 6d 4b 65 79 3a 74 6f 67 67 6c 65 2d 73 68 6f 77 2d 68 69 64 65 22 3e 3c 2f 62 75 74 74 6f 6e Data Ascii: ></div><button type="button" class="show-hide-toggle-button hide-pw" id="password-toggle-button" tabindex="-1" title="Show password" data-rapid-tracking="true" data-ylk="elm:btn;elmt:toggle;slk:toggle-show-passwd;mKey:toggle-show-hide"></button
2024-03-03 23:26:15 UTC	770	IN	Data Raw: 7b 76 61 72 20 65 3d 30 3b 24 28 22 23 70 61 73 73 77 6f 72 64 2d 63 68 61 6c 6c 65 6e 67 65 22 29 2e 68 69 64 65 28 29 2c 24 28 22 2e 79 69 64 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 6c 6f 67 69 6e 2d 73 69 67 6e 69 6e 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 6e 3d 24 28 22 23 6c 6f 67 69 6e 2d 75 73 65 72 6e 61 6d 65 22 29 2e 76 61 6c 28 29 3b 22 22 21 3d 3d 6e 2e 74 72 69 6d 28 29 26 26 28 24 28 22 2e 65 72 72 6f 72 2d 6d 73 67 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 6c 6f 67 69 6e 2d 6c 61 6e 64 69 6e 67 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 70 61 73 73 77 6f 72 64 2d 63 68 61 6c 6c 65 6e 67 65 22 29 2e 73 68 6f 77 28 29 2c 24 28 22 2e 79 69 64 22 29 2e Data Ascii: {var e=0;$("#password-challenge").hide(),$(".yid").hide(),$("#login-signin").click(function(i){i.preventDefault();var n=$("#login-username").val();""!==n.trim()&&($(".error-msg").hide(),$("#login-landing").hide(),$("#password-challenge").show(),$(".yid").

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:15 UTC	585	OUT	GET /wm/mbr/3689655c0d5d523f0d4ae53b598de350d766716a/aol-main.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://aolserv.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:15 UTC	767	IN	HTTP/1.1 200 OK x-amz-id-2: +Pw26DPgZRHOg/JDR8+XImalBkumjz3OGYC9/uN4by/wpZJlAWBQoEH9za6v+e4NeF5O8rmZzk4= x-amz-request-id: 1CC6A1T3JYVBME2N Date: Tue, 06 Feb 2024 23:12:11 GMT Last-Modified: Thu, 02 Mar 2023 19:12:48 GMT ETag: "f0150ddb11b28a50b802e6c6d6f56a16" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 543076 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2247245 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 2f 2a 21 20 50 75 72 65 20 76 30 2e 35 2e 30 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 4c 69 63 65 6e 73 65 2e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 79 75 69 2f 70 75 72 65 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 20 2a 2f 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 31 2e 31 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4e 69 63 6f 6c 61 73 20 47 61 6c 6c 61 67 68 65 72 20 61 6e 64 20 4a 6f 6e 61 74 68 61 6e 20 4e 65 Data Ascii: /! Pure v0.5.0 Copyright 2014 Yahoo! Inc. All rights reserved. Licensed under the BSD License. https://github.com/yui/pure/blob/master/LICENSE.md //*! normalize.css v1.1.3 \| MIT License \| git.io/normalize Copyright (c) Nicolas Gallagher and Jonathan Ne
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 71 3a 62 65 66 6f 72 65 2c 71 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 64 6c 2c 6d 65 6e 75 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 30 7d 64 64 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 34 30 70 78 7d 6d 65 6e 75 2c 6f 6c 2c 75 6c Data Ascii: :break-word}q{quotes:none}q:before,q:after{content:'';content:none}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}dl,menu,ol,ul{margin:1em 0}dd{margin:0 0 0 40px}menu,ol,ul
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 61 6c 69 67 6e 3a 74 6f 70 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 75 72 65 2d 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 70 75 72 65 2d 67 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 33 31 65 6d 3b 2a 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2a 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 2d 2e 34 33 65 6d 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 73 70 65 65 64 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: align:top}table{border-collapse:collapse;border-spacing:0}[hidden]{display:none!important}.pure-img{max-width:100%;height:auto;display:block}.pure-g{letter-spacing:-.31em;letter-spacing:normal;word-spacing:-.43em;text-rendering:optimizespeed;font-family
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 75 74 6f 7d 2e 70 75 72 65 2d 75 2d 31 2d 32 34 7b 77 69 64 74 68 3a 34 2e 31 36 36 37 25 3b 2a 77 69 64 74 68 3a 34 2e 31 33 35 37 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 32 2d 32 34 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 38 2e 33 30 32 33 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 38 2c 2e 70 75 72 65 2d 75 2d 33 2d 32 34 7b 77 69 64 74 68 3a 31 32 2e 35 25 3b 2a 77 69 64 74 68 3a 31 32 2e 34 36 39 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 36 2c 2e 70 75 72 65 2d 75 2d 34 2d 32 34 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 31 36 2e 36 33 35 37 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 35 7b 77 69 64 74 68 3a 32 30 25 3b 2a 77 69 64 74 68 3a 31 39 2e 39 36 39 25 7d 2e 70 75 72 65 2d 75 2d 35 Data Ascii: uto}.pure-u-1-24{width:4.1667%;width:4.1357%}.pure-u-1-12,.pure-u-2-24{width:8.3333%;width:8.3023%}.pure-u-1-8,.pure-u-3-24{width:12.5%;width:12.469%}.pure-u-1-6,.pure-u-4-24{width:16.6667%;width:16.6357%}.pure-u-1-5{width:20%;*width:19.969%}.pure-u-5
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 39 35 2e 38 33 33 33 25 3b 2a 77 69 64 74 68 3a 39 35 2e 38 30 32 33 25 7d 2e 70 75 72 65 2d 75 2d 31 2c 2e 70 75 72 65 2d 75 2d 31 2d 31 2c 2e 70 75 72 65 2d 75 2d 35 2d 35 2c 2e 70 75 72 65 2d 75 2d 32 34 2d 32 34 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 70 75 72 65 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7a 6f 6f 6d 3a 31 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 6e Data Ascii: 95.8333%;width:95.8023%}.pure-u-1,.pure-u-1-1,.pure-u-5-5,.pure-u-24-24{width:100%}.pure-button{display:inline-block;display:inline;zoom:1;line-height:normal;white-space:nowrap;vertical-align:baseline;text-align:center;cursor:pointer;-webkit-user-drag:n
2024-03-03 23:26:15 UTC	1072	IN	Data Raw: 3a 2e 34 3b 6f 70 61 63 69 74 79 3a 2e 34 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 75 72 65 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 2c 61 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 61 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 65 37 3b 63 6f 6c 6f 72 3a 23 66 66 Data Ascii: :.4;opacity:.4;cursor:not-allowed;box-shadow:none}.pure-button-hidden{display:none}.pure-button::-moz-focus-inner{padding:0;border:0}.pure-button-primary,.pure-button-selected,a.pure-button-primary,a.pure-button-selected{background-color:#0078e7;color:#ff
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 65 3d 74 65 78 74 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 5d 3a Data Ascii: e=text]:focus,.pure-form input[type=password]:focus,.pure-form input[type=email]:focus,.pure-form input[type=url]:focus,.pure-form input[type=date]:focus,.pure-form input[type=month]:focus,.pure-form input[type=time]:focus,.pure-form input[type=datetime]:
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 6c 65 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 6f 6c 6f 72 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 73 65 6c 65 63 74 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 5b 64 69 73 61 62 6c 65 64 5d 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: led],.pure-form input[type=number][disabled],.pure-form input[type=search][disabled],.pure-form input[type=tel][disabled],.pure-form input[type=color][disabled],.pure-form select[disabled],.pure-form textarea[disabled]{cursor:not-allowed;background-color:
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 66 6f 72 6d 2d 73 74 61 63 6b 65 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 73 74 61 63 6b 65 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 73 74 61 63 6b 65 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 73 74 61 63 6b 65 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 73 74 61 63 6b 65 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 73 74 61 63 6b 65 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 73 74 61 63 6b 65 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 5d 2c Data Ascii: form-stacked input[type=password],.pure-form-stacked input[type=email],.pure-form-stacked input[type=url],.pure-form-stacked input[type=date],.pure-form-stacked input[type=month],.pure-form-stacked input[type=time],.pure-form-stacked input[type=datetime],
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 2e 70 75 72 65 2d 67 72 6f 75 70 20 69 6e 70 75 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 31 70 78 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 2e 70 75 72 65 2d 67 72 6f 75 70 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 2e 70 75 72 65 2d 67 72 6f 75 70 20 69 6e 70 75 74 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 74 6f 70 3a 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 20 34 70 78 20 30 20 30 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 2e Data Ascii: in-bottom:10px}.pure-form .pure-group input{display:block;padding:10px;margin:0;border-radius:0;position:relative;top:-1px}.pure-form .pure-group input:focus{z-index:2}.pure-form .pure-group input:first-child{top:1px;border-radius:4px 4px 0 0}.pure-form .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:15 UTC	617	OUT	GET /wm/assets/images/ns/aol-logo-black-v.0.0.2.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aolserv.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:15 UTC	1084	IN	HTTP/1.1 200 OK x-amz-id-2: AHsgYf7T8JZVM02BivupMR3aA2rd6QN1lsik6rV4NB/U/USfy2nUdu4B1szzGxxGUpZKGWzkZZL/sQ/bO40bBpYqLGIHQKMMiOXXHibX9tg= x-amz-request-id: 7DTSBAQ6SF3JRPEV Date: Mon, 12 Feb 2024 19:48:09 GMT Last-Modified: Fri, 04 May 2018 01:23:57 GMT ETag: "f9e0f24b60732cd95150a37fb003b871" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000; public x-amz-meta-created-date: Thu, 16 Nov 2017 19:59:27 GMT x-amz-meta-mbst-etag: "YM:1:3570f846-88d6-4c90-bd91-179d937c363c00055e1f0ebaf172" x-amz-meta-x-ysws-mbst-vtime: 1510862367682930 Expires: Sat, 04 May 2019 01:23:56 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 16340 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1741087 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 0e 00 00 01 39 08 06 00 00 00 39 a2 77 71 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 cb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 35 2e 34 2e 30 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: PNGIHDR99wqsRGBiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 80 00 04 20 50 24 01 12 87 fc c2 5e e7 e7 d2 2c 1e 55 1a 25 cc 32 12 83 40 00 02 10 80 00 04 20 00 81 04 09 90 38 24 18 b4 1b 26 d7 da c7 8f a2 6f 00 ba b3 8b b7 35 77 00 b1 1b 02 10 80 00 04 20 00 81 72 09 90 38 e4 15 7b 3e b7 19 17 cf 7a 5c 77 7a 43 00 02 10 80 00 04 20 00 81 7c 09 90 38 e4 13 db 20 57 aa 7c dc 59 c4 13 7e 24 bd 08 76 06 85 00 04 20 00 01 08 40 20 05 02 24 0e 29 44 a9 9b 8d 7c 66 d3 8d d3 bd 56 bc b5 b9 47 88 fd 10 80 00 04 20 00 01 08 14 49 80 c4 21 8f b0 f3 a4 3c 5e 1c 2b a9 0a f1 d4 a1 09 02 10 80 00 04 20 00 01 08 e4 41 80 c4 21 8f 38 6e e4 06 3f 8a 8e 17 cb 3a 9e 2a 34 41 00 02 10 80 00 04 20 00 81 3c 08 90 38 e4 11 47 3e 53 8a 1b 47 3e 57 8a cb 13 6d 10 80 00 04 20 00 01 08 64 40 80 c4 21 fd 20 ae e5 82 09 25 1e 81 20 55 f6 16 87 Data Ascii: P$^,U%2@ 8$&o5w r8{>z\wzC \|8 W\|Y~$v @ $)D\|fVG I!<^+ A!8n?:*4A <8G>SG>Wm d@! % U
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: f8 09 55 25 53 82 1f 73 b0 64 00 01 8b df 7a 40 3f ba 40 00 02 10 80 00 04 20 00 01 f7 04 48 1c fc 84 88 1f d7 fa 89 c5 18 4b 78 eb 30 86 1e 7d 21 00 01 08 40 00 02 10 70 4b 80 c4 c1 47 68 ec 77 0d b5 0f 53 b0 62 24 81 8d fa f3 3b 95 91 10 e9 0e 01 08 40 00 02 10 80 80 3f 02 7f f5 67 52 91 16 d5 45 7a 9d a7 d3 96 34 58 f2 b0 cd d3 3d bc 82 c0 64 04 ec dc 59 3f d1 1e b4 6e 32 a6 34 4f 3a 1f b4 be 7f b2 cd 2a 04 20 00 01 08 f4 24 40 e2 d0 13 d8 44 cd f9 bc 65 22 b0 0b a9 b5 78 6e 17 1a 9b 61 21 e0 91 c0 31 29 08 32 ce e4 7f 25 c7 24 a1 d2 fa 54 e5 ed 15 c5 ad ea 4d 2c 99 f8 f7 e3 d2 92 0a db b6 25 05 02 10 80 00 04 2e 10 20 71 b8 00 65 e6 aa 4a e3 85 99 c7 64 b8 69 09 ac a5 de 84 09 c8 b4 9c d1 ee 8f c0 4a 26 1d 8f ff bf 6b 3d 3c 6e 5b bd a7 12 64 8c 89 95 Data Ascii: U%Ssdz@?@ HKx0}!@pKGhwSb$;@?gREz4X=dY?n24O:* $@De"xna!1)2%$TM,%. qeJdiJ&k=<n[d
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: a2 89 b6 83 a7 cb d1 50 66 a5 88 b7 50 59 85 33 9a 33 2b 69 b2 a7 c5 36 e9 a3 40 60 2c 81 e3 5b ab 7a ac 22 fa 43 00 02 10 30 02 24 0e d3 1e 07 36 09 a8 a7 1d 02 ed 89 12 e0 b8 48 34 70 13 9a 5d 49 f7 67 89 2d 29 10 88 45 c0 ee 43 1f 1e c5 d6 29 10 80 00 04 06 13 20 71 18 8c ae 53 c7 ba 53 2b 1a 95 48 80 a4 b2 c4 a8 5f f7 f9 8d 76 d9 9b 06 26 76 d7 19 b1 67 1c 81 5a dd ed 18 0b 12 0a 04 20 00 81 41 04 48 1c 06 61 eb dc 89 cf 51 4e 51 fd ac cd f6 b4 aa e8 ad 97 45 7b 8f f3 46 c0 12 05 7b 1a fc ce 36 28 10 98 98 c0 5a fa ed 77 0f d5 c4 e3 a0 1e 02 10 c8 94 00 89 c3 74 81 ad a4 3a 4c a7 3e 39 cd ad 2c 7e 90 ec 24 94 af 04 2a 2d c2 d7 55 fe 2d 90 80 25 0d f6 04 b8 2e d0 77 5c 5e 8e 00 c7 dd 72 ec 19 19 02 c9 13 20 71 98 2e 84 3c 4d 3e 65 7b 4c 18 7e 3b ad 2e Data Ascii: PfPY33+i6@`,[z"C0$6H4p]Ig-)EC) qSS+H_v&vgZ AHaQNQE{F{6(Zwt:L>9,~$*-U-%.w\^r q.<M>e{L~;.
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 80 40 21 04 48 1c 86 05 3a a8 9b 3d 0d a6 9c 13 f8 78 5e d5 a9 a6 51 ab 43 a7 96 65 35 22 41 f5 13 ef 20 53 f8 5d 83 9f 78 60 89 1f 02 f6 06 ee ad 1f 73 b0 04 02 10 98 8a 00 89 c3 30 b2 f5 b0 6e d9 f7 b2 89 ff 7e 84 97 bb 11 7d 73 ed 1a e4 d8 26 57 e7 12 f3 8b a7 aa 89 05 0c 73 67 25 f0 46 a3 55 b3 8e c8 60 10 80 c0 ec 04 48 1c 86 21 e7 29 f0 65 6e 63 27 fe 7d ff 1a d3 65 2b f2 ab e5 78 5b 3e a6 4c 8a 96 8f 01 16 f8 27 f0 8b 4c 5c f9 37 13 0b 21 00 81 a1 04 48 1c fa 93 db a8 4b e8 df ad 88 1e 63 7f a7 30 36 f1 c8 15 32 c7 dc b2 91 0d 1a 9e cf 30 96 8d 01 a3 a7 41 c0 92 06 7b 33 47 81 00 04 32 25 40 e2 d0 3f b0 3c fd bd ce ac b9 be ab d3 9e 83 5a 8d d5 d1 69 a0 04 1b d5 09 da 9c 8b c9 36 11 b2 09 11 05 02 10 b8 4f c0 1e 74 54 f7 9b d1 02 02 10 48 91 00 89 Data Ascii: @!H:=x^QCe5"A S]x`s0n~}s&Wsg%FU`H!)enc'}e+x[>L'L\7!HKc0620A{3G2%@?<Zi6OtTH
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 98 fc 5e 67 73 6b 4f ad 9d e1 56 03 f6 f5 26 60 d7 86 7f 48 1e 24 29 26 0c 32 fb a4 34 da b2 e4 e1 95 24 07 7f e4 86 9b c2 03 3a 37 a1 c0 10 08 74 27 40 e2 70 ce aa 56 d5 ea bc 9a 9a 27 04 e6 9e c8 37 4f c6 66 f5 9c 40 ad 2a 8e d9 73 2e f7 6a 48 b8 ee 11 ea be bf 55 53 9b 60 ff 53 62 eb b9 95 ad 1c fa 4e f2 3e 37 c7 16 f4 27 68 ec cd 82 e3 33 34 04 20 30 80 00 89 c3 39 34 26 13 e7 4c 9e d7 ec 9e 57 4c bc 7d 90 fe b9 c7 9c d8 a5 e8 ea eb e8 1a f3 56 b8 96 7b 55 de 2e ce e6 dd 56 23 d9 5b 86 46 92 73 b1 eb d0 4f 12 4b 90 6c 9d 32 9e 00 f7 db f1 0c d1 00 81 59 09 90 38 9c e2 0e da ac 4e ab d8 7a 46 60 a9 09 fc 6f cf ec 60 f3 94 00 37 e0 53 1e f7 b6 f8 4c e2 1e a1 fb fb 6d f2 6c 6f 18 5e 49 4a 9a 48 37 f2 d7 de 3e 2c 75 2d d4 d0 d9 94 8d 3c 09 d9 78 83 23 10 Data Ascii: ^gskOV&`H$)&24$:7t'@pV'7Of@*s.jHUS`SbN>7'h34 094&LWL}V{U.V#[FsOKl2Y8NzF`o`7SLmlo^IJH7>,u-<x#
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 70 49 8e c4 5b c2 24 c3 86 d1 25 10 28 31 71 a8 15 58 9b 4c 50 ee 13 f0 3e 31 6f ee bb 40 0b 11 d8 14 4c a1 2a d8 f7 2e ae 6f d5 68 df a5 21 6d a2 12 20 59 bb 8d 73 7d 7b 37 7b 21 00 81 a5 08 94 98 38 f0 a3 e8 ee 47 db ae 7b d3 45 5a 1e 34 aa 77 1b 17 01 f3 6c d0 95 b6 eb 67 75 a5 6c f2 e4 f2 76 a4 f9 b1 ee 6d 3e 53 ed 6d a5 78 3b 95 f2 0c f4 ae e5 83 5d b7 28 10 80 80 33 02 a5 25 0e 41 fc 2b 67 31 f0 6a 4e 2a 13 f2 df bc 02 74 66 57 a9 09 b3 4d 40 28 97 09 6c 55 dd 5e de 45 ed 0c 04 48 da 6e 43 ae 6e ef 66 2f 04 20 b0 04 81 d2 12 87 92 bf f5 ee 7b 7c 79 ff 4c e9 e8 4f 2a 09 ce d1 de a5 96 95 06 0e 4b 0d be e0 b8 d5 82 63 7b 1f 9a 89 eb b2 11 6a 35 fc 76 59 13 5c 8f 4e d2 ef 3a 3c 18 57 2a 81 d2 12 87 ba d4 40 0f f0 bb 19 d0 67 89 2e ad 06 dd 2f 31 70 82 Data Ascii: pI[$%(1qXLP>1o@L.oh!m Ys}{7{!8G{EZ4wlgulvm>Smx;](3%A+g1jNtfWM@(lU^EHnCnf/ {\|yLOKc{j5vY\N:<W@g./1p
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: c4 c1 92 86 d5 12 10 13 1e d3 26 d6 87 84 ed bf 67 7a ae 6f 53 ee f9 3d 74 3f 9f 2b 0d 25 e7 bb df 7f 7c 9b 87 75 cf 08 b4 cf b6 d9 84 00 04 20 e0 86 40 4e 89 03 9f 29 f5 3f ac 3e f6 ef 92 54 8f 5d 52 d6 2e 6f 6c 90 09 9b e5 cd c0 02 08 40 00 02 10 80 00 04 3c 12 c8 25 71 58 0b ae 09 a5 1f 81 a6 5f f3 e4 5a ef 65 71 9b 9c d5 cb 1a cc 5b 87 65 f9 33 3a 04 20 00 01 08 40 c0 2d 81 5c 12 07 de 36 f4 3f c4 5a 75 b1 89 75 ee a5 c9 dd c1 c8 fe 6d a4 2f 44 d6 89 3a 08 40 00 02 10 80 00 04 32 20 90 43 e2 b0 52 1c 6c b2 43 e9 47 60 d7 af 79 b2 ad f9 9d 43 ff d0 d5 fd bb d0 03 02 10 80 00 04 20 00 81 dc 09 e4 90 38 58 d2 60 c9 03 a5 1f 81 df fa 35 4f b6 75 29 09 52 cc 00 f1 b9 52 4c 9a e8 82 00 04 20 00 01 08 64 42 20 87 c4 81 cf 94 fa 1f 8c 07 75 29 69 42 5d 92 af Data Ascii: &gzoS=t?+%\|u @N)?>T]R.ol@<%qX_Zeq[e3: @-\6?Zuum/D:@2 CRlCG`yC 8X`5Ou)RRL dB u)iB]
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 38 5e 4a 43 71 fe a6 14 2d 6c 2d 86 80 e7 c4 a1 2e 26 0a 38 0a 81 34 09 78 ff fd 51 2b ac 87 34 d1 4e 6e 75 d0 08 f5 e4 a3 30 c0 3d 02 24 70 d7 09 f1 9f 38 5e 67 c3 1e 08 2c 46 c0 73 e2 e0 7d 52 b2 58 d0 18 18 02 4e 08 04 d9 51 39 b1 e5 9a 19 cd b5 1d d4 bf 60 d2 ba ec 41 50 6b f8 b0 ac 09 ae 47 6f 5c 5b 87 71 10 28 94 80 d7 c4 a1 52 3c 42 a1 31 c1 6d 08 a4 44 c0 fb f7 d9 fc 40 fa fa d1 14 b4 ab be be 9b 3d 13 13 20 71 bb 0d 98 4f 95 6e f3 61 2f 04 16 21 e0 35 71 f0 3e 19 59 24 58 0c 0a 01 87 04 36 b2 69 e5 d0 ae a3 49 4c 3e 8e 24 2e 2f 99 bc 5e e6 32 75 6d ad 01 c2 d4 83 24 ac bf 49 d8 76 4c 87 40 d6 04 3c 26 0e 36 09 a9 b3 a6 8e 73 10 c8 87 80 9d af 1b c7 ee 34 8e 6d f3 60 5a 90 11 0f 1e 0c 29 c8 06 3b 67 de 15 e4 ef 10 57 79 53 38 84 1a 7d 20 30 03 01 Data Ascii: 8^JCq-l-.&84xQ+4Nnu0=$p8^g,Fs}RXNQ9`APkGo\[q(R<B1mD@= qOna/!5q>Y$X6iIL>$./^2um$IvL@<&6s4m`Z);gWyS8} 0
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 46 14 c6 ab 4a 4e 43 c9 be c7 0c d6 41 ca b6 31 15 a2 0b 02 91 08 d8 c3 11 7b 52 9f 53 59 c9 19 4b 84 ea 31 4e 2d 95 38 54 32 3a 8c 31 9c be 10 80 40 12 04 5e 3a b5 72 2b bb 6c d2 42 19 47 60 ad ee 96 3c bc 19 a7 26 99 de 41 96 da 8d f7 5d 32 16 fb 36 94 04 de 77 7c 4a b4 2e ca e4 da 39 b8 0f b2 ef 61 a8 8d 4b 25 0e 5e 27 13 43 39 d2 0f 02 10 b8 4c a0 be 5c bd 78 ad 25 0d bb c5 ad c8 c3 00 bb d1 da 44 da 26 d4 41 92 6b 79 23 c7 2c 49 aa 72 75 70 01 bf b6 0b 8c c9 90 10 b8 46 c0 ae 65 76 1d ab ae 35 c8 a8 fe ad 7c f9 30 c4 9f 25 12 07 0b 4c 3d c4 58 fa 40 00 02 c9 11 f0 7c be ff 9c 1c 4d df 06 57 32 ef b3 c4 92 08 8b 7b 2e a5 92 23 39 fa b5 74 7c b6 32 a0 5d da 08 c6 87 c0 13 02 9f b4 be 7e b2 9d fb 6a 2d 07 1f fa 3a b9 44 e2 f0 a6 af 91 b4 87 00 04 92 26 Data Ascii: FJNCA1{RSYK1N-8T2:1@^:r+lBG`<&A]26w\|J.9aK%^'C9L\x%D&Aky#,IrupFev5\|0%L=X@\|MW2{.#9t\|2]~j-:D&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:15 UTC	618	OUT	GET /wm/assets/images/ybar/aol-logo-white-v0.0.4.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aolserv.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:15 UTC	1082	IN	HTTP/1.1 200 OK x-amz-id-2: vY43ZuFJ9Gj7qtXyMrWB+qQL8XEGvr7EYG9EkA3PBpzOpiPOG5UROyjJkU3FK06R3VXL5xlP9/t+Fx2C1o6buZToxD3CmjR/oJKYlmmv5uE= x-amz-request-id: 7ZBWA3Q4CDFBW4H8 Date: Thu, 11 Jan 2024 20:58:13 GMT Last-Modified: Thu, 03 May 2018 20:51:15 GMT ETag: "f0d2ba5c63ab03f3b53158f293f651c7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-meta-created-date: Wed, 18 Apr 2018 19:01:42 GMT x-amz-meta-mbst-etag: "YM:1:d32351c9-ea78-46c0-b7a5-1066118ae37d00056a2415eb6ba6" x-amz-meta-x-ysws-mbst-vtime: 1524078102670246 Expires: Fri, 03 May 2019 20:51:13 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 4314 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4501683 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 3c 08 06 00 00 00 84 86 43 6a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 be 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR<CjpHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 64 61 66 32 64 38 32 2d 62 35 31 38 2d 34 36 38 61 2d 39 38 33 35 2d 38 34 63 36 39 64 33 64 66 33 63 38 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 38 2d 30 34 2d 31 33 54 31 31 3a 35 36 3a 31 32 2d 30 37 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 65 63 38 35 35 30 Data Ascii: t:action="saved" stEvt:instanceID="xmp.iid:8daf2d82-b518-468a-9835-84c69d3df3c8" stEvt:when="2018-04-13T11:56:12-07:00" stEvt:softwareAgent="Adobe Photoshop CC (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:4ec8550
2024-03-03 23:26:15 UTC	1300	IN	Data Raw: c9 86 76 0f a1 25 0f 80 83 c0 bd 06 1b b3 81 a1 86 76 e5 7c 14 38 36 80 9d 18 b4 a1 3c da d8 7a 0f c4 8a d5 b1 ae c1 fd cb 2d 20 c7 1a c8 3a 43 df a7 00 6f 31 b4 1b c8 eb d1 cc d4 97 a7 d1 12 cd 3d 28 f0 5e 83 fe a7 bf 06 b0 7d 2a b6 18 76 70 90 24 89 eb 6b 4a 92 24 07 12 77 76 26 49 32 a6 cc d6 d8 e2 df 5d e9 31 8c bb f4 1a 96 24 c9 83 86 3e 07 b2 27 49 92 9b 93 24 99 56 a5 8f 71 49 92 2c 4b 92 64 93 67 3f 87 92 24 99 50 a5 8f d2 ab c5 d0 cf c1 24 49 66 d5 b0 eb f5 b2 5c b1 2e 47 ab f9 ae 3c 82 6e 7f 03 f9 47 f1 ef ae cc c4 be e8 dd 0d bc d1 d8 16 54 3d 7c 3e 70 03 ba 5a 55 62 1f f0 55 b4 80 ee b3 65 40 07 fa bc 1b 0e 57 c7 1a 8a 6d 7d ab 1f f8 55 95 f7 f6 18 ec 8d c4 7e 9b 98 6e 6c 07 70 27 4a d4 fe 31 e3 f1 09 b0 02 bf c4 eb 12 a4 ee 68 28 5c 1d eb 0c Data Ascii: v%v\|86<z- :Co1=(^}*vp$kJ$wv&I2]1$>'I$VqI,Kdg?$P$If\.G<nGT=\|>pZUbUe@Wm}U~nlp'J1h(\
2024-03-03 23:26:15 UTC	414	IN	Data Raw: b1 07 a5 57 7a 3d fa 09 c5 0a e0 cb 75 1e 03 48 62 e4 13 e3 3e 57 72 ac 19 d8 55 a2 a0 24 de ae 9a 47 d9 f0 cd 3a 67 91 fd f4 a0 13 cb a2 7e 08 41 01 f8 08 f5 8d ab 06 f2 7b fc 4e b4 ed 25 c7 f2 d9 d1 2e c1 b6 1d 51 56 b6 a1 7d b5 ac 4c 26 5b f5 f6 7a 22 3f d9 bd 0a 4f a2 44 ea ca 9c fb 4d e3 08 4a cc 5a 28 00 ab 5b 91 e8 6c b1 c7 20 b6 11 37 26 38 08 7c db a3 fd 28 54 1a 9f 85 1d 68 ef af 0f 13 b6 e4 ab 12 47 d0 ff 35 0b 65 ac ad 24 b8 c7 43 09 b5 2b 8f 56 62 0b 6f 6e 02 1e 6a 45 5b 25 fa e8 ba 37 10 5f 36 9b 96 c8 cb c2 15 b8 cd fc 6e 43 25 6f 5f c4 5e e0 91 c6 4f 51 82 f2 2a fc 6f bf 43 71 4f 0d 8c a1 f6 a6 73 05 b4 34 f6 98 83 dd 1f a1 c4 2a 43 d0 da 60 0f ee c1 da 50 e4 50 79 3c 8a 64 3b 3a 83 66 e3 ee c4 05 24 ef 38 09 37 5d d3 4e e0 e3 e8 09 12 17 Data Ascii: Wz=uHb>WrU$G:g~A{N%.QV}L&[z"?ODMJZ([l 7&8\|(ThG5e$C+VbonjE[%7_6nC%o_^OQoCqOs4C`PPy<d;:f$87]N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:16 UTC	381	OUT	GET /wm/assets/images/ybar/aol-logo-white-v0.0.4.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:16 UTC	1082	IN	HTTP/1.1 200 OK x-amz-id-2: vY43ZuFJ9Gj7qtXyMrWB+qQL8XEGvr7EYG9EkA3PBpzOpiPOG5UROyjJkU3FK06R3VXL5xlP9/t+Fx2C1o6buZToxD3CmjR/oJKYlmmv5uE= x-amz-request-id: 7ZBWA3Q4CDFBW4H8 Date: Thu, 11 Jan 2024 20:58:13 GMT Last-Modified: Thu, 03 May 2018 20:51:15 GMT ETag: "f0d2ba5c63ab03f3b53158f293f651c7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-meta-created-date: Wed, 18 Apr 2018 19:01:42 GMT x-amz-meta-mbst-etag: "YM:1:d32351c9-ea78-46c0-b7a5-1066118ae37d00056a2415eb6ba6" x-amz-meta-x-ysws-mbst-vtime: 1524078102670246 Expires: Fri, 03 May 2019 20:51:13 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 4314 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4501684 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 3c 08 06 00 00 00 84 86 43 6a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 be 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR<CjpHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 64 61 66 32 64 38 32 2d 62 35 31 38 2d 34 36 38 61 2d 39 38 33 35 2d 38 34 63 36 39 64 33 64 66 33 63 38 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 38 2d 30 34 2d 31 33 54 31 31 3a 35 36 3a 31 32 2d 30 37 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 65 63 38 35 35 30 Data Ascii: t:action="saved" stEvt:instanceID="xmp.iid:8daf2d82-b518-468a-9835-84c69d3df3c8" stEvt:when="2018-04-13T11:56:12-07:00" stEvt:softwareAgent="Adobe Photoshop CC (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:4ec8550
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: c9 86 76 0f a1 25 0f 80 83 c0 bd 06 1b b3 81 a1 86 76 e5 7c 14 38 36 80 9d 18 b4 a1 3c da d8 7a 0f c4 8a d5 b1 ae c1 fd cb 2d 20 c7 1a c8 3a 43 df a7 00 6f 31 b4 1b c8 eb d1 cc d4 97 a7 d1 12 cd 3d 28 f0 5e 83 fe a7 bf 06 b0 7d 2a b6 18 76 70 90 24 89 eb 6b 4a 92 24 07 12 77 76 26 49 32 a6 cc d6 d8 e2 df 5d e9 31 8c bb f4 1a 96 24 c9 83 86 3e 07 b2 27 49 92 9b 93 24 99 56 a5 8f 71 49 92 2c 4b 92 64 93 67 3f 87 92 24 99 50 a5 8f d2 ab c5 d0 cf c1 24 49 66 d5 b0 eb f5 b2 5c b1 2e 47 ab f9 ae 3c 82 6e 7f 03 f9 47 f1 ef ae cc c4 be e8 dd 0d bc d1 d8 16 54 3d 7c 3e 70 03 ba 5a 55 62 1f f0 55 b4 80 ee b3 65 40 07 fa bc 1b 0e 57 c7 1a 8a 6d 7d ab 1f f8 55 95 f7 f6 18 ec 8d c4 7e 9b 98 6e 6c 07 70 27 4a d4 fe 31 e3 f1 09 b0 02 bf c4 eb 12 a4 ee 68 28 5c 1d eb 0c Data Ascii: v%v\|86<z- :Co1=(^}*vp$kJ$wv&I2]1$>'I$VqI,Kdg?$P$If\.G<nGT=\|>pZUbUe@Wm}U~nlp'J1h(\
2024-03-03 23:26:16 UTC	414	IN	Data Raw: b1 07 a5 57 7a 3d fa 09 c5 0a e0 cb 75 1e 03 48 62 e4 13 e3 3e 57 72 ac 19 d8 55 a2 a0 24 de ae 9a 47 d9 f0 cd 3a 67 91 fd f4 a0 13 cb a2 7e 08 41 01 f8 08 f5 8d ab 06 f2 7b fc 4e b4 ed 25 c7 f2 d9 d1 2e c1 b6 1d 51 56 b6 a1 7d b5 ac 4c 26 5b f5 f6 7a 22 3f d9 bd 0a 4f a2 44 ea ca 9c fb 4d e3 08 4a cc 5a 28 00 ab 5b 91 e8 6c b1 c7 20 b6 11 37 26 38 08 7c db a3 fd 28 54 1a 9f 85 1d 68 ef af 0f 13 b6 e4 ab 12 47 d0 ff 35 0b 65 ac ad 24 b8 c7 43 09 b5 2b 8f 56 62 0b 6f 6e 02 1e 6a 45 5b 25 fa e8 ba 37 10 5f 36 9b 96 c8 cb c2 15 b8 cd fc 6e 43 25 6f 5f c4 5e e0 91 c6 4f 51 82 f2 2a fc 6f bf 43 71 4f 0d 8c a1 f6 a6 73 05 b4 34 f6 98 83 dd 1f a1 c4 2a 43 d0 da 60 0f ee c1 da 50 e4 50 79 3c 8a 64 3b 3a 83 66 e3 ee c4 05 24 ef 38 09 37 5d d3 4e e0 e3 e8 09 12 17 Data Ascii: Wz=uHb>WrU$G:g~A{N%.QV}L&[z"?ODMJZ([l 7&8\|(ThG5e$C+VbonjE[%7_6nC%o_^OQoCqOs4C`PPy<d;:f$87]N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49748	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:16 UTC	380	OUT	GET /wm/assets/images/ns/aol-logo-black-v.0.0.2.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:16 UTC	1051	IN	HTTP/1.1 200 OK x-amz-id-2: h3es9jO/xxWaKPq8TmN9p3P3fTGd9tayaiEy6tHXzYp5xw/eGjnFJySa6uOh7NmnHdpmIZCxfnY= x-amz-request-id: PTESBFZ34VES7KRC Date: Fri, 23 Feb 2024 00:57:18 GMT Last-Modified: Fri, 04 May 2018 01:23:57 GMT ETag: "f9e0f24b60732cd95150a37fb003b871" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000; public x-amz-meta-created-date: Thu, 16 Nov 2017 19:59:27 GMT x-amz-meta-mbst-etag: "YM:1:3570f846-88d6-4c90-bd91-179d937c363c00055e1f0ebaf172" x-amz-meta-x-ysws-mbst-vtime: 1510862367682930 Expires: Sat, 04 May 2019 01:23:56 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 16340 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 858539 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 0e 00 00 01 39 08 06 00 00 00 39 a2 77 71 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 cb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 35 2e 34 2e 30 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: PNGIHDR99wqsRGBiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: 80 00 04 20 50 24 01 12 87 fc c2 5e e7 e7 d2 2c 1e 55 1a 25 cc 32 12 83 40 00 02 10 80 00 04 20 00 81 04 09 90 38 24 18 b4 1b 26 d7 da c7 8f a2 6f 00 ba b3 8b b7 35 77 00 b1 1b 02 10 80 00 04 20 00 81 72 09 90 38 e4 15 7b 3e b7 19 17 cf 7a 5c 77 7a 43 00 02 10 80 00 04 20 00 81 7c 09 90 38 e4 13 db 20 57 aa 7c dc 59 c4 13 7e 24 bd 08 76 06 85 00 04 20 00 01 08 40 20 05 02 24 0e 29 44 a9 9b 8d 7c 66 d3 8d d3 bd 56 bc b5 b9 47 88 fd 10 80 00 04 20 00 01 08 14 49 80 c4 21 8f b0 f3 a4 3c 5e 1c 2b a9 0a f1 d4 a1 09 02 10 80 00 04 20 00 01 08 e4 41 80 c4 21 8f 38 6e e4 06 3f 8a 8e 17 cb 3a 9e 2a 34 41 00 02 10 80 00 04 20 00 81 3c 08 90 38 e4 11 47 3e 53 8a 1b 47 3e 57 8a cb 13 6d 10 80 00 04 20 00 01 08 64 40 80 c4 21 fd 20 ae e5 82 09 25 1e 81 20 55 f6 16 87 Data Ascii: P$^,U%2@ 8$&o5w r8{>z\wzC \|8 W\|Y~$v @ $)D\|fVG I!<^+ A!8n?:*4A <8G>SG>Wm d@! % U
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: f8 09 55 25 53 82 1f 73 b0 64 00 01 8b df 7a 40 3f ba 40 00 02 10 80 00 04 20 00 01 f7 04 48 1c fc 84 88 1f d7 fa 89 c5 18 4b 78 eb 30 86 1e 7d 21 00 01 08 40 00 02 10 70 4b 80 c4 c1 47 68 ec 77 0d b5 0f 53 b0 62 24 81 8d fa f3 3b 95 91 10 e9 0e 01 08 40 00 02 10 80 80 3f 02 7f f5 67 52 91 16 d5 45 7a 9d a7 d3 96 34 58 f2 b0 cd d3 3d bc 82 c0 64 04 ec dc 59 3f d1 1e b4 6e 32 a6 34 4f 3a 1f b4 be 7f b2 cd 2a 04 20 00 01 08 f4 24 40 e2 d0 13 d8 44 cd f9 bc 65 22 b0 0b a9 b5 78 6e 17 1a 9b 61 21 e0 91 c0 31 29 08 32 ce e4 7f 25 c7 24 a1 d2 fa 54 e5 ed 15 c5 ad ea 4d 2c 99 f8 f7 e3 d2 92 0a db b6 25 05 02 10 80 00 04 2e 10 20 71 b8 00 65 e6 aa 4a e3 85 99 c7 64 b8 69 09 ac a5 de 84 09 c8 b4 9c d1 ee 8f c0 4a 26 1d 8f ff bf 6b 3d 3c 6e 5b bd a7 12 64 8c 89 95 Data Ascii: U%Ssdz@?@ HKx0}!@pKGhwSb$;@?gREz4X=dY?n24O:* $@De"xna!1)2%$TM,%. qeJdiJ&k=<n[d
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: a2 89 b6 83 a7 cb d1 50 66 a5 88 b7 50 59 85 33 9a 33 2b 69 b2 a7 c5 36 e9 a3 40 60 2c 81 e3 5b ab 7a ac 22 fa 43 00 02 10 30 02 24 0e d3 1e 07 36 09 a8 a7 1d 02 ed 89 12 e0 b8 48 34 70 13 9a 5d 49 f7 67 89 2d 29 10 88 45 c0 ee 43 1f 1e c5 d6 29 10 80 00 04 06 13 20 71 18 8c ae 53 c7 ba 53 2b 1a 95 48 80 a4 b2 c4 a8 5f f7 f9 8d 76 d9 9b 06 26 76 d7 19 b1 67 1c 81 5a dd ed 18 0b 12 0a 04 20 00 81 41 04 48 1c 06 61 eb dc 89 cf 51 4e 51 fd ac cd f6 b4 aa e8 ad 97 45 7b 8f f3 46 c0 12 05 7b 1a fc ce 36 28 10 98 98 c0 5a fa ed 77 0f d5 c4 e3 a0 1e 02 10 c8 94 00 89 c3 74 81 ad a4 3a 4c a7 3e 39 cd ad 2c 7e 90 ec 24 94 af 04 2a 2d c2 d7 55 fe 2d 90 80 25 0d f6 04 b8 2e d0 77 5c 5e 8e 00 c7 dd 72 ec 19 19 02 c9 13 20 71 98 2e 84 3c 4d 3e 65 7b 4c 18 7e 3b ad 2e Data Ascii: PfPY33+i6@`,[z"C0$6H4p]Ig-)EC) qSS+H_v&vgZ AHaQNQE{F{6(Zwt:L>9,~$*-U-%.w\^r q.<M>e{L~;.
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: 80 40 21 04 48 1c 86 05 3a a8 9b 3d 0d a6 9c 13 f8 78 5e d5 a9 a6 51 ab 43 a7 96 65 35 22 41 f5 13 ef 20 53 f8 5d 83 9f 78 60 89 1f 02 f6 06 ee ad 1f 73 b0 04 02 10 98 8a 00 89 c3 30 b2 f5 b0 6e d9 f7 b2 89 ff 7e 84 97 bb 11 7d 73 ed 1a e4 d8 26 57 e7 12 f3 8b a7 aa 89 05 0c 73 67 25 f0 46 a3 55 b3 8e c8 60 10 80 c0 ec 04 48 1c 86 21 e7 29 f0 65 6e 63 27 fe 7d ff 1a d3 65 2b f2 ab e5 78 5b 3e a6 4c 8a 96 8f 01 16 f8 27 f0 8b 4c 5c f9 37 13 0b 21 00 81 a1 04 48 1c fa 93 db a8 4b e8 df ad 88 1e 63 7f a7 30 36 f1 c8 15 32 c7 dc b2 91 0d 1a 9e cf 30 96 8d 01 a3 a7 41 c0 92 06 7b 33 47 81 00 04 32 25 40 e2 d0 3f b0 3c fd bd ce ac b9 be ab d3 9e 83 5a 8d d5 d1 69 a0 04 1b d5 09 da 9c 8b c9 36 11 b2 09 11 05 02 10 b8 4f c0 1e 74 54 f7 9b d1 02 02 10 48 91 00 89 Data Ascii: @!H:=x^QCe5"A S]x`s0n~}s&Wsg%FU`H!)enc'}e+x[>L'L\7!HKc0620A{3G2%@?<Zi6OtTH
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: 98 fc 5e 67 73 6b 4f ad 9d e1 56 03 f6 f5 26 60 d7 86 7f 48 1e 24 29 26 0c 32 fb a4 34 da b2 e4 e1 95 24 07 7f e4 86 9b c2 03 3a 37 a1 c0 10 08 74 27 40 e2 70 ce aa 56 d5 ea bc 9a 9a 27 04 e6 9e c8 37 4f c6 66 f5 9c 40 ad 2a 8e d9 73 2e f7 6a 48 b8 ee 11 ea be bf 55 53 9b 60 ff 53 62 eb b9 95 ad 1c fa 4e f2 3e 37 c7 16 f4 27 68 ec cd 82 e3 33 34 04 20 30 80 00 89 c3 39 34 26 13 e7 4c 9e d7 ec 9e 57 4c bc 7d 90 fe b9 c7 9c d8 a5 e8 ea eb e8 1a f3 56 b8 96 7b 55 de 2e ce e6 dd 56 23 d9 5b 86 46 92 73 b1 eb d0 4f 12 4b 90 6c 9d 32 9e 00 f7 db f1 0c d1 00 81 59 09 90 38 9c e2 0e da ac 4e ab d8 7a 46 60 a9 09 fc 6f cf ec 60 f3 94 00 37 e0 53 1e f7 b6 f8 4c e2 1e a1 fb fb 6d f2 6c 6f 18 5e 49 4a 9a 48 37 f2 d7 de 3e 2c 75 2d d4 d0 d9 94 8d 3c 09 d9 78 83 23 10 Data Ascii: ^gskOV&`H$)&24$:7t'@pV'7Of@*s.jHUS`SbN>7'h34 094&LWL}V{U.V#[FsOKl2Y8NzF`o`7SLmlo^IJH7>,u-<x#
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: 70 49 8e c4 5b c2 24 c3 86 d1 25 10 28 31 71 a8 15 58 9b 4c 50 ee 13 f0 3e 31 6f ee bb 40 0b 11 d8 14 4c a1 2a d8 f7 2e ae 6f d5 68 df a5 21 6d a2 12 20 59 bb 8d 73 7d 7b 37 7b 21 00 81 a5 08 94 98 38 f0 a3 e8 ee 47 db ae 7b d3 45 5a 1e 34 aa 77 1b 17 01 f3 6c d0 95 b6 eb 67 75 a5 6c f2 e4 f2 76 a4 f9 b1 ee 6d 3e 53 ed 6d a5 78 3b 95 f2 0c f4 ae e5 83 5d b7 28 10 80 80 33 02 a5 25 0e 41 fc 2b 67 31 f0 6a 4e 2a 13 f2 df bc 02 74 66 57 a9 09 b3 4d 40 28 97 09 6c 55 dd 5e de 45 ed 0c 04 48 da 6e 43 ae 6e ef 66 2f 04 20 b0 04 81 d2 12 87 92 bf f5 ee 7b 7c 79 ff 4c e9 e8 4f 2a 09 ce d1 de a5 96 95 06 0e 4b 0d be e0 b8 d5 82 63 7b 1f 9a 89 eb b2 11 6a 35 fc 76 59 13 5c 8f 4e d2 ef 3a 3c 18 57 2a 81 d2 12 87 ba d4 40 0f f0 bb 19 d0 67 89 2e ad 06 dd 2f 31 70 82 Data Ascii: pI[$%(1qXLP>1o@L.oh!m Ys}{7{!8G{EZ4wlgulvm>Smx;](3%A+g1jNtfWM@(lU^EHnCnf/ {\|yLOKc{j5vY\N:<W@g./1p
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: c4 c1 92 86 d5 12 10 13 1e d3 26 d6 87 84 ed bf 67 7a ae 6f 53 ee f9 3d 74 3f 9f 2b 0d 25 e7 bb df 7f 7c 9b 87 75 cf 08 b4 cf b6 d9 84 00 04 20 e0 86 40 4e 89 03 9f 29 f5 3f ac 3e f6 ef 92 54 8f 5d 52 d6 2e 6f 6c 90 09 9b e5 cd c0 02 08 40 00 02 10 80 00 04 3c 12 c8 25 71 58 0b ae 09 a5 1f 81 a6 5f f3 e4 5a ef 65 71 9b 9c d5 cb 1a cc 5b 87 65 f9 33 3a 04 20 00 01 08 40 c0 2d 81 5c 12 07 de 36 f4 3f c4 5a 75 b1 89 75 ee a5 c9 dd c1 c8 fe 6d a4 2f 44 d6 89 3a 08 40 00 02 10 80 00 04 32 20 90 43 e2 b0 52 1c 6c b2 43 e9 47 60 d7 af 79 b2 ad f9 9d 43 ff d0 d5 fd bb d0 03 02 10 80 00 04 20 00 81 dc 09 e4 90 38 58 d2 60 c9 03 a5 1f 81 df fa 35 4f b6 75 29 09 52 cc 00 f1 b9 52 4c 9a e8 82 00 04 20 00 01 08 64 42 20 87 c4 81 cf 94 fa 1f 8c 07 75 29 69 42 5d 92 af Data Ascii: &gzoS=t?+%\|u @N)?>T]R.ol@<%qX_Zeq[e3: @-\6?Zuum/D:@2 CRlCG`yC 8X`5Ou)RRL dB u)iB]
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: 38 5e 4a 43 71 fe a6 14 2d 6c 2d 86 80 e7 c4 a1 2e 26 0a 38 0a 81 34 09 78 ff fd 51 2b ac 87 34 d1 4e 6e 75 d0 08 f5 e4 a3 30 c0 3d 02 24 70 d7 09 f1 9f 38 5e 67 c3 1e 08 2c 46 c0 73 e2 e0 7d 52 b2 58 d0 18 18 02 4e 08 04 d9 51 39 b1 e5 9a 19 cd b5 1d d4 bf 60 d2 ba ec 41 50 6b f8 b0 ac 09 ae 47 6f 5c 5b 87 71 10 28 94 80 d7 c4 a1 52 3c 42 a1 31 c1 6d 08 a4 44 c0 fb f7 d9 fc 40 fa fa d1 14 b4 ab be be 9b 3d 13 13 20 71 bb 0d 98 4f 95 6e f3 61 2f 04 16 21 e0 35 71 f0 3e 19 59 24 58 0c 0a 01 87 04 36 b2 69 e5 d0 ae a3 49 4c 3e 8e 24 2e 2f 99 bc 5e e6 32 75 6d ad 01 c2 d4 83 24 ac bf 49 d8 76 4c 87 40 d6 04 3c 26 0e 36 09 a9 b3 a6 8e 73 10 c8 87 80 9d af 1b c7 ee 34 8e 6d f3 60 5a 90 11 0f 1e 0c 29 c8 06 3b 67 de 15 e4 ef 10 57 79 53 38 84 1a 7d 20 30 03 01 Data Ascii: 8^JCq-l-.&84xQ+4Nnu0=$p8^g,Fs}RXNQ9`APkGo\[q(R<B1mD@= qOna/!5q>Y$X6iIL>$./^2um$IvL@<&6s4m`Z);gWyS8} 0
2024-03-03 23:26:16 UTC	1300	IN	Data Raw: 46 14 c6 ab 4a 4e 43 c9 be c7 0c d6 41 ca b6 31 15 a2 0b 02 91 08 d8 c3 11 7b 52 9f 53 59 c9 19 4b 84 ea 31 4e 2d 95 38 54 32 3a 8c 31 9c be 10 80 40 12 04 5e 3a b5 72 2b bb 6c d2 42 19 47 60 ad ee 96 3c bc 19 a7 26 99 de 41 96 da 8d f7 5d 32 16 fb 36 94 04 de 77 7c 4a b4 2e ca e4 da 39 b8 0f b2 ef 61 a8 8d 4b 25 0e 5e 27 13 43 39 d2 0f 02 10 b8 4c a0 be 5c bd 78 ad 25 0d bb c5 ad c8 c3 00 bb d1 da 44 da 26 d4 41 92 6b 79 23 c7 2c 49 aa 72 75 70 01 bf b6 0b 8c c9 90 10 b8 46 c0 ae 65 76 1d ab ae 35 c8 a8 fe ad 7c f9 30 c4 9f 25 12 07 0b 4c 3d c4 58 fa 40 00 02 c9 11 f0 7c be ff 9c 1c 4d df 06 57 32 ef b3 c4 92 08 8b 7b 2e a5 92 23 39 fa b5 74 7c b6 32 a0 5d da 08 c6 87 c0 13 02 9f b4 be 7e b2 9d fb 6a 2d 07 1f fa 3a b9 44 e2 f0 a6 af 91 b4 87 00 04 92 26 Data Ascii: FJNCA1{RSYK1N-8T2:1@^:r+lBG`<&A]26w\|J.9aK%^'C9L\x%D&Aky#,IrupFev5\|0%L=X@\|MW2{.#9t\|2]~j-:D&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:16 UTC	660	OUT	GET /wm/mbr/images/checkbox-unchecked.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/wm/mbr/3689655c0d5d523f0d4ae53b598de350d766716a/aol-main.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:16 UTC	793	IN	HTTP/1.1 200 OK x-amz-id-2: 7cK/XliYNSgNal2B3RUNSixpe8DJB6H664CSsu6LNfH30XFZcm4YwU+f8vjZq4PKdRJ5evyiJ+Q= x-amz-request-id: VWKD5GN3H7EBV2GN Date: Tue, 09 Jan 2024 18:30:47 GMT Last-Modified: Fri, 24 Apr 2020 17:13:52 GMT ETag: "f456007284e4510464d9dfddabd3fb0e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 733 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 4683330 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:16 UTC	733	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 39 20 28 38 36 31 32 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 59 (86127) - https://sketch.com --> <tit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49752	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:16 UTC	595	OUT	GET /wm/login/aol-favicon.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aolserv.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:17 UTC	1061	IN	HTTP/1.1 200 OK x-amz-id-2: SaBeAGGEfyDiCRvGfIafJUa1FLf2jTN1ID+LOh/vAvRfZsxKQhcCAIa/o1oxyYVAeshu9AXHzBhLlEjvk6/vVA== x-amz-request-id: DC3E22N3C6A8K524 Date: Fri, 01 Mar 2024 14:23:20 GMT Last-Modified: Fri, 04 May 2018 04:41:39 GMT ETag: "b12b87cffdae1bc42b921fcf2bd9cf4c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000; public x-amz-meta-created-date: Thu, 30 Nov 2017 22:26:41 GMT x-amz-meta-mbst-etag: "YM:1:460c7d58-a304-4b5e-b4cc-bb4ea9f291d500055f3abf118f12" x-amz-meta-x-ysws-mbst-vtime: 1512080801894162 Expires: Sat, 04 May 2019 04:41:38 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 706 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 205378 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:17 UTC	706	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 04 03 00 00 00 10 b6 6a 0b 00 00 00 2d 50 4c 54 45 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff ff ff ff 48 a6 ff c1 e1 ff 6b b6 ff aa d5 ff 89 c5 ff ee f6 ff db ed ff 4e e7 46 ea 00 00 00 06 74 52 4e 53 01 b4 57 d4 30 da 25 a7 dd 2e 00 00 02 3e 49 44 41 54 58 c3 ed 98 31 4f 02 31 14 c7 4f 63 9c 8d 26 cc ba b8 bb 30 bb e8 27 30 ce 22 52 0f 0e 1d 2d 20 38 1e e7 a0 a3 60 dc f5 1b 48 cc ed 9c 09 71 55 4c 9c c1 a8 f1 33 d8 d7 5e ef 4a 68 a1 6f 71 ba 97 90 5c db f7 eb f5 df d7 f6 78 75 1c 61 1b 6b 64 a6 6d ad 3a aa 2d e6 c8 5c 2b ac 2b fe 79 62 61 c5 94 c8 11 2b 2b 48 ff 1d 62 69 7b c2 7f 89 58 db 36 07 76 ed 81 23 0e ec db 03 25 f0 5f 20 08 5b 61 c0 26 06 38 64 40 1e 03 Data Ascii: PNGIHDR``j-PLTE///////HkNFtRNSW0%.>IDATX1O1Oc&0'0"R- 8`HqUL3^Jhoq\xuakdm:-\++yba++Hbi{X6v#%_ [a&8d@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49753	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:17 UTC	370	OUT	GET /wm/mbr/images/checkbox-unchecked.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:17 UTC	793	IN	HTTP/1.1 200 OK x-amz-id-2: kRnWGCn0YreHPOhMjDL4A+hdUgXzfKgfuIm4wquyLTLEm4R+t9AOWfFtXWPOGWshzt7+9z+GXs4= x-amz-request-id: S89SJBW700WT6TED Date: Mon, 19 Feb 2024 11:09:39 GMT Last-Modified: Fri, 24 Apr 2020 17:13:52 GMT ETag: "f456007284e4510464d9dfddabd3fb0e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 733 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1167399 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:17 UTC	733	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 39 20 28 38 36 31 32 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 59 (86127) - https://sketch.com --> <tit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49755	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:17 UTC	696	OUT	GET /wm/login/aol-favicon.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aolserv.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "b12b87cffdae1bc42b921fcf2bd9cf4c" If-Modified-Since: Fri, 04 May 2018 04:41:39 GMT
2024-03-03 23:26:17 UTC	479	IN	HTTP/1.1 304 Not Modified Date: Sun, 03 Mar 2024 23:26:17 GMT Etag: "b12b87cffdae1bc42b921fcf2bd9cf4c" Expires: Sat, 04 May 2019 04:41:38 GMT Cache-Control: max-age=31536000; public Vary: Origin Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49756	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:17 UTC	358	OUT	GET /wm/login/aol-favicon.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:17 UTC	1049	IN	HTTP/1.1 200 OK x-amz-id-2: LHCKN92vxJXS0qdPyYg0UyrqVOk2K4gAZ7VjkcuvC092Bo+cGgaexTI6EtLVL5v5d/HuHKWKAhk= x-amz-request-id: G3A9G0QFM5TYYJB9 Date: Thu, 22 Feb 2024 22:14:48 GMT Last-Modified: Fri, 04 May 2018 04:41:39 GMT ETag: "b12b87cffdae1bc42b921fcf2bd9cf4c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000; public x-amz-meta-created-date: Thu, 30 Nov 2017 22:26:41 GMT x-amz-meta-mbst-etag: "YM:1:460c7d58-a304-4b5e-b4cc-bb4ea9f291d500055f3abf118f12" x-amz-meta-x-ysws-mbst-vtime: 1512080801894162 Expires: Sat, 04 May 2019 04:41:38 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 706 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 868290 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:17 UTC	706	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 04 03 00 00 00 10 b6 6a 0b 00 00 00 2d 50 4c 54 45 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff ff ff ff 48 a6 ff c1 e1 ff 6b b6 ff aa d5 ff 89 c5 ff ee f6 ff db ed ff 4e e7 46 ea 00 00 00 06 74 52 4e 53 01 b4 57 d4 30 da 25 a7 dd 2e 00 00 02 3e 49 44 41 54 58 c3 ed 98 31 4f 02 31 14 c7 4f 63 9c 8d 26 cc ba b8 bb 30 bb e8 27 30 ce 22 52 0f 0e 1d 2d 20 38 1e e7 a0 a3 60 dc f5 1b 48 cc ed 9c 09 71 55 4c 9c c1 a8 f1 33 d8 d7 5e ef 4a 68 a1 6f 71 ba 97 90 5c db f7 eb f5 df d7 f6 78 75 1c 61 1b 6b 64 a6 6d ad 3a aa 2d e6 c8 5c 2b ac 2b fe 79 62 61 c5 94 c8 11 2b 2b 48 ff 1d 62 69 7b c2 7f 89 58 db 36 07 76 ed 81 23 0e ec db 03 25 f0 5f 20 08 5b 61 c0 26 06 38 64 40 1e 03 Data Ascii: PNGIHDR``j-PLTE///////HkNFtRNSW0%.>IDATX1O1Oc&0'0"R- 8`HqUL3^Jhoq\xuakdm:-\++yba++Hbi{X6v#%_ [a&8d@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49758	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:18 UTC	459	OUT	GET /wm/login/aol-favicon.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "b12b87cffdae1bc42b921fcf2bd9cf4c" If-Modified-Since: Fri, 04 May 2018 04:41:39 GMT
2024-03-03 23:26:18 UTC	479	IN	HTTP/1.1 304 Not Modified Date: Sun, 03 Mar 2024 23:26:18 GMT Etag: "b12b87cffdae1bc42b921fcf2bd9cf4c" Expires: Sat, 04 May 2019 04:41:38 GMT Cache-Control: max-age=31536000; public Vary: Origin Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49759	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-03 23:26:19 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=158325 Date: Sun, 03 Mar 2024 23:26:19 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49760	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-03 23:26:19 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=158368 Date: Sun, 03 Mar 2024 23:26:19 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-03 23:26:19 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	76.13.32.141	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:28 UTC	634	OUT	GET / HTTP/1.1 Host: www.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:28 UTC	1290	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:28 GMT Content-Type: text/html; charset=utf-8 Vary: Accept-Encoding content-security-policy: upgrade-insecure-requests; block-all-mixed-content; sandbox allow-modals allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-orientation-lock allow-pointer-lock; cache-control: no-cache, no-store, private, must-revalidate Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Set-Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; Expires=Tue, 4 Mar 2025 05:26:28 GMT; Max-Age=31557600; Domain=.aol.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; Expires=Tue, 4 Mar 2025 05:26:28 GMT; Max-Age=31557600; Domain=.aol.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; Domain=.aol.com; Path=/; SameSite=Lax; Secure Referrer-Policy: no-referrer-when-downgrade X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN
2024-03-03 23:26:28 UTC	1300	IN	Data Raw: 36 36 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 64 3d 22 61 74 6f 6d 69 63 22 20 63 6c 61 73 73 3d 22 4e 6f 4a 73 20 63 68 72 6f 6d 65 20 64 65 73 6b 74 6f 70 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 20 26 26 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 50 61 67 65 53 74 61 72 74 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 Data Ascii: 66f2<!DOCTYPE html><html id="atomic" class="NoJs chrome desktop" lang="en-US"><head prefix="og: http://ogp.me/ns#"><script>window.performance && window.performance.mark && window.performance.mark('PageStart');</script><meta charSet="utf-8"/><meta http-e
2024-03-03 23:26:28 UTC	1300	IN	Data Raw: 3a 2f 2f 6d 61 69 6c 2f 61 6e 79 2f 69 6e 62 6f 78 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 61 74 68 3a 67 75 63 65 3a 63 6f 6e 73 65 6e 74 2d 68 6f 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 44 69 73 63 6f 76 65 72 20 74 68 65 20 6c 61 74 65 73 74 20 62 72 65 61 6b 69 6e 67 20 6e 65 77 73 20 69 6e 20 74 68 65 20 55 2e 53 2e 20 61 6e 64 20 61 72 6f 75 6e 64 20 74 68 65 20 77 6f 72 6c 64 20 e2 80 94 20 70 6f 6c 69 74 69 63 73 2c 20 77 65 61 74 68 65 72 2c 20 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2c 20 6c 69 66 65 73 74 79 6c 65 2c 20 66 69 6e 61 6e 63 65 2c 20 73 70 6f 72 74 73 20 61 Data Ascii: ://mail/any/inbox"/><meta name="oath:guce:consent-host" content="guce.aol.com"/><meta name="twitter:description" content="Discover the latest breaking news in the U.S. and around the world politics, weather, entertainment, lifestyle, finance, sports a
2024-03-03 23:26:28 UTC	1300	IN	Data Raw: 65 2e 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 6d 65 74 61 64 61 74 61 2f 6f 67 2d 69 6d 61 67 65 2e 70 6e 67 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 41 4f 4c 2e 63 6f 6d 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 65 77 73 2c 20 50 6f 6c 69 74 69 63 73 2c 20 53 70 6f 72 74 73 2c 20 4d 61 69 6c 20 26 61 6d 70 3b 20 4c 61 74 65 73 74 20 48 65 61 64 6c 69 6e 65 73 22 2f 3e 3c 6d 65 74 61 20 72 65 6c 3d 22 70 75 62 6c 69 73 68 65 Data Ascii: e."/><meta property="og:image" content="https://s.yimg.com/cv/apiv2/aolfp/metadata/og-image.png"/><meta property="og:site_name" content="AOL.com"/><meta property="og:title" content="News, Politics, Sports, Mail & Latest Headlines"/><meta rel="publishe
2024-03-03 23:26:28 UTC	1300	IN	Data Raw: 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 35 37 78 35 37 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 36 30 78 36 30 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 36 30 78 36 30 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 37 32 78 37 32 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 Data Ascii: mages/favicon/apple-touch-icon-57x57.png"/><link rel="apple-touch-icon" sizes="60x60" type="image/png" href="https://s.yimg.com/cv/apiv2/aolfp/images/favicon/apple-touch-icon-60x60.png"/><link rel="apple-touch-icon" sizes="72x72" type="image/png" href="ht
2024-03-03 23:26:28 UTC	1300	IN	Data Raw: 66 70 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 66 61 76 69 63 6f 6e 2d 31 36 78 31 36 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 39 36 78 39 36 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 Data Ascii: fp/images/favicon/favicon-16x16.png"/><link rel="icon" sizes="32x32" type="image/png" href="https://s.yimg.com/cv/apiv2/aolfp/images/favicon/favicon-32x32.png"/><link rel="icon" sizes="96x96" type="image/png" href="https://s.yimg.com/cv/apiv2/aolfp/images
2024-03-03 23:26:28 UTC	554	IN	Data Raw: 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 63 61 61 73 2d 61 73 73 65 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2f 61 73 73 65 74 73 2f 76 31 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 61 6e 6e 65 72 2e 61 65 34 38 63 34 65 35 39 64 38 33 61 39 35 31 2e 63 73 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 63 61 61 73 2d 61 73 73 65 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2f 61 73 73 65 74 73 2f 76 31 2f 64 6c 2e 30 38 33 35 32 61 32 35 65 64 39 34 64 62 61 61 2e 63 73 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 Data Ascii: ="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/notification_banner.ae48c4e59d83a951.css"/><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/dl.08352a25ed94dbaa.css"/><link rel="stylesheet" href="
2024-03-03 23:26:28 UTC	1300	IN	Data Raw: 30 64 2e 63 73 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 63 61 61 73 2d 61 73 73 65 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2f 61 73 73 65 74 73 2f 76 31 2f 61 6f 6c 5f 68 65 61 64 65 72 2e 62 66 39 66 64 32 34 61 63 32 62 38 63 61 37 33 2e 63 73 73 22 2f 3e 3c 73 63 72 69 70 74 3e 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 30 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 20 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 36 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 Data Ascii: 0d.css"/><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.bf9fd24ac2b8ca73.css"/><script>/! CMP 6.4.0 Copyright 2018 Oath Holdings, Inc. / !function(){var e={604:function(e){"use strict";function t(e){return(
2024-03-03 23:26:28 UTC	1300	IN	Data Raw: 2e 64 61 74 61 3b 76 61 72 20 73 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 28 61 29 26 26 6e 75 6c 6c 21 3d 3d 61 3f 61 2e 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 6e 75 6c 6c 3b 73 26 26 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 28 73 2e 63 6f 6d 6d 61 6e 64 2c 73 2e 76 65 72 73 69 6f 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 61 29 7b 76 61 72 20 72 3d 7b 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 3a 7b 72 65 74 75 72 6e 56 61 6c 75 65 3a 74 2c 73 75 63 63 65 73 73 3a 61 2c 63 61 6c 6c 49 64 3a 73 2e 63 61 6c 6c 49 64 7d 7d 3b 65 26 26 65 2e 73 6f 75 72 63 65 26 26 65 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 26 26 65 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 3a 72 2c Data Ascii: .data;var s="object"===t(a)&&null!==a?a.__tcfapiCall:null;s&&window.__tcfapi(s.command,s.version,(function(t,a){var r={__tcfapiReturn:{returnValue:t,success:a,callId:s.callId}};e&&e.source&&e.source.postMessage&&e.source.postMessage(n?JSON.stringify(r):r,
2024-03-03 23:26:28 UTC	1300	IN	Data Raw: 65 6e 65 72 52 65 67 69 73 74 65 72 65 64 22 2c 6c 69 73 74 65 6e 65 72 49 64 3a 73 2c 64 61 74 61 3a 21 30 2c 70 69 6e 67 44 61 74 61 3a 7b 67 70 70 56 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 63 6d 70 53 74 61 74 75 73 3a 22 73 74 75 62 22 2c 63 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 3a 22 68 69 64 64 65 6e 22 2c 73 69 67 6e 61 6c 53 74 61 74 75 73 3a 22 6e 6f 74 20 72 65 61 64 79 22 2c 73 75 70 70 6f 72 74 65 64 41 50 49 73 3a 5b 22 32 3a 74 63 66 65 75 76 32 22 2c 22 35 3a 74 63 66 63 61 76 31 22 2c 22 36 3a 75 73 70 76 31 22 2c 22 37 3a 75 73 6e 61 74 76 31 22 2c 22 38 3a 75 73 63 61 76 31 22 2c 22 39 3a 75 73 76 61 76 31 22 2c 22 31 30 3a 75 73 63 6f 76 31 22 2c 22 31 31 3a 75 73 75 74 76 31 22 2c 22 31 32 3a 75 73 63 74 76 31 22 5d 2c 63 6d 70 Data Ascii: enerRegistered",listenerId:s,data:!0,pingData:{gppVersion:"1.1",cmpStatus:"stub",cmpDisplayStatus:"hidden",signalStatus:"not ready",supportedAPIs:["2:tcfeuv2","5:tcfcav1","6:uspv1","7:usnatv1","8:uscav1","9:usvav1","10:uscov1","11:usutv1","12:usctv1"],cmp
2024-03-03 23:26:28 UTC	1300	IN	Data Raw: 75 6c 6c 2c 22 76 65 72 73 69 6f 6e 22 69 6e 20 61 3f 61 2e 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 29 7d 7d 2c 22 5f 5f 67 70 70 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 67 70 70 7c 7c 28 77 69 6e 64 6f 77 2e 5f 5f 67 70 70 3d 77 69 6e 64 6f 77 2e 5f 5f 67 70 70 5f 73 74 75 62 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 77 69 6e 64 6f 77 2e 5f 5f 67 70 70 5f 6d 73 67 68 61 6e 64 6c 65 72 2c 21 31 29 2c 77 69 6e 64 6f 77 2e 5f 5f 67 70 70 5f 61 64 64 46 72 61 6d 65 28 22 5f 5f 67 70 70 4c 6f 63 61 74 6f 72 22 29 29 7d 2c 37 30 33 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: ull,"version"in a?a.version:"1.1")}},"__gpp"in window&&"function"==typeof window.__gpp\|\|(window.__gpp=window.__gpp_stub,window.addEventListener("message",window.__gpp_msghandler,!1),window.__gpp_addFrame("__gppLocator"))},7037:function(e,t,n){"use strict"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49770	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	531	OUT	GET /aaq/benji/benji-1.0.170.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: ph0HxdnuUHlvN1pbmQVUmGedUSO3/hkvE/wXEOfte1p2Ac09XXd+ciKmuF0AHEDLLUqCV1FuFd4= x-amz-request-id: JZWWZRAZ7YXH23XA Date: Thu, 29 Feb 2024 03:32:37 GMT Last-Modified: Wed, 28 Feb 2024 19:36:24 GMT ETag: "c992eeaae25373e1f09e28db96da126b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: YUQcVlqMeiomrxdNKtDHDplqpsVxpMMS Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 55879 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 330833 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 62 65 6e 6a 69 3a 7b 7d 2c 67 6f 6f 67 6c 65 74 61 67 3a 7b 63 6d 64 3a 5b 5d 7d 2c 70 62 6a 73 3a 7b 71 75 65 3a 5b 5d 7d 2c 59 41 48 4f 4f 3a 7b 7d 7d 2c 74 3d 5b 22 6c 6f 63 61 6c 68 6f 73 74 22 2c 22 61 6f 6c 2e 63 6f 6d 22 2c 22 61 6f 6c 2e 63 6f 2e 75 6b 22 2c 22 61 6f 6c 2e 64 65 22 2c 22 61 75 74 6f 62 6c 6f 67 2e 63 6f 6d 22 2c 22 63 72 69 63 6b 65 74 2e 79 61 68 6f 6f 2e 73 70 6f 72 74 7a 2e 69 6f 22 2c 22 65 6e 67 61 64 67 65 74 2e 63 6f 6d 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 22 2c 22 79 61 68 6f 6f 2e 63 6f 6d 2e 68 6b 22 2c 22 79 61 68 6f 6f Data Ascii: !function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}},t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 30 2c 35 35 5d 22 3a 22 54 72 61 64 65 4e 6f 77 22 2c 22 5b 33 2c 31 5d 22 3a 22 48 6f 72 69 7a 6f 6e 22 2c 22 5b 33 2c 32 5d 22 3a 22 53 70 6f 74 6c 69 67 68 74 22 2c 22 5b 33 34 33 2c 33 31 30 5d 22 3a 22 46 65 61 74 75 72 65 64 42 72 6f 6b 65 72 4d 77 65 62 22 2c 22 5b 37 35 38 2c 31 39 38 5d 22 3a 22 46 65 61 74 75 72 65 64 42 72 6f 6b 65 72 22 7d 2c 50 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 61 67 2f 6a 73 2f 67 70 74 2e 6a 73 22 2c 78 3d 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 74 61 67 2f 6a 73 2f 67 70 74 2e 6a 73 22 2c 4c 3d 22 68 74 74 70 73 3a 2f 2f 6f 70 75 73 2e 61 6e 61 6c 79 74 69 Data Ascii: 0,55]":"TradeNow","[3,1]":"Horizon","[3,2]":"Spotlight","[343,310]":"FeaturedBrokerMweb","[758,198]":"FeaturedBroker"},P="https://securepubads.g.doubleclick.net/tag/js/gpt.js",x="https://pagead2.googlesyndication.com/tag/js/gpt.js",L="https://opus.analyti
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 22 6d 63 68 6e 6d 22 2c 22 64 65 76 69 63 65 22 2c 22 72 65 67 69 6f 6e 22 2c 22 75 72 6c 22 2c 22 63 6f 6c 6f 22 2c 49 2c 22 6e 63 69 64 22 2c 22 66 72 22 2c 22 66 72 74 79 70 65 22 2c 22 61 78 69 64 22 5d 2c 5a 3d 5b 22 61 78 69 64 22 2c 22 63 6f 6c 6f 22 2c 22 64 65 76 69 63 65 22 2c 22 66 72 22 2c 22 66 72 74 79 70 65 22 2c 22 6c 61 6e 67 22 2c 22 6c 6d 73 69 64 22 2c 22 6c 75 22 2c 22 6e 63 69 64 22 2c 22 70 63 74 22 2c 22 70 64 22 2c 49 2c 22 70 73 74 61 69 64 22 2c 22 70 74 22 2c 22 72 65 67 69 6f 6e 22 2c 22 73 69 74 65 22 2c 22 76 65 72 22 5d 3b 76 61 72 20 65 65 2c 74 65 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 74 74 3d 22 61 74 74 22 2c 65 2e 61 74 74 61 72 74 69 63 6c 65 73 3d 22 61 74 74 61 72 74 69 63 6c 65 73 22 2c 65 2e 61 6f 6c Data Ascii: "mchnm","device","region","url","colo",I,"ncid","fr","frtype","axid"],Z=["axid","colo","device","fr","frtype","lang","lmsid","lu","ncid","pct","pd",I,"pstaid","pt","region","site","ver"];var ee,te;!function(e){e.att="att",e.attarticles="attarticles",e.aol
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 6d 65 6e 74 5d 3a 22 64 32 35 68 61 72 61 7a 6a 64 66 68 77 70 22 2c 5b 65 65 2e 66 69 6e 61 6e 63 65 5d 3a 22 64 33 6c 6d 36 34 63 68 31 63 37 36 75 67 22 2c 5b 65 65 2e 66 70 5d 3a 22 64 31 63 63 77 36 36 6f 79 71 38 65 78 32 22 2c 5b 65 65 2e 66 72 6f 6e 74 70 61 67 65 5d 3a 22 64 31 63 63 77 36 36 6f 79 71 38 65 78 32 22 2c 5b 65 65 2e 69 6e 74 68 65 6b 6e 6f 77 5d 3a 22 64 6c 74 36 30 30 7a 32 71 32 35 7a 69 22 2c 5b 65 65 2e 6c 69 66 65 73 74 79 6c 65 5d 3a 22 64 31 32 68 38 71 30 33 6d 77 76 69 6b 6c 22 2c 5b 65 65 2e 6e 65 77 73 5d 3a 22 64 31 69 72 6d 64 73 6d 62 7a 74 6c 76 78 22 2c 5b 65 65 2e 72 69 76 61 6c 73 5d 3a 22 64 32 34 73 37 65 37 31 6a 6e 67 79 68 62 22 2c 5b 65 65 2e 73 70 6f 72 74 73 5d 3a 22 64 32 66 74 71 30 6f 6c 31 33 6b 65 37 Data Ascii: ment]:"d25harazjdfhwp",[ee.finance]:"d3lm64ch1c76ug",[ee.fp]:"d1ccw66oyq8ex2",[ee.frontpage]:"d1ccw66oyq8ex2",[ee.intheknow]:"dlt600z2q25zi",[ee.lifestyle]:"d12h8q03mwvikl",[ee.news]:"d1irmdsmbztlvx",[ee.rivals]:"d24s7e71jngyhb",[ee.sports]:"d2ftq0ol13ke7
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 6f 76 69 65 73 5d 3a 22 79 6d 6f 76 22 2c 5b 65 65 2e 6d 75 73 69 63 5d 3a 22 79 65 6e 74 22 2c 5b 65 65 2e 6e 65 77 73 5d 3a 22 79 6e 65 77 73 22 2c 5b 65 65 2e 73 70 6f 72 74 73 5d 3a 22 79 73 70 6f 72 74 73 22 2c 5b 65 65 2e 73 74 79 6c 65 5d 3a 22 79 6c 69 66 65 22 2c 5b 65 65 2e 74 65 63 68 5d 3a 22 79 74 65 63 68 22 7d 2c 79 65 3d 5b 6d 2c 62 2c 22 61 62 6b 22 2c 79 2c 22 70 63 74 22 2c 22 70 64 22 2c 49 2c 22 70 74 22 2c 22 73 70 61 63 65 69 64 22 2c 22 6c 6d 73 69 64 22 2c 22 70 73 74 61 69 64 22 2c 22 6c 70 73 74 61 69 64 22 2c 22 6d 63 68 6e 6d 22 2c 22 5f 72 69 64 22 2c 22 74 69 63 6b 65 72 22 2c 22 73 69 74 65 22 2c 22 73 63 6b 22 5d 2c 5f 65 3d 7b 66 65 74 63 68 4d 61 72 67 69 6e 50 65 72 63 65 6e 74 3a 2d 31 2c 6d 6f 62 69 6c 65 53 63 61 6c Data Ascii: ovies]:"ymov",[ee.music]:"yent",[ee.news]:"ynews",[ee.sports]:"ysports",[ee.style]:"ylife",[ee.tech]:"ytech"},ye=[m,b,"abk",y,"pct","pd",I,"pt","spaceid","lmsid","pstaid","lpstaid","mchnm","_rid","ticker","site","sck"],_e={fetchMarginPercent:-1,mobileScal
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 6c 65 66 74 2c 61 29 2c 6f 3d 3d 3d 74 3f 6e 3d 61 2d 31 3a 73 3d 61 2b 31 3b 65 6c 73 65 20 69 66 28 22 64 6f 77 6e 22 3d 3d 3d 69 29 66 6f 72 28 73 3d 65 2e 74 6f 70 2c 6e 3d 65 2e 62 6f 74 74 6f 6d 3b 73 3c 3d 6e 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 73 2b 6e 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 65 2e 6c 65 66 74 2c 61 29 2c 6f 3d 3d 3d 74 3f 73 3d 61 2b 31 3a 6e 3d 61 2d 31 3b 65 6c 73 65 20 69 66 28 22 6c 65 66 74 22 3d 3d 3d 69 29 66 6f 72 28 73 3d 65 2e 6c 65 66 74 2c 6e 3d 65 2e 72 69 67 68 74 3b 73 3c 3d 6e 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 73 2b 6e 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2c 65 2e 74 Data Ascii: left,a),o===t?n=a-1:s=a+1;else if("down"===i)for(s=e.top,n=e.bottom;s<=n;)a=Math.floor((s+n)/2),o=document.elementFromPoint(e.left,a),o===t?s=a+1:n=a-1;else if("left"===i)for(s=e.left,n=e.right;s<=n;)a=Math.floor((s+n)/2),o=document.elementFromPoint(a,e.t
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 68 74 3a 72 2c 74 6f 70 3a 73 7d 2c 74 2c 22 75 70 22 29 2c 61 3d 4f 65 28 7b 62 6f 74 74 6f 6d 3a 6e 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 64 6f 77 6e 22 29 2c 63 3d 4f 65 28 7b 62 6f 74 74 6f 6d 3a 61 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 6c 65 66 74 22 29 3b 72 65 74 75 72 6e 28 61 2d 65 29 2a 28 4f 65 28 7b 62 6f 74 74 6f 6d 3a 61 2c 6c 65 66 74 3a 63 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 65 7d 2c 74 2c 22 72 69 67 68 74 22 29 2d 63 29 2f 69 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 30 7d 7d 28 7b 62 6f 74 74 6f 6d 3a 63 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 61 7d 2c 65 2c 64 29 3b 72 65 74 75 72 6e 20 74 3e 3d 2e 35 7d 63 61 74 63 68 28 65 Data Ascii: ht:r,top:s},t,"up"),a=Oe({bottom:n,left:o,right:r,top:e},t,"down"),c=Oe({bottom:a,left:o,right:r,top:e},t,"left");return(a-e)*(Oe({bottom:a,left:c,right:r,top:e},t,"right")-c)/i}catch(e){return 0}}({bottom:c,left:o,right:r,top:a},e,d);return t>=.5}catch(e
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 26 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 3d 6e 29 2c 73 3f 6f 65 2e 72 65 70 6c 61 63 65 28 6e 65 2c 69 29 3a 72 65 2e 72 65 70 6c 61 63 65 28 6e 65 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 63 6f 6e 73 74 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 73 3d 3e 7b 6c 65 74 20 6e 3d 65 5b 73 5d 3b 74 2e 69 6e 63 6c 75 64 65 73 28 73 29 26 26 28 6e 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e 2e 6d 61 70 28 28 65 3d 3e 24 65 28 65 29 29 29 3a 24 65 28 6e 29 29 2c 69 5b 73 5d 3d 6e 7d 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 29 7b 6c 65 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 Data Ascii: &Math.floor(100*Math.random())<=n),s?oe.replace(ne,i):re.replace(ne,i)}function Ve(e,t){const i={};return Object.keys(e).forEach((s=>{let n=e[s];t.includes(s)&&(n=Array.isArray(n)?n.map((e=>$e(e))):$e(n)),i[s]=n})),i}function $e(e){let t=function(e){const
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 65 28 29 7d 29 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 74 29 7b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 74 29 7d 29 29 7d 63 72 65 61 74 65 28 2e 2e 2e 65 29 7b 63 6f 6e 73 74 5b 74 2c 69 5d 3d 65 2c 7b 70 61 74 68 3a 73 2c 73 69 7a 65 3a 6e 2c 69 64 3a 6f 2c 67 70 74 53 65 74 74 69 6e 67 3a 72 7d 3d 74 2c 7b 73 61 66 65 46 72 61 6d 65 43 6f 6e 66 69 67 3a 61 3d 7b 7d 7d 3d 72 7c 7c 7b 7d 3b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 63 6f 6e 73 Data Ascii: tag.cmd.push((()=>{e()}))}addEventListener(e,t){this._googletag.cmd.push((()=>{this._googletag.pubads().addEventListener(e,t)}))}create(...e){const[t,i]=e,{path:s,size:n,id:o,gptSetting:r}=t,{safeFrameConfig:a={}}=r\|\|{};this._googletag.cmd.push((()=>{cons
2024-03-03 23:26:29 UTC	1300	IN	Data Raw: 69 3d 74 7c 7c 65 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 2e 73 65 74 28 22 70 61 67 65 5f 75 72 6c 22 2c 69 29 7d 29 29 7d 73 65 74 50 72 69 76 61 63 79 53 65 74 74 69 6e 67 73 28 65 29 7b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 2e 73 65 74 50 72 69 76 61 63 79 53 65 74 74 69 6e 67 73 28 65 29 7d 29 29 7d 73 65 74 50 75 62 6c 69 73 68 65 72 50 72 6f 76 69 64 65 64 49 64 28 65 29 7b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 74 68 69 73 2e 5f 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 2e 73 65 74 Data Ascii: i=t\|\|e.location.href;this._googletag.pubads().set("page_url",i)}))}setPrivacySettings(e){this._googletag.cmd.push((()=>{this._googletag.pubads().setPrivacySettings(e)}))}setPublisherProvidedId(e){this._googletag.cmd.push((()=>{this._googletag.pubads().set

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49769	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	547	OUT	GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	809	IN	HTTP/1.1 200 OK x-amz-id-2: 1SRFYbU6mrKQLlyyL4E4R8tKlnstmewF242S6xCJidQb6JExuk5AKjrC7N1q1WQa8oY7fDMgJ6U= x-amz-request-id: TY0SYV9ZTVRXYMNZ Date: Thu, 29 Feb 2024 03:42:02 GMT Last-Modified: Tue, 19 May 2020 03:33:21 GMT ETag: "ca243b22264dca7a4a899c51cc2dc963" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public, immutable Accept-Ranges: bytes Content-Type: application/x-javascript Server: ATS Content-Length: 158 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:29 UTC	158	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 64 69 76 20 69 64 3d 22 61 64 76 65 72 74 69 73 65 6d 65 6e 74 2d 74 68 61 6d 62 61 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 44 69 73 70 6c 61 79 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 3c 2f 64 69 76 3e 27 29 3b 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 2c 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 0a Data Ascii: document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49768	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	581	OUT	GET /td-app-aol-production/assets/v1/css/layout/main.63032e2e.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	932	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1155585 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "63032e2e060c613d70c714c7b8b6312e" Last-Modified: Fri, 16 Feb 2024 10:08:05 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7905) Vary: Accept-Encoding x-amz-id-2: W4MxKaraNLI2gWxwXOnMlT9Un0RzR0P/3Tg/cpeGDePUmiV1i3LA2FDHpoC/xi34w0amQ2k+Oss= x-amz-request-id: ZT53589ST3E36EEP x-amz-server-side-encryption: AES256 x-amz-version-id: I_dN31rgLCbtBGyxTJPMiNzczfPu3lme X-Cache: HIT Content-Length: 8390 Connection: close
2024-03-03 23:26:29 UTC	8390	IN	Data Raw: 2e 73 6b 69 70 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 20 2e 73 6b 69 70 2d 74 6f 2d 63 6f 6e 74 65 6e 74 2d 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 30 20 30 20 30 20 30 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 2e 73 6b 69 70 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 20 2e 73 6b 69 70 2d 74 6f 2d 63 6f 6e 74 65 6e 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 Data Ascii: .skip-link-wrapper .skip-to-content-link{width:1px;height:1px;margin:-1px;border:0;padding:0;clip-path:inset(0 0 0 0);overflow:hidden;position:absolute;display:block;transform:translateY(-100%)}.skip-link-wrapper .skip-to-content-link:focus{width:auto;hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49765	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	576	OUT	GET /td-app-aol-production/assets/v1/css/custom.5568c88c.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	584	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 6928621 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "5568c88cb8cbebc2e6cbcf3f97a59c10" Last-Modified: Thu, 14 Dec 2023 16:25:31 GMT Server: ECAcc (nya/1C3B) Vary: Accept-Encoding x-amz-id-2: jB3Hor28VL+8BGviaOmdjum152C1vOXFnCJSBdqfmd/6AKO/FD/MaABYs9k/AP+uDmJsxujP13c= x-amz-request-id: K3NGPBZ8J23W8QCW x-amz-server-side-encryption: AES256 x-amz-version-id: efg0aN5cwv6RVvp2TPwqaALXZjzFnPP3 X-Cache: HIT Content-Length: 2136 Connection: close
2024-03-03 23:26:29 UTC	2136	IN	Data Raw: 23 75 68 2d 73 65 61 72 63 68 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 20 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 2e 73 6d 61 72 74 70 68 6f 6e 65 2e 6d 69 6e 2d 68 65 69 67 68 74 2d 65 6e 61 62 6c 65 64 20 62 6f 64 79 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 30 30 70 78 7d 23 67 75 63 65 2d 69 6e 6c 69 6e 65 2d 63 6f 6e 73 65 6e 74 2d 69 66 72 61 6d 65 7b 6d 61 78 2d 77 69 64 74 68 3a 39 36 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 75 6c 74 69 2d 63 6f 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 6d 75 6c 74 69 2d 63 6f 6c 3e 2a 7b Data Ascii: #uh-search input[type=text]::-ms-clear{display:none}.desktop body{overflow-y:scroll}.smartphone.min-height-enabled body{min-height:5000px}#guce-inline-consent-iframe{max-width:965px!important}.multi-col{display:flex;width:100%;flex-wrap:wrap}.multi-col>*{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	588	OUT	GET /td-app-aol-production/assets/v1/css/layout/homepage_v2.551920c4.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	930	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 269005 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "551920c4b13f657ce16e01efcbee12a3" Last-Modified: Thu, 14 Dec 2023 10:41:44 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7978) Vary: Accept-Encoding x-amz-id-2: CcyrEM5JK9DJY3Bp5NId5u921inEdNQEQiqLF3jZb6L5HjIoCX36Sz6zotxnuY0Gl02V+aPS5jY= x-amz-request-id: HN5HJ6ETJC54FAYH x-amz-server-side-encryption: AES256 x-amz-version-id: gy8uT3wbIhkbMgCtPoyYKxhdEjHEyg_j X-Cache: HIT Content-Length: 905 Connection: close
2024-03-03 23:26:29 UTC	905	IN	Data Raw: 2e 4d 61 69 6e 43 61 6e 76 61 73 2d 2d 67 72 69 64 20 2e 52 69 67 68 74 52 61 69 6c 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 4d 61 69 6e 43 61 6e 76 61 73 2d 2d 67 72 69 64 20 2e 52 69 67 68 74 52 61 69 6c 2e 68 6f 6d 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 31 70 78 29 7b 2e 4d 61 69 6e 43 61 6e 76 61 73 2d 2d 67 72 69 64 20 2e 52 69 67 68 74 52 61 69 6c 3e 64 69 76 7b 77 69 64 74 68 3a 33 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 7d 7d 2e 4d 61 69 6e 43 61 6e 76 61 73 2d 2d 67 72 69 64 20 2e 52 69 67 68 74 52 61 69 6c 2d 2d 73 Data Ascii: .MainCanvas--grid .RightRail{padding:0;margin-top:0;position:relative}.MainCanvas--grid .RightRail.home{margin-top:0}@media screen and (min-width:901px){.MainCanvas--grid .RightRail>div{width:300px;position:absolute;left:0}}.MainCanvas--grid .RightRail--s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49763	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	581	OUT	GET /caas-assets-production/assets/v1/common.5a5e92d32c044529.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	971	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 8404558 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "5a5e92d32c044529f643b0866f9f8b10" Last-Modified: Mon, 27 Nov 2023 16:42:52 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/1C09) Vary: Accept-Encoding x-amz-id-2: WGOowr12KRoSuNOMFSg5K4+hI0v+8tolYd/buAXvRqmRRx0ifvioZz9TMmjvN8cTAgpjrXrOiBo= x-amz-replication-status: COMPLETED x-amz-request-id: J3CT491RR693HA0P x-amz-server-side-encryption: AES256 x-amz-version-id: 0hd3HDa_jXWl7z8jPcLbY1y44EoI1rdO X-Cache: HIT Content-Length: 155457 Connection: close
2024-03-03 23:26:29 UTC	15431	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 6d 61 69 6c 2d 62 67 63 3a 23 66 39 66 39 66 39 3b 2d 2d 74 65 78 74 2d 62 61 73 65 3a 23 32 33 32 61 33 31 3b 2d 2d 74 65 78 74 2d 67 72 61 79 3a 23 36 65 37 37 38 30 3b 2d 2d 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 3a 23 30 66 36 39 66 66 3b 2d 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 30 65 35 65 65 36 3b 2d 2d 62 67 2d 61 63 63 65 6e 74 3a 23 66 66 66 3b 2d 2d 62 67 2d 61 63 63 65 6e 74 2d 64 61 72 6b 3a 72 67 62 61 28 31 35 2c 31 30 35 2c 32 35 35 2c 30 2e 36 35 29 3b 2d 2d 6d 61 69 6c 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 6d 61 69 6c 2d 62 67 2d 6e 65 77 3a 23 66 66 66 3b 2d 2d 6d 61 69 6c 2d 62 67 2d 68 6f 76 65 72 3a 23 66 35 66 38 66 61 3b 2d 2d 6d 61 69 6c 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e Data Ascii: :root{--mail-bgc:#f9f9f9;--text-base:#232a31;--text-gray:#6e7780;--accent-color:#0f69ff;--hover-color:#0e5ee6;--bg-accent:#fff;--bg-accent-dark:rgba(15,105,255,0.65);--mail-border-color:#fff;--mail-bg-new:#fff;--mail-bg-hover:#f5f8fa;--mail-border-style:n
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 2e 77 65 61 74 68 65 72 2d 64 65 74 61 69 6c 73 5f 5f 64 61 79 2d 2d 69 63 6f 6e 20 73 76 67 2c 23 61 70 70 20 73 76 67 7b 66 69 6c 6c 3a 23 66 66 66 7d 7d 40 6d 65 64 69 61 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 61 6e 64 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 6c 69 67 68 74 29 7b 23 61 70 70 20 2e 6d 2d 77 65 61 74 68 65 72 23 6d 2d 77 65 61 74 68 65 72 5f 5f 6d 69 6e 69 6d 61 6c 20 2e 77 65 61 74 68 65 72 2d 64 65 74 61 69 6c 73 5f 5f 64 61 79 2d 2d 69 63 6f 6e 20 73 76 67 2c 23 61 70 70 20 73 76 67 7b 66 69 6c 6c 3a 23 30 30 30 7d 7d 2e 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 32 35 Data Ascii: .weather-details__day--icon svg,#app svg{fill:#fff}}@media(forced-colors:active)and (prefers-color-scheme:light){#app .m-weather#m-weather__minimal .weather-details__day--icon svg,#app svg{fill:#000}}.grid-container{padding-right:1.25rem;padding-left:1.25
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 73 2d 31 30 7b 77 69 64 74 68 3a 63 61 6c 63 28 38 33 2e 33 33 33 33 33 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 73 2d 31 31 7b 77 69 64 74 68 3a 63 61 6c 63 28 39 31 2e 36 36 36 36 37 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 73 2d 31 32 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 73 2d 61 75 74 6f 2c 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 73 2d 73 68 72 69 6e 6b 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 73 2d 31 7b 77 69 64 74 68 3a 63 61 6c 63 Data Ascii: % - 2.5rem)}.grid-margin-x>.xs-10{width:calc(83.33333% - 2.5rem)}.grid-margin-x>.xs-11{width:calc(91.66667% - 2.5rem)}.grid-margin-x>.xs-12{width:calc(100% - 2.5rem)}.grid-margin-x>.s-auto,.grid-margin-x>.s-shrink{width:auto}.grid-margin-x>.s-1{width:calc
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 2d 6c 65 66 74 3a 2d 31 2e 32 35 72 65 6d 7d 7d 2e 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 29 3e 2e 67 72 69 64 2d 70 61 64 64 69 6e 67 2d 78 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 36 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 37 2e 35 36 32 35 65 6d 29 7b 2e 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 75 6c 6c 29 3e 2e 67 72 69 64 2d 70 61 64 64 69 6e 67 2d 78 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 36 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 32 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 Data Ascii: -left:-1.25rem}}.grid-container:not(.full)>.grid-padding-x{margin-right:-.625rem;margin-left:-.625rem}@media print,screen and (min-width:37.5625em){.grid-container:not(.full)>.grid-padding-x{margin-right:-.625rem;margin-left:-.625rem}}@media print,screen
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 6c 6c 61 70 73 65 3e 2e 78 6c 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 78 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 78 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 78 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 78 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 78 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 Data Ascii: llapse>.xl-7{width:58.3333333333%}.xxs-margin-collapse>.xl-8{width:66.6666666667%}.xxs-margin-collapse>.xl-9{width:75%}.xxs-margin-collapse>.xl-10{width:83.3333333333%}.xxs-margin-collapse>.xl-11{width:91.6666666667%}.xxs-margin-collapse>.xl-12{width:100%
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 6e 2d 77 69 64 74 68 3a 39 30 2e 30 36 32 35 65 6d 29 7b 2e 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 33 7b 77 69 64 74 68 3a 32 35 25 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 Data Ascii: n-width:90.0625em){.l-margin-collapse>.xl-1{width:8.3333333333%}.l-margin-collapse>.xl-2{width:16.6666666667%}.l-margin-collapse>.xl-3{width:25%}.l-margin-collapse>.xl-4{width:33.3333333333%}.l-margin-collapse>.xl-5{width:41.6666666667%}.l-margin-collapse
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 33 33 2e 33 33 33 33 33 25 20 2b 20 31 2e 32 35 72 65 6d 29 7d 2e 78 6c 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 6c 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 34 31 2e 36 36 36 36 37 25 20 2b 20 31 2e 32 35 72 65 6d 29 7d 2e 78 6c 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 6c 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 35 30 25 20 2b 20 31 2e 32 35 72 65 6d 29 7d 2e 78 6c 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c Data Ascii: {margin-left:calc(33.33333% + 1.25rem)}.xl-offset-5{margin-left:41.6666666667%}.grid-margin-x>.xl-offset-5{margin-left:calc(41.66667% + 1.25rem)}.xl-offset-6{margin-left:50%}.grid-margin-x>.xl-offset-6{margin-left:calc(50% + 1.25rem)}.xl-offset-7{margin-l
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 77 2d 79 3a 61 75 74 6f 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 7d 2e 67 72 69 64 2d 79 2e 67 72 69 64 2d 66 72 61 6d 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 Data Ascii: w-y:auto;max-height:100%;min-height:100%;-webkit-overflow-scrolling:touch;-ms-overflow-style:-ms-autohiding-scrollbar}}.grid-y.grid-frame{overflow:hidden;position:relative;-ms-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-box-align:stretch;-ms-flex-align:stre
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 73 2d 32 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 36 2e 36 36 36 36 37 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 73 2d 33 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 32 35 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 73 2d 34 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 33 33 2e 33 33 33 33 33 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 73 2d 35 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 34 31 2e 36 36 36 36 37 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 73 2d 36 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 35 30 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e Data Ascii: 5rem)}.grid-margin-y>.s-2{height:calc(16.66667% - 2.5rem)}.grid-margin-y>.s-3{height:calc(25% - 2.5rem)}.grid-margin-y>.s-4{height:calc(33.33333% - 2.5rem)}.grid-margin-y>.s-5{height:calc(41.66667% - 2.5rem)}.grid-margin-y>.s-6{height:calc(50% - 2.5rem)}.
2024-03-03 23:26:29 UTC	8962	IN	Data Raw: 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 30 20 61 75 74 6f 3b 66 6c 65 78 3a 31 20 30 20 61 75 74 6f 7d 2e 73 2d 66 6c 65 78 2d 63 68 69 6c 64 2d 73 68 72 69 6e 6b 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 31 20 61 75 74 6f 3b 66 6c 65 78 3a 30 20 31 20 61 75 74 6f 7d 2e 73 2d 66 6c 65 78 2d 64 69 72 2d 72 6f 77 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 73 2d 66 6c 65 78 2d 64 69 72 2d 72 6f 77 2d 72 65 76 65 72 73 65 7b Data Ascii: ox-flex:1;-ms-flex:1 0 auto;flex:1 0 auto}.s-flex-child-shrink{-webkit-box-flex:0;-ms-flex:0 1 auto;flex:0 1 auto}.s-flex-dir-row{-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row}.s-flex-dir-row-reverse{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49767	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	585	OUT	GET /caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 14388767 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "a6b7d6a1bc8e39acdee82363feb23a2f" Last-Modified: Tue, 19 Sep 2023 10:24:45 GMT Server: ECAcc (nya/790A) Vary: Accept-Encoding x-amz-id-2: 2zjhT+EQ5WdcCeZtXOlOpvuxnS+sN8U+Q50D1T9bb+9ZS0Wj6D/xoq2ECzsFIPMB36sUlj+eEg8= x-amz-replication-status: COMPLETED x-amz-request-id: TRN26DJRRVMDK906 x-amz-server-side-encryption: AES256 x-amz-version-id: .nu3ChHsurHqGRqV.sxHTGOcUFfZKllA X-Cache: HIT Content-Length: 6200 Connection: close
2024-03-03 23:26:29 UTC	6200	IN	Data Raw: 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 6c 6f 67 6f 2d 77 72 61 70 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 35 70 78 7d 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 6c 69 6e 6b 73 2d 66 6f 6f 74 7b 77 69 64 74 68 3a 37 30 25 7d 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 73 6f 63 69 61 6c 2d 66 6f 6f 74 7b 77 69 64 74 68 3a 33 30 25 7d 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 73 6f 63 69 61 6c 2d 66 6f 6f 74 20 2e 69 74 65 6d 7b 77 69 64 74 68 3a 35 30 70 78 7d 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 Data Ascii: .ie-11 .m-AolFooter .logo-wrap{min-height:65px}.ie-11 .m-AolFooter .links-foot{width:70%}.ie-11 .m-AolFooter .social-foot{width:30%}.ie-11 .m-AolFooter .social-foot .item{width:50px}.m-AolFooter{padding:0 20px;width:100%}.m-AolFooter .container{display:-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	585	OUT	GET /caas-assets-production/assets/v1/dispatcher.35f949ab045720f0.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	969	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 16890836 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "35f949ab045720f0b6f75a311584a1d7" Last-Modified: Mon, 21 Aug 2023 11:23:06 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/78CB) Vary: Accept-Encoding x-amz-id-2: EJrigb+OOVUmBS9Azndn7cfHfZBTyTE4RubdMUuXBY35qZgsr6UJ2PPs5fS1Jc4QV2PuOQASAfQ= x-amz-replication-status: COMPLETED x-amz-request-id: TEF0G3CFQ1MG409V x-amz-server-side-encryption: AES256 x-amz-version-id: ZV2ARNHvaasIZQgv3e2lwR0AEpiLQ4Vk X-Cache: HIT Content-Length: 224 Connection: close
2024-03-03 23:26:29 UTC	224	IN	Data Raw: 2e 6d 2d 64 69 73 70 61 74 63 68 65 72 2d 2d 72 69 67 68 74 72 61 69 6c 7b 6d 61 72 67 69 6e 3a 30 20 2d 31 30 70 78 20 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 32 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 6d 2d 64 69 73 70 61 74 63 68 65 72 2d 2d 72 69 67 68 74 72 61 69 6c 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 30 70 78 7d 7d 0a 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 69 73 70 61 74 63 68 65 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: .m-dispatcher--rightrail{margin:0 -10px 20px;padding:0;position:relative;text-align:center;z-index:12}@media screen and (max-width:480px){.m-dispatcher--rightrail{padding-top:60px}}/# sourceMappingURL=dispatcher.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49778	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	594	OUT	GET /caas-assets-production/assets/v1/notification_banner.ae48c4e59d83a951.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	620	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 453269 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "ae48c4e59d83a951d7db7987ceafa23b" Last-Modified: Thu, 05 Oct 2023 20:32:04 GMT Server: ECAcc (nya/791C) Vary: Accept-Encoding x-amz-id-2: UI3hWkrkEej8dbsOcU2OP1CYIqmw47AbUdb2MpyN2do3rYsnxInMaFW2w+bbGTpOLwHB6HI3xLg= x-amz-replication-status: COMPLETED x-amz-request-id: 0E4BBZ1GYJT30QWZ x-amz-server-side-encryption: AES256 x-amz-version-id: b_DhgHqoh1gTcqr8KmzkcaorZR31lHXI X-Cache: HIT Content-Length: 5842 Connection: close
2024-03-03 23:26:29 UTC	5842	IN	Data Raw: 2e 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 5f 5f 6c 62 6c 2c 2e 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 5f 5f 6d 6f 72 65 2d 6c 62 6c 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 61 6f 6c 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 66 36 39 Data Ascii: .m-notification-banner__content,.m-notification-banner__lbl,.m-notification-banner__more-lbl{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:end;-ms-flex-align:end;align-items:flex-end}.aol-notification-banner{background-color:#0f69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49780	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	577	OUT	GET /caas-assets-production/assets/v1/dl.08352a25ed94dbaa.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 269000 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "08352a25ed94dbaa62c97194a5f054da" Last-Modified: Thu, 22 Feb 2024 10:13:25 GMT Server: ECAcc (nya/7954) Vary: Accept-Encoding x-amz-id-2: In4SknsLu7lAQmbDK6UZ58vyTJNEBwL22eL269ZYwtH58TlIzHqJz+ejGU0gf23ZuMGh3JMg7lk= x-amz-replication-status: COMPLETED x-amz-request-id: 37FDE9P6D2G64V4W x-amz-server-side-encryption: AES256 x-amz-version-id: 7FTDC2OFqr0ctPkIpNjq.hlLvtY6U4ex X-Cache: HIT Content-Length: 53210 Connection: close
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 23 61 6f 6c 2d 77 61 66 65 72 2d 64 6c 2c 2e 64 6c 5f 5f 6f 75 74 65 72 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 61 6f 6c 2d 77 61 66 65 72 2d 64 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 4f 70 65 6e 53 61 6e 73 2c 4f 70 65 6e 53 61 6e 73 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 35 33 70 78 29 7b 23 61 6f 6c 2d 77 61 66 65 72 2d 64 6c 2e 64 6c 3a 6e 6f 74 28 2e 77 6d 61 69 6e 77 65 6c 63 Data Ascii: #aol-wafer-dl,.dl__outer-wrapper{position:relative}#aol-wafer-dl{font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;max-width:900px;text-align:left;visibility:hidden}@media screen and (max-width:753px){#aol-wafer-dl.dl:not(.wmainwelc
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 30 70 78 7d 23 61 6f 6c 2d 77 61 66 65 72 2d 64 6c 2e 64 6c 2d 73 71 75 61 72 65 2d 67 65 6d 69 6e 69 20 64 69 76 5b 64 61 74 61 2d 73 6c 69 64 65 2d 74 79 70 65 3d 67 65 6d 69 6e 69 5d 20 2e 64 6c 5f 5f 73 6c 69 64 65 5f 5f 74 69 74 6c 65 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 Data Ascii: enter;justify-content:center;margin-bottom:80px}#aol-wafer-dl.dl-square-gemini div[data-slide-type=gemini] .dl__slide__title{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:c
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 69 6e 69 5d 20 2e 64 6c 5f 5f 73 6c 69 64 65 2d 2d 62 6f 64 79 2d 69 6e 6e 65 72 20 2e 64 6c 5f 5f 73 6c 69 64 65 2d 2d 6c 69 6e 6b 2e 64 6c 2d 67 65 6d 69 6e 69 2d 61 64 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 64 6c 2d 2d 6e 65 77 4c 61 79 6f 75 74 2e 64 6c 2d 2d 6e 65 77 4c 61 79 6f 75 74 53 69 64 65 20 23 61 6f 6c 2d 77 61 66 65 72 2d 64 6c 2e 64 6c 2e 64 6c 2d 73 71 75 61 72 65 2d 67 65 6d 69 6e 69 20 64 69 76 5b 64 61 74 61 2d 73 6c 69 64 65 2d 74 79 70 65 3d 67 65 6d 69 6e 69 5d 20 2e 64 6c 5f 5f 73 6c 69 64 65 2d 2d 62 6f 64 79 2d 69 6e 6e 65 72 20 2e 64 6c 5f 5f 73 6c 69 64 65 2d 2d 6c 69 6e 6b 2e 64 6c 2d 67 65 6d 69 6e 69 2d 61 64 7b 6d 61 72 67 69 6e 3a 30 20 31 35 36 70 78 20 30 20 30 3b 77 69 64 74 68 3a 35 36 2e 32 35 25 7d 40 6d 65 64 69 61 Data Ascii: ini] .dl__slide--body-inner .dl__slide--link.dl-gemini-ad{width:100%}.dl--newLayout.dl--newLayoutSide #aol-wafer-dl.dl.dl-square-gemini div[data-slide-type=gemini] .dl__slide--body-inner .dl__slide--link.dl-gemini-ad{margin:0 156px 0 0;width:56.25%}@media
2024-03-03 23:26:29 UTC	4061	IN	Data Raw: 3b 62 6f 74 74 6f 6d 3a 2d 39 30 70 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 64 6c 2d 2d 6e 65 77 4c 61 79 6f 75 74 2e 64 6c 2d 2d 6e 65 77 4c 61 79 6f 75 74 53 69 64 65 20 23 61 6f 6c 2d 77 61 66 65 Data Ascii: ;bottom:-90px;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:start;-ms-flex-pack:start;justify-content:flex-start;-webkit-box-align:center;-ms-flex-align:center;align-items:center;padding:0}.dl--newLayout.dl--newLayoutSide #aol-wafe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49779	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	578	OUT	GET /caas-assets-production/assets/v1/gam.865272a6dce058cc.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 8056159 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "865272a6dce058cce0416ebcbf34e230" Last-Modified: Fri, 01 Dec 2023 17:26:41 GMT Server: ECAcc (nya/7978) Vary: Accept-Encoding x-amz-id-2: 9VxsMPGgmiT671OxPc5GOEixBYG1G6rSyjo5nt/17EGX+jdDvmmZEDy9F7Nq76sdFZvXSi4c0M0= x-amz-replication-status: COMPLETED x-amz-request-id: B8ZHD6FF3C4ES8GS x-amz-server-side-encryption: AES256 x-amz-version-id: ys4ca0GB7Fd_GsSRxDSpQTHOUGOIVTYC X-Cache: HIT Content-Length: 1173 Connection: close
2024-03-03 23:26:29 UTC	1173	IN	Data Raw: 2e 6d 2d 67 61 6d 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 6d 2d 67 61 6d 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 6d 61 72 67 Data Ascii: .m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49782	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	581	OUT	GET /caas-assets-production/assets/v1/stream.22fb406d30ff5624.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 287402 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "22fb406d30ff5624d9c441109977a2f3" Last-Modified: Thu, 29 Feb 2024 15:26:18 GMT Server: ECAcc (nya/794B) Vary: Accept-Encoding x-amz-id-2: dVkMvKW87J4r006VHbxRIdl+NrM1vXxXaviuMrmfu0LwNzTP6UGmNeqKJSXq6QYRVVvkNoaIqgs= x-amz-replication-status: COMPLETED x-amz-request-id: DGW0GY49N18DV31X x-amz-server-side-encryption: AES256 x-amz-version-id: CxWMHNaR9zlZbM1RtNaEgu.kokUQxR9Q X-Cache: HIT Content-Length: 310587 Connection: close
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 5f 5f 70 6c 61 79 65 72 2d 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 33 35 30 70 78 7d 2e 73 6d 61 72 74 70 68 6f 6e 65 20 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 5f 5f 70 6c 61 79 65 72 2d 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2d 31 30 70 78 7d 2e 73 6d 61 72 74 70 68 6f 6e 65 20 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 2d 2d 67 72 69 64 20 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 5f 5f 70 6c 61 79 65 72 2d 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 2e 75 6e 69 66 69 65 64 5f 70 6c 61 79 65 72 5f 76 69 64 65 6f 2c 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 2e Data Ascii: .m-video-wafer__player--container{height:350px}.smartphone .m-video-wafer__player--container{margin:0 -10px}.smartphone .m-video-wafer--grid .m-video-wafer__player--container{margin-left:0;margin-right:0}.m-video-wafer.unified_player_video,.m-video-wafer.
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 61 79 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 6f 70 61 63 69 74 79 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 6f 70 61 63 69 74 79 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 33 2c 31 2c 2e 33 Data Ascii: ay:0s;transition-delay:0s;-webkit-transition-duration:.2s;transition-duration:.2s;-webkit-transition-property:opacity;transition-property:opacity;-webkit-transition-timing-function:cubic-bezier(.23,1,.32,1);transition-timing-function:cubic-bezier(.23,1,.3
2024-03-03 23:26:29 UTC	2	IN	Data Raw: 73 20 Data Ascii: s
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 69 66 72 61 6d 65 7b 68 65 69 67 68 74 3a 35 33 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 6d 2d 74 72 61 76 65 6c 2d 64 65 61 6c 73 20 69 66 72 61 6d 65 7b 68 65 69 67 68 74 3a 36 38 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 32 31 70 78 29 7b 2e 6d 2d 74 72 61 76 65 6c 2d 64 65 61 6c 73 20 69 66 72 61 6d 65 7b 68 65 69 67 68 74 3a 37 30 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 33 39 33 70 78 29 7b 2e 6d 2d 74 72 61 76 65 6c 2d 64 65 61 6c 73 20 69 66 72 61 6d 65 7b 68 65 69 67 68 74 3a 38 30 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 Data Ascii: iframe{height:530px}}@media screen and (max-width:480px){.m-travel-deals iframe{height:680px}}@media screen and (max-width:421px){.m-travel-deals iframe{height:700px}}@media screen and (max-width:393px){.m-travel-deals iframe{height:800px}}@media screen a
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 65 69 67 68 74 3a 31 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 2c 5f 4f 70 65 6e 53 61 6e 73 2c 4f 70 65 6e 53 61 6e 73 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 7d 2e 6d 2d 79 73 73 5f 5f 76 73 2d 6d 6c 62 2d 69 6e 66 6f 2d 64 69 73 70 6c 61 79 2d 6e 61 6d 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 6d 2d 79 73 73 5f 5f 76 73 2d 6d 6c 62 2d 69 6e 66 6f 2d 6f 75 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 6d 2d 79 73 73 5f 5f 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 7d 2e 6d 2d 79 73 73 5f 5f 68 20 2e Data Ascii: eight:10px;font-family:Poppins,_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;padding-left:10px}.m-yss__vs-mlb-info-display-name{font-weight:600}.m-yss__vs-mlb-info-out{font-weight:500}.m-yss__h{text-align:left;margin-bottom:40px}.m-yss__h .
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 30 7d 2e 6d 2d 67 73 75 5f 70 72 6f 6d 6f 5f 5f 68 65 61 64 65 72 2d 2d 6c 69 6e 6b 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 6f 6c 6f 72 3a 23 30 66 36 39 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 6d 2d 67 73 75 5f 70 72 6f 6d 6f 5f 5f 68 65 61 64 65 72 2d 2d 6c 69 6e Data Ascii: 0}.m-gsu_promo__header--link{font-weight:600;font-size:.875em;line-height:1;color:#0f69ff;text-decoration:none;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-ms-flex-align:center;align-items:center}.m-gsu_promo__header--lin
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 78 20 30 20 72 67 62 61 28 31 39 39 2c 32 30 35 2c 32 31 30 2c 2e 34 29 2c 30 20 30 20 31 36 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 36 70 78 20 32 30 70 78 20 30 20 72 67 62 61 28 31 39 39 2c 32 30 35 2c 32 31 30 2c 2e 34 29 2c 30 20 30 20 31 36 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b 70 61 64 64 69 6e 67 3a 30 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 Data Ascii: x 0 rgba(199,205,210,.4),0 0 16px 0 rgba(0,0,0,.05);box-shadow:0 16px 20px 0 rgba(199,205,210,.4),0 0 16px 0 rgba(0,0,0,.05);padding:0;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center
2024-03-03 23:26:30 UTC	4	IN	Data Raw: 62 5f 5f 69 Data Ascii: b__i
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 74 65 6d 20 64 69 76 2e 67 72 69 64 2d 78 2c 2e 6d 2d 63 62 2d 2d 76 6e 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 5f 76 32 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 6c 69 73 74 20 2e 6d 2d 63 62 5f 5f 69 74 65 6d 20 64 69 76 2e 67 72 69 64 2d 78 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6d 2d 63 62 2d 2d 73 73 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 20 2e 6d 2d 63 62 5f 5f 69 6d 61 67 65 2c 2e 6d 2d 63 62 2d 2d 73 73 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 5f 76 32 20 2e 6d 2d 63 62 5f 5f 69 6d 61 67 65 2c 2e 6d 2d 63 62 2d 2d 76 6e 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 20 2e 6d 2d 63 62 5f 5f 69 6d 61 67 65 2c 2e 6d 2d 63 62 2d 2d Data Ascii: tem div.grid-x,.m-cb--vn .m-cb__content--right_v2 .m-cb__content--list .m-cb__item div.grid-x{margin-bottom:0}.m-cb--ss .m-cb__content--right .m-cb__image,.m-cb--ss .m-cb__content--right_v2 .m-cb__image,.m-cb--vn .m-cb__content--right .m-cb__image,.m-cb--
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 31 36 70 78 20 33 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 38 70 78 7d 2e 6d 2d 63 62 2d 2d 34 69 6e 6c 69 6e 65 2d 72 6f 75 6e 64 65 64 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 69 74 65 6d 20 2e 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 6d 2d 63 62 2d 2d 34 69 6e 6c 69 6e 65 2d 72 6f 75 6e 64 65 64 20 2e 6d 2d 63 62 5f 5f 6c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 Data Ascii: 16px 32px;margin-bottom:28px}.m-cb--4inline-rounded .m-cb__content--item .flex-container{-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-flex:1;-ms-flex-positive:1;flex-grow:1}.m-cb--4inline-rounded .m-cb__link{display:-webki

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49781	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	582	OUT	GET /caas-assets-production/assets/v1/weather.2b3ccc9b472fb30d.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:29 UTC	971	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1172111 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:29 GMT Etag: "2b3ccc9b472fb30dfe785ea636e22fc4" Last-Modified: Mon, 19 Feb 2024 09:40:49 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/79B1) Vary: Accept-Encoding x-amz-id-2: g9GBxBsq0JPtvZIqWsd4dkD7FNNSDRgCLwgxkGQNC2PijN9RGUgwQ3cRgrGWLY0F+p2/rTGZxgM= x-amz-replication-status: COMPLETED x-amz-request-id: 2QT23MZMP8G4E35Z x-amz-server-side-encryption: AES256 x-amz-version-id: BGszFML87DqZBknnmbXW03Pl1Qu2cix2 X-Cache: HIT Content-Length: 115778 Connection: close
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 2e 6d 2d 6c 6e 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 2c 5f 4f 70 65 6e 53 61 6e 73 2c 4f 70 65 6e 53 61 6e 73 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 6d 2d 6c 6e 5f 5f 74 69 74 6c 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 34 70 78 20 73 6f 6c 69 64 20 23 66 66 63 62 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: .m-ln{text-align:left;font-size:16px;font-family:Poppins,_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#232a31;margin-bottom:24px;margin-top:24px}.m-ln__title{border-left:4px solid #ffcb00;font-size:28px;font-style:normal;font-weight:
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 34 38 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 34 37 66 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 65 66 66 66 65 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 31 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 29 7b 2e 6d 2d 6e 65 77 73 5f 5f 6c 69 73 74 2d 2d 6e 65 77 2d 72 65 61 64 6d 6f 72 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 74 61 72 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 Data Ascii: der-radius:48px;border:1px solid #0047ff;font-weight:600;background-color:#fefffe}@media screen and (min-width:601px)and (max-width:900px){.m-news__list--new-readmore{-webkit-box-pack:start;-ms-flex-pack:start;justify-content:start}}@media screen and (max
2024-03-03 23:26:29 UTC	2	IN	Data Raw: 66 6c Data Ascii: fl
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 65 78 5f 5f 66 6f 72 6d 20 2e 6c 6f 63 61 74 69 6f 6e 2d 66 6f 72 6d 5f 5f 73 75 67 67 65 73 74 69 6f 6e 73 5f 68 6f 6d 65 2d 2d 69 74 65 6d 7b 63 6f 6c 6f 72 3a 23 36 38 37 30 37 38 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 6d 61 72 67 69 6e 3a 31 30 70 78 7d 2e 6c 6f 63 61 74 69 6f 6e 2d 66 6f 72 6d 5f 5f 63 6f 6e 74 61 69 6e 65 72 2e 77 72 61 70 70 65 72 20 2e 6c 6f 63 61 74 69 6f 6e 2d 66 6f 72 6d 2d 66 6c 65 78 5f 5f 66 6f 72 6d 20 2e 6c 6f 63 61 74 69 6f 6e 2d 66 6f 72 6d 5f 5f 73 75 67 67 65 73 74 69 6f 6e 73 2d 2d 69 74 65 6d 3a 68 6f 76 65 72 2c 2e 6c 6f 63 61 74 69 6f 6e 2d 66 6f 72 6d 5f Data Ascii: ex__form .location-form__suggestions_home--item{color:#687078;font-size:14px;font-style:normal;font-weight:500;line-height:28px;margin:10px}.location-form__container.wrapper .location-form-flex__form .location-form__suggestions--item:hover,.location-form_
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 7d 2e 6d 2d 77 65 61 74 68 65 72 20 2e 77 65 61 74 68 65 72 2d 64 65 74 61 69 6c 73 20 2e 6d 69 73 73 69 6e 67 2d 64 61 74 61 5f 5f 72 69 67 68 74 7b 77 69 64 74 68 3a 34 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 25 7d 2e 6d 2d 77 65 61 74 68 65 72 20 2e 77 65 61 74 68 65 72 2d 64 65 74 61 69 6c 73 20 2e 6d 69 73 73 69 6e 67 2d 64 61 74 61 5f 5f 72 69 67 68 74 20 2e 6d 69 73 73 69 6e 67 2d 64 61 74 61 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 2c 5f 4f 70 65 6e 53 61 6e 73 2c 4f 70 65 6e 53 61 6e 73 2c 48 65 6c 76 65 74 Data Ascii: ca,arial,sans-serif;font-weight:700;line-height:16px;color:#232a31}.m-weather .weather-details .missing-data__right{width:40%;padding-top:6%}.m-weather .weather-details .missing-data__right .missing-data-title{font-family:Poppins,_OpenSans,OpenSans,Helvet
2024-03-03 23:26:29 UTC	16383	IN	Data Raw: 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 7d 2e 6d 2d 77 65 61 74 68 65 72 20 2e 6d 2d 77 65 61 74 68 65 72 2d 63 61 72 64 20 2e 77 65 61 74 68 65 72 2d 64 65 74 61 69 6c 73 5f 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 77 65 61 74 68 65 72 2d 64 65 74 61 69 6c 73 5f 5f 63 75 72 72 65 6e 74 5f 5f 77 65 61 74 68 65 72 2d 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 35 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 Data Ascii: t-box-align:start;-ms-flex-align:start;align-items:flex-start}}.m-weather .m-weather-card .weather-details__container .weather-details__current__weather--icon{display:-webkit-box;display:-ms-flexbox;display:flex;padding:4px 5px;-webkit-box-pack:center;-ms
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 74 68 3a 69 6e 68 65 72 69 74 3b 6d 61 78 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 6d 2d 77 65 61 74 68 65 72 20 2e 6d 2d 77 65 61 74 68 65 72 2d 63 61 72 64 3a 68 61 73 28 2e 77 65 61 74 68 65 72 2d 64 65 74 61 69 6c 73 2d 2d 66 61 6c 6c 62 61 63 6b 29 20 2e 77 65 61 74 68 65 72 2d 64 65 74 61 69 6c 73 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 77 65 61 74 68 65 72 20 2e 6d 2d 77 65 61 74 68 65 72 2d 63 61 72 64 2e 72 69 67 68 74 2d 72 61 69 6c 3a 68 61 73 28 2e 77 65 61 74 68 65 72 2d 64 65 74 61 69 6c 73 2d 2d 66 61 6c 6c 62 61 63 6b 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 6d 2d 77 65 61 74 68 65 72 20 2e 6d Data Ascii: th:inherit;max-height:inherit;height:inherit}.m-weather .m-weather-card:has(.weather-details--fallback) .weather-details__container{width:100%!important}.m-weather .m-weather-card.right-rail:has(.weather-details--fallback){margin-bottom:20px}.m-weather .m
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 2d 77 65 61 74 68 65 72 5f 5f 63 68 61 6e 6e 65 6c 20 2e 66 6f 72 65 63 61 73 74 2d 77 72 61 70 70 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 70 78 7d 7d 2e 6d 2d 77 65 61 74 68 65 72 2e 6d 2d 77 65 61 74 68 65 72 5f 5f 63 68 61 6e 6e 65 6c 20 2e 66 6f 72 65 63 61 73 74 2d 73 77 69 74 63 68 65 72 2d 77 72 61 70 70 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 34 32 30 70 78 29 7d Data Ascii: -weather__channel .forecast-wrapper{min-height:5px}}.m-weather.m-weather__channel .forecast-switcher-wrapper{-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;display:-webkit-box;display:-ms-flexbox;display:flex;width:calc(100% - 420px)}
2024-03-03 23:26:30 UTC	1095	IN	Data Raw: 76 32 20 2e 68 6f 75 72 73 2d 77 72 61 70 70 65 72 20 2e 67 6c 69 64 65 20 2e 67 6c 69 64 65 5f 5f 61 72 72 6f 77 73 20 2e 67 6c 69 64 65 5f 5f 61 72 72 6f 77 2d 2d 6e 65 78 74 7b 72 69 67 68 74 3a 2d 31 35 70 78 7d 2e 6d 2d 77 65 61 74 68 65 72 2e 6d 2d 77 65 61 74 68 65 72 5f 5f 63 68 61 6e 6e 65 6c 5f 76 32 20 2e 64 61 79 73 2d 77 72 61 70 70 65 72 20 2e 67 6c 69 64 65 20 2e 67 6c 69 64 65 5f 5f 61 72 72 6f 77 73 20 2e 67 6c 69 64 65 5f 5f 61 72 72 6f 77 2d 2d 70 72 65 76 2c 2e 6d 2d 77 65 61 74 68 65 72 2e 6d 2d 77 65 61 74 68 65 72 5f 5f 63 68 61 6e 6e 65 6c 5f 76 32 20 2e 68 6f 75 72 73 2d 77 72 61 70 70 65 72 20 2e 67 6c 69 64 65 20 2e 67 6c 69 64 65 5f 5f 61 72 72 6f 77 73 20 2e 67 6c 69 64 65 5f 5f 61 72 72 6f 77 2d 2d 70 72 65 76 7b 6c 65 66 74 Data Ascii: v2 .hours-wrapper .glide .glide__arrows .glide__arrow--next{right:-15px}.m-weather.m-weather__channel_v2 .days-wrapper .glide .glide__arrows .glide__arrow--prev,.m-weather.m-weather__channel_v2 .hours-wrapper .glide .glide__arrows .glide__arrow--prev{left

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49783	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:29 UTC	585	OUT	GET /caas-assets-production/assets/v1/aol_header.bf9fd24ac2b8ca73.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:30 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1482289 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:30 GMT Etag: "bf9fd24ac2b8ca73ee6446406ff591b9" Last-Modified: Thu, 15 Feb 2024 19:32:49 GMT Server: ECAcc (nya/78D4) Vary: Accept-Encoding x-amz-id-2: sO0VQPH7eF89myI5G3EOSZ7TK55pY+UgCu/bD1lcDkGn0tUnOAFQ2Wt6OWDiOBjbQzZvWKkm308= x-amz-replication-status: COMPLETED x-amz-request-id: KCCKN8TEKG1GMG09 x-amz-server-side-encryption: AES256 x-amz-version-id: ZHU0vtdkGGD1ViVZEm56SGYKLVrahrnb X-Cache: HIT Content-Length: 84438 Connection: close
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 2e 6d 2d 67 61 6d 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 6d 2d 67 61 6d 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 6d 61 72 67 Data Ascii: .m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;marg
2024-03-03 23:26:30 UTC	1	IN	Data Raw: 6c Data Ascii: l
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 79 6f 75 74 2d 2d 68 69 67 68 2d 7a 20 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 7b 7a 2d 69 6e 64 65 78 3a 32 30 30 30 7d 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 7b 7a 2d 69 6e 64 65 78 3a 32 30 7d 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 76 65 72 6c 61 79 3a 61 66 74 65 72 7b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 70 61 63 69 74 79 3a 2e 32 35 7d 2e 6d 2d 66 6c 79 Data Ascii: yout--high-z .m-flyout--open{z-index:2000}.m-flyout--open{z-index:20}.m-flyout--open.m-flyout--overlay:after{z-index:-1;content:"";display:block;position:fixed;left:0;right:0;top:0;bottom:0;height:100vh;width:100vw;background-color:#000;opacity:.25}.m-fly
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 70 78 7d 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 6e 61 76 72 61 69 6c 5f 5f 64 69 76 69 64 65 72 2d 2d 6c 69 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 6d 2d 6d 74 6d 68 70 2d 6c 65 66 74 72 61 69 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 65 77 4e 61 76 2e 6d 69 6e 69 6d 69 73 65 64 20 2e 6e 61 76 72 61 69 6c 3e 6c 69 20 2e 6d 2d 6d 61 69 6c 2d 63 6f 75 6e 74 2d 2d 6e 61 76 72 61 69 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f Data Ascii: px}}.m-AolHeader .navrail__divider--line{background-color:#e0e4e9;width:100%;height:1px}.m-AolHeader .m-mtmhp-leftrail{display:none}.m-AolHeader.m-AolHeader--newNav.minimised .navrail>li .m-mail-count--navrail{position:absolute;left:auto}.m-AolHeader.m-Ao
2024-03-03 23:26:30 UTC	2	IN	Data Raw: 61 74 Data Ascii: at
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 69 6f 6e 2d 6d 65 6e 75 2d 61 6d 61 7a 6f 6e 20 2e 6c 6f 67 6f 75 74 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 64 65 73 6b 74 6f 70 2d 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 2d 61 6d 61 7a 6f 6e 20 2e 6d 61 69 6c 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 64 65 73 6b 74 6f 70 2d 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 2d 61 6d 61 7a 6f 6e 20 2e 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 Data Ascii: ion-menu-amazon .logout-button:hover svg,.m-AolHeader .desktop-user-navigation .user-navigation .user-navigation-menu-amazon .mail-button:hover svg,.m-AolHeader .desktop-user-navigation .user-navigation .user-navigation-menu-amazon .profile-button:hover s
2024-03-03 23:26:30 UTC	1	IN	Data Raw: 70 Data Ascii: p
2024-03-03 23:26:30 UTC	16383	IN	Data Raw: 75 74 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 37 63 64 64 32 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 38 70 78 3b 72 69 67 68 74 3a 38 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 65 64 53 65 61 72 63 68 20 23 68 65 61 64 65 72 2d 66 6f 72 6d 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 65 64 53 65 61 72 63 68 20 23 68 65 61 64 Data Ascii: ut-list:before{height:1px;background-color:#c7cdd2;display:block;content:"";position:absolute;top:0;left:8px;right:8px}.m-AolHeader.m-AolHeader--roundedSearch #header-form .wafer-autocomplete-list{display:none}.m-AolHeader.m-AolHeader--roundedSearch #head
2024-03-03 23:26:30 UTC	2519	IN	Data Raw: 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 20 23 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 56 32 20 2e 74 6f 70 2d 77 72 61 70 20 2e 74 69 74 6c 65 2d 62 61 72 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 3b 66 6c 65 78 3a 30 20 30 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 56 32 20 2e 74 6f 70 2d 77 72 61 70 20 2e 74 69 74 6c 65 2d 62 61 72 20 2e 6d Data Ascii: -AolHeader--innerContainer #user-navigation .user-navigation{position:relative}.m-AolHeader.m-AolHeader--navV2 .top-wrap .title-bar{padding:0;margin-left:10px;-webkit-box-flex:0;-ms-flex:0 0;flex:0 0}.m-AolHeader.m-AolHeader--navV2 .top-wrap .title-bar .m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49784	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:30 UTC	631	OUT	GET /caas-assets-production/assets/v1/images/icons/elections-2024.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:30 UTC	619	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 453270 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Sun, 03 Mar 2024 23:26:30 GMT Etag: "93fe207c1b9a8c0b94bd6672c011a260" Last-Modified: Mon, 29 Jan 2024 15:56:05 GMT Server: ECAcc (nya/78AE) x-amz-id-2: iVdi98X9B9J+OGFplEloOjmM0V+s3pJlpp0lvuz6+2t94K+U271Sfvqw77eEHdTWJhdBVssIgt4= x-amz-replication-status: COMPLETED x-amz-request-id: 0E448CZACN1T0KBM x-amz-server-side-encryption: AES256 x-amz-version-id: Ms9nYqJanFgZvuhAPEDD6x_pMezWGxUs X-Cache: HIT Content-Length: 2346 Connection: close
2024-03-03 23:26:30 UTC	2346	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 31 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 31 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 34 36 32 20 38 2e 33 30 32 43 31 2e 33 36 37 33 33 20 37 2e 35 39 32 36 37 20 32 2e 31 30 39 33 33 20 36 2e 39 38 31 33 33 20 32 2e 36 38 38 20 36 2e 34 36 38 43 33 2e 32 36 36 36 37 20 35 2e 39 35 34 36 37 20 33 2e 37 35 32 20 35 2e 34 32 37 33 33 20 34 2e 31 34 34 20 34 2e 38 38 36 43 34 2e 35 33 36 20 34 2e 33 33 35 33 33 20 34 2e 37 33 32 20 33 2e 38 31 32 36 37 20 34 2e 37 33 32 20 33 2e 33 31 38 43 34 2e 37 33 32 20 33 2e 30 Data Ascii: <svg width="33" height="11" viewBox="0 0 33 11" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M0.462 8.302C1.36733 7.59267 2.10933 6.98133 2.688 6.468C3.26667 5.95467 3.752 5.42733 4.144 4.886C4.536 4.33533 4.732 3.81267 4.732 3.318C4.732 3.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49785	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:30 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:30 UTC	1495	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 512579 Cache-Control: public, max-age=2592000 Cache-Tag: 397222119743688046708885623724902591450,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100030-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 153 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:30 GMT Edge-Cache-Tag: 397222119743688046708885623724902591450,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "79aab87c4d862190541fa781b46dd8ae" Expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 01 Feb 2024 07:23:26 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/79B7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1480,owidth=400,oheight=400,obytes=36183,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100030-IAD X-Timer: S1708995811.075717,VS0,VE153 Content-Length: 1480 Connection: close
2024-03-03 23:26:30 UTC	1480	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 79 00 01 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 08 06 01 03 04 07 10 00 02 01 03 03 04 03 01 01 00 00 00 00 00 00 00 01 02 03 04 05 06 00 11 61 07 12 31 41 13 21 22 14 32 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 07 00 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T ya1A!"2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49787	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-06%2F77d38700-d9ed-11eb-be27-f7edbce29062&client=76f99bdb8f78cd44cc0b&signature=f681a4e420fd5eb2c85085401f6fad97b8f5c7d1 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	1480	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1201155 Cache-Control: public, max-age=2592000 Cache-Tag: 236711002658362934809277748201890113384,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21930-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 99 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:31 GMT Edge-Cache-Tag: 236711002658362934809277748201890113384,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "45c2d91c62d658d2a623b6a15cf1d645" Expiration: expiry-date="Wed, 24 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 25 Jan 2024 17:27:06 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/1C4E) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1029,owidth=400,oheight=400,obytes=51453,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21930-LGA X-Timer: S1708307236.275957,VS0,VE99 Content-Length: 1029 Connection: close
2024-03-03 23:26:31 UTC	1029	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 0a 0a 0a 0a 0b 0a 0c 0d 0d 0c 10 11 0f 11 10 18 16 14 14 16 18 24 1a 1c 1a 1c 1a 24 36 22 28 22 22 28 22 36 30 3a 2f 2c 2f 3a 30 56 44 3c 3c 44 56 64 54 4f 54 64 79 6c 6c 79 98 91 98 c7 c7 ff ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 78 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 06 09 01 07 04 05 08 10 00 02 02 01 03 03 04 03 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 11 00 12 13 08 22 31 61 21 41 42 14 15 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&""&0-0>>T$$6"(""("60:/,/:0VD<<DVdTOTdylly x"1a!AB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49795	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	526	OUT	GET /aaq/wf/wf-dl-1.6.3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	855	IN	HTTP/1.1 200 OK x-amz-id-2: BOR284zHTNyfPoFlQyA17LO+N14jCyC5h4abR1ZwBCjT0bwLybEqul0JXb2ZrMj4zqDjAInnz6M= x-amz-request-id: 88MKF91G521P9JRW Date: Sun, 18 Feb 2024 16:36:26 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "0c84c99f9b88ba0e3ca06e6d6d13677d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ZeHFK4KbCpFpTKosSiI5sGj0wvxjac7G Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 46582 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1234206 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 64 6c 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 64 6c 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 2e 77 61 66 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-dl",[],t):"object"==typeof exports?exports["wafer-dl"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.waf
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a Data Ascii: [t]=e[t];return i}return Array.from(e)}function c(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function d(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"obj
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 69 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 29 7b 72 65 74 75 72 6e 20 69 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 69 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 69 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ;i<t.length;i++){var n=t[i];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,i,n){return i&&e(t.prototype,i),n&&e(t,n),t}}(),w=function e(t,i,n){null===t&&(t=Function.prototyp
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 72 20 6c 3d 64 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 7d 2c 7b 7d 29 29 2c 75 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 62 65 68 61 76 69 6f 72 22 29 2c 66 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 74 61 72 67 65 74 22 29 2c 76 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 2d 77 66 2d 64 75 72 69 6e 67 2d 74 72 61 6e 73 69 74 69 6f 6e 22 29 2c 70 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 7a 2b 22 73 74 69 63 6b 69 6e 65 73 73 2d 6c 6f 63 61 6c 2d 73 74 6f 72 61 67 65 Data Ascii: r l=d(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{},{})),u=e.getAttribute("data-wf-behavior"),f=e.getAttribute("data-wf-pagination-target"),v=e.getAttribute("data-wf-trigger-wf-during-transition"),p=e.getAttribute(z+"stickiness-local-storage
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 6e 45 64 67 65 50 61 64 64 69 6e 67 3a 4f 2c 65 64 67 65 47 75 74 74 65 72 3a 6a 2c 73 74 69 63 6b 69 6e 65 73 73 4c 6f 63 61 6c 53 74 6f 72 61 67 65 4b 65 79 3a 70 2c 73 74 69 63 6b 69 6e 65 73 73 43 6f 6f 6b 69 65 4e 61 6d 65 3a 67 2c 6d 61 78 53 69 62 6c 69 6e 67 73 50 65 72 53 69 64 65 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 2f 32 29 2c 70 6c 75 67 69 6e 73 3a 5b 5d 2c 74 72 61 63 6b 69 6e 67 3a 7b 72 61 70 69 64 50 61 67 65 56 69 65 77 50 65 72 53 6c 69 64 65 45 6e 61 62 6c 65 64 3a 49 2c 72 61 70 69 64 4c 69 6e 6b 56 69 65 77 50 65 72 53 6c 69 64 65 45 6e 61 62 6c 65 64 3a 21 30 2c 63 6f 6d 73 63 6f 72 65 50 65 72 53 6c 69 64 65 45 6e 61 62 6c 65 64 3a 21 54 7d 7d 2c 6c 2e 75 70 64 61 74 65 45 6c 65 6d 56 69 73 62 69 6c 69 74 79 28 65 2c 21 30 29 2c Data Ascii: nEdgePadding:O,edgeGutter:j,stickinessLocalStorageKey:p,stickinessCookieName:g,maxSiblingsPerSide:Math.floor(w/2),plugins:[],tracking:{rapidPageViewPerSlideEnabled:I,rapidLinkViewPerSlideEnabled:!0,comscorePerSlideEnabled:!T}},l.updateElemVisbility(e,!0),
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 69 74 79 28 65 2c 21 31 29 2c 6c 2e 64 65 73 74 72 6f 79 28 29 29 2c 6c 2e 5f 73 74 61 74 65 3d 7b 64 69 73 61 62 6c 65 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3a 21 31 2c 68 61 73 42 65 65 6e 54 68 72 65 61 64 6d 69 6c 6c 65 64 3a 21 31 2c 73 6c 69 64 65 57 69 64 74 68 3a 6c 2e 5f 67 65 74 53 6c 69 64 65 57 69 64 74 68 28 29 2c 76 69 72 74 75 61 6c 43 6f 75 6e 74 65 72 3a 30 7d 2c 4a 2e 73 6c 69 64 65 72 49 74 65 6d 73 3d 78 28 4a 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 63 68 69 6c 64 72 65 6e 29 2c 4a 2e 69 6e 64 69 63 61 74 6f 72 49 74 65 6d 73 3d 4a 2e 69 6e 64 69 63 61 74 6f 72 45 6c 65 6d 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 4a 2e 69 6e 64 69 63 61 74 6f 72 45 6c 65 6d 2e 63 68 69 6c 64 72 65 6e 29 3a 6e 75 Data Ascii: ity(e,!1),l.destroy()),l._state={disableEventHandlers:!1,hasBeenThreadmilled:!1,slideWidth:l._getSlideWidth(),virtualCounter:0},J.sliderItems=x(J.sliderElem.children),J.indicatorItems=J.indicatorElem?Array.prototype.slice.call(J.indicatorElem.children):nu
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 2e 5f 75 74 69 6c 2e 70 6c 75 67 69 6e 73 2e 70 75 73 68 28 6e 65 77 28 28 70 7c 7c 61 28 29 29 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 68 61 73 54 72 61 63 6b 69 6e 67 45 6e 61 62 6c 65 64 26 26 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 75 67 69 6e 73 2e 70 75 73 68 28 6e 65 77 28 28 67 7c 7c 73 28 29 29 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 68 61 73 52 65 73 70 6f 6e 73 69 76 65 6e 65 73 73 45 6e 61 62 6c 65 64 26 26 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 75 67 69 6e 73 2e 70 75 73 68 28 6e 65 77 28 28 79 7c 7c 6f 28 29 29 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2e 5f 75 Data Ascii: ._util.plugins.push(new((p\|\|a()).default)(this._util.elem,this)),this._util.hasTrackingEnabled&&this._util.plugins.push(new((g\|\|s()).default)(this._util.elem,this)),this._util.hasResponsivenessEnabled&&this._util.plugins.push(new((y\|\|o()).default)(this._u
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 3b 65 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 77 69 64 74 68 2c 74 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 6e 2a 69 2e 6c 65 6e 67 74 68 2b 22 70 78 22 2c 74 68 69 73 2e 5f 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 67 65 74 54 72 61 6e 73 66 6f 72 6d 56 61 6c 75 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 76 69 72 74 75 61 6c 43 6f 75 6e 74 65 72 2c 69 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 6c 69 64 65 57 69 64 74 68 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 3d 65 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 Data Ascii: ;e.containerWidth=t.getBoundingClientRect().width,t.style.width=n*i.length+"px",this._setTransform()}},{key:"_getTransformValue",value:function(){var e=this._util,t=this._state.virtualCounter,i=this._state.slideWidth;return e.containerWidth=e.containerWid
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 30 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 74 68 69 73 2e 70 72 65 46 65 74 63 68 28 29 2c 74 68 69 73 2e 5f 61 64 64 54 72 61 6e 73 69 65 6e 74 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 74 68 69 73 2e 5f 65 6e 61 62 6c 65 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 28 29 2c 74 68 69 73 2e 75 70 64 61 74 65 53 74 69 63 6b 69 6e 65 73 73 56 61 6c 75 65 28 29 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 75 67 69 6e 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 2e 6f 6e 41 66 74 Data Ascii: >0&&void 0!==arguments[0]?arguments[0]:0,t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};this.preFetch(),this._addTransientEventListeners(),this._enablePointerEvents(),this.updateStickinessValue(),this._util.plugins.forEach(function(i){i.onAft
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 69 73 42 6f 74 29 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 64 61 74 61 4c 69 73 74 2c 69 3d 65 2e 6d 61 78 53 69 62 6c 69 6e 67 73 50 65 72 53 69 64 65 2c 6e 3d 31 3b 6e 3c 69 2b 31 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 46 6f 72 77 61 72 64 28 6e 29 2c 61 3d 74 2e 67 65 74 42 61 63 6b 77 61 72 64 28 6e 29 3b 72 26 26 74 68 69 73 2e 72 65 6e 64 65 72 53 6c 69 64 65 28 72 2c 7b 70 72 65 66 65 74 63 68 3a 21 30 7d 29 2c 61 26 26 74 68 69 73 2e 72 65 6e 64 65 72 53 6c 69 64 65 28 61 2c 7b 70 72 65 66 65 74 63 68 3a 21 30 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6e 61 74 69 76 65 22 21 3d 3d 74 68 69 73 2e 5f 75 74 Data Ascii: isBot)for(var e=this._util,t=e.dataList,i=e.maxSiblingsPerSide,n=1;n<i+1;n++){var r=t.getForward(n),a=t.getBackward(n);r&&this.renderSlide(r,{prefetch:!0}),a&&this.renderSlide(a,{prefetch:!0})}}},{key:"handleResize",value:function(){if("native"!==this._ut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49788	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	570	OUT	GET /caas-assets-production/assets/v1/wafer-core.c214e816acc73cfb.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	984	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 287404 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:31 GMT Etag: "c214e816acc73cfb191dab31b496a463" Last-Modified: Thu, 29 Feb 2024 15:26:18 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/78ED) Vary: Accept-Encoding x-amz-id-2: ArlepiwbiNKMWKrTLxn6wSb4Msea7CH+/dNfBHXSWAuV1YUe4hSuis7zZNdYklXP9ZiqkPK8Fm0= x-amz-replication-status: COMPLETED x-amz-request-id: DGWB38ZV1D4WFMBC x-amz-server-side-encryption: AES256 x-amz-version-id: g6gAxWn6wsBRY2PgzhdG.LVrV2y9BVch X-Cache: HIT Content-Length: 177641 Connection: close
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 77 61 66 65 72 3d 74 28 29 3a 65 2e 77 61 66 65 72 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 7b 36 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 75 6e 64 65 66 69 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}(self,(function(){return e={653:function(e){var t;"undefi
2024-03-03 23:26:31 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 3d 78 29 2c 28 4f 7c 7c 41 29 26 26 28 6b 28 22 64 65 6c 65 74 65 22 29 2c 6b 28 22 68 61 73 22 29 2c 79 26 26 6b 28 22 67 65 74 22 29 29 2c 28 41 7c 7c 54 29 26 26 6b 28 62 29 2c 5f 26 26 77 2e 63 6c 65 61 72 26 26 64 65 6c 65 74 65 20 77 2e 63 6c 65 61 72 7d 72 65 74 75 72 6e 20 45 5b 65 5d 3d 78 2c 6f 28 7b 67 6c 6f 62 61 6c 3a 21 30 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 21 30 2c 66 6f 72 63 65 64 3a 78 21 3d 3d 67 7d 2c 45 29 2c 68 28 78 2c 65 29 2c 5f 7c 7c 6e 2e 73 65 74 53 74 72 6f 6e 67 28 78 2c 65 2c 79 29 2c 78 7d 7d 2c 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 63 6f 70 79 2d 63 6f 6e 73 74 72 75 63 74 6f 72 2d 70 72 6f 70 65 72 74 69 65 73 2e 6a 73 22 3a 66 75 6e 63 74 69 Data Ascii: =x),(O\|\|A)&&(k("delete"),k("has"),y&&k("get")),(A\|\|T)&&k(b),_&&w.clear&&delete w.clear}return E[e]=x,o({global:!0,constructor:!0,forced:x!==g},E),h(x,e),_\|\|n.setStrong(x,e,y),x}},"../../node_modules/core-js/internals/copy-constructor-properties.js":functi
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 73 22 29 2c 73 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 73 68 61 72 65 64 2d 73 74 6f 72 65 2e 6a 73 22 29 2c 69 3d 6f 28 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 29 3b 72 28 73 2e 69 6e 73 70 65 63 74 53 6f 75 72 63 65 29 7c 7c 28 73 2e 69 6e 73 70 65 63 74 53 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 65 29 7d 29 2c 65 2e 65 78 70 6f 72 74 73 3d 73 2e 69 6e 73 70 65 63 74 53 6f 75 72 63 65 7d 2c 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 69 6e 73 74 61 6c 6c 2d 65 72 72 6f 72 2d 63 61 75 73 65 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: s"),s=n("../../node_modules/core-js/internals/shared-store.js"),i=o(Function.toString);r(s.inspectSource)\|\|(s.inspectSource=function(e){return i(e)}),e.exports=s.inspectSource},"../../node_modules/core-js/internals/install-error-cause.js":function(e,t,n){
2024-03-03 23:26:31 UTC	2	IN	Data Raw: 3d 30 Data Ascii: =0
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 3b 79 3e 5f 3b 29 70 3d 76 5b 5f 2b 2b 5d 2c 6f 26 26 21 73 28 6a 2c 68 2c 70 29 7c 7c 28 6e 5b 70 5d 3d 68 5b 70 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 3a 66 7d 2c 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 6f 62 6a 65 63 74 2d 63 72 65 61 74 65 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 2c 72 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 61 6e 2d 6f 62 6a 65 63 74 2e 6a 73 22 29 2c 73 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 6f 62 6a 65 63 74 2d 64 65 66 69 Data Ascii: ;y>_;)p=v[_++],o&&!s(j,h,p)\|\|(n[p]=h[p]);return n}:f},"../../node_modules/core-js/internals/object-create.js":function(e,t,n){"use strict";var o,r=n("../../node_modules/core-js/internals/an-object.js"),s=n("../../node_modules/core-js/internals/object-defi
2024-03-03 23:26:31 UTC	1	IN	Data Raw: 2e Data Ascii: .
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 69 73 2d 63 61 6c 6c 61 62 6c 65 2e 6a 73 22 29 2c 64 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 68 61 73 2d 6f 77 6e 2d 70 72 6f 70 65 72 74 79 2e 6a 73 22 29 2c 66 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 66 61 69 6c 73 2e 6a 73 22 29 2c 6a 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 68 74 6d 6c 2e 6a 73 22 29 2c 6d 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 Data Ascii: ./node_modules/core-js/internals/is-callable.js"),d=n("../../node_modules/core-js/internals/has-own-property.js"),f=n("../../node_modules/core-js/internals/fails.js"),j=n("../../node_modules/core-js/internals/html.js"),m=n("../../node_modules/core-js/inte
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 75 2b 2b 2c 72 28 6e 2c 74 2c 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 69 5b 73 5d 3d 65 2c 2d 2d 75 7c 7c 6f 28 69 29 29 7d 29 2c 63 29 7d 29 29 2c 2d 2d 75 7c 7c 6f 28 69 29 7d 29 29 3b 72 65 74 75 72 6e 20 75 2e 65 72 72 6f 72 26 26 63 28 75 2e 76 61 6c 75 65 29 2c 6e 2e 70 72 6f 6d 69 73 65 7d 7d 29 7d 2c 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 6d 6f 64 75 6c 65 73 2f 65 73 2e 70 72 6f 6d 69 73 65 2e 61 6e 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 65 78 70 6f 72 Data Ascii: u++,r(n,t,e).then((function(e){l\|\|(l=!0,i[s]=e,--u\|\|o(i))}),c)})),--u\|\|o(i)}));return u.error&&c(u.value),n.promise}})},"../../node_modules/core-js/modules/es.promise.any.js":function(e,t,n){"use strict";var o=n("../../node_modules/core-js/internals/expor
2024-03-03 23:26:31 UTC	2	IN	Data Raw: 63 6f Data Ascii: co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49796	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	531	OUT	GET /aaq/wf/wf-toggle-1.15.4.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	867	IN	HTTP/1.1 200 OK x-amz-id-2: n3h+CLTGMbR3kzFi0oybhnvj59R9JcvwEzEEMe60tC4Jd2OLRxtwiWSiNqjKZv417KYOumgr+alf/yLUXMl9AQ== x-amz-request-id: 5MGAQ3Z2FXKKA8JJ Date: Thu, 15 Feb 2024 10:56:55 GMT Last-Modified: Wed, 20 Apr 2022 09:12:23 GMT ETag: "277e3d31bf9ac6a0b7087285cbe8b7e1" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: I.icKfyBGCcao3hIqO0L0HJEsTytLF6Y Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 12937 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1513777 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b Data Ascii: rototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var a=function(){function e(e,t){
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 28 6e 29 7d 2c 63 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 66 3d 63 2e 63 6f 6e 73 74 61 6e 74 73 2c 64 3d 63 2e 75 74 69 6c 73 2c 76 3d 63 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 68 3d 64 2e 62 69 6e 64 45 76 65 6e 74 2c 70 3d 64 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 2c 79 3d 64 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 2c 67 3d 64 2e 73 65 74 54 69 6d 65 6f 75 74 2c 6d 3d 64 2e 75 6e 62 69 6e 64 45 76 65 6e 74 2c 62 3d 66 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 77 3d 5b 22 6b 65 79 22 5d 2c 5f 3d 5b 22 63 6c 69 63 6b 22 2c 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 22 6d 6f 75 73 65 45 6e 74 65 72 44 65 6c 61 79 22 2c 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 22 6d 6f 75 73 65 4c 65 61 76 65 44 65 6c 61 79 22 2c 22 6f 6e 4c Data Ascii: (n)},c=window.wafer,f=c.constants,d=c.utils,v=c.WaferBaseClass,h=d.bindEvent,p=d.convertNodeListToArray,y=d.findAncestor,g=d.setTimeout,m=d.unbindEvent,b=f.ATTR_PREFIX,w=["key"],_=["click","mouseenter","mouseEnterDelay","mouseleave","mouseLeaveDelay","onL
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 6e 58 3a 30 2c 73 74 61 72 74 58 3a 30 2c 73 74 61 72 74 59 3a 30 7d 2c 65 6c 65 6d 3a 65 2c 66 6f 63 75 73 53 65 6c 65 63 74 6f 72 3a 67 2c 66 6f 63 75 73 54 61 72 67 65 74 3a 6e 75 6c 6c 2c 70 72 65 76 65 6e 74 42 72 6f 77 73 65 72 44 65 66 61 75 6c 74 42 65 68 61 76 69 6f 72 3a 6e 75 6c 6c 3d 3d 3d 6c 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 3f 30 3a 4e 75 6d 62 65 72 28 6c 29 2c 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 3a 6e 75 6c 6c 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 30 3a 4e 75 6d 62 65 72 28 63 29 2c 73 65 74 46 6f 63 75 73 3a 6e 75 6c 6c 3d 3d 3d 70 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 3f 30 3a 4e 75 6d 62 65 72 28 70 29 2c 73 79 6e 63 44 65 6c 61 79 3a 6e 75 6c 6c 3d 3d 3d 66 7c 7c 76 6f 69 64 20 30 3d 3d 3d 66 3f 30 3a 4e 75 6d 62 65 72 Data Ascii: nX:0,startX:0,startY:0},elem:e,focusSelector:g,focusTarget:null,preventBrowserDefaultBehavior:null===l\|\|void 0===l?0:Number(l),preventScroll:null===c\|\|void 0===c?0:Number(c),setFocus:null===p\|\|void 0===p?0:Number(p),syncDelay:null===f\|\|void 0===f?0:Number
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 29 3a 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 73 43 6c 69 63 6b 4f 75 74 73 69 64 65 3d 21 30 29 7d 7d 63 61 74 63 68 28 65 29 7b 6f 3d 21 30 2c 69 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 6e 26 26 73 2e 72 65 74 75 72 6e 26 26 73 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 69 7d 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 6d 28 65 2c 22 74 6f 75 63 68 73 74 61 72 74 22 2c 74 68 69 73 2e 74 6f 75 63 68 73 74 61 72 74 29 2c 6d 28 65 2c 22 74 6f 75 63 68 65 6e 64 22 2c 74 68 69 73 2e 74 6f 75 63 68 65 6e 64 29 2c 6d 28 65 2c 22 74 6f 75 63 Data Ascii: ):this._state.isClickOutside=!0)}}catch(e){o=!0,i=e}finally{try{!n&&s.return&&s.return()}finally{if(o)throw i}}}}},{key:"removeEventListeners",value:function(){var e=this._util.elem;m(e,"touchstart",this.touchstart),m(e,"touchend",this.touchend),m(e,"touc
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 64 72 61 67 2c 72 3d 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2c 6e 3d 72 2e 63 6c 69 65 6e 74 59 2c 6f 3d 72 2e 70 61 67 65 58 3b 74 2e 73 74 61 72 74 58 3d 6f 2c 74 2e 73 74 61 72 74 59 3d 6e 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 75 63 68 65 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 63 6c 65 61 72 44 72 61 67 28 29 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 75 63 68 6d 6f 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 64 72 61 67 3b 74 2e 65 6e 64 58 3d 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 2c 74 2e 65 6e 64 59 3d 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e Data Ascii: lue:function(e){var t=this._util.drag,r=e.touches[0],n=r.clientY,o=r.pageX;t.startX=o,t.startY=n}},{key:"touchend",value:function(e){this.clearDrag()}},{key:"touchmove",value:function(e){var t=this._util.drag;t.endX=e.touches[0].pageX,t.endY=e.touches[0].
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 7d 29 2c 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 66 6f 63 75 73 28 79 29 2c 64 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 26 26 28 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 49 6e 64 65 78 22 2c 22 2d 31 22 29 2c 64 2e 66 6f 63 75 73 28 79 29 29 7d 2c 35 29 7d 6c 26 26 28 22 74 72 75 65 22 3d 3d 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 3f 28 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 63 29 29 3a 28 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 74 72 75 65 22 29 2c 66 2e Data Ascii: }),g(function(){d.focus(y),d!==document.activeElement&&(d.setAttribute("tabIndex","-1"),d.focus(y))},5)}l&&("true"===f.getAttribute("aria-expanded")?(f.setAttribute("aria-expanded","false"),f.classList.remove(c)):(f.setAttribute("aria-expanded","true"),f.
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 6e 28 65 29 7b 65 21 3d 3d 72 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6c 29 7d 29 3b 65 6c 73 65 20 69 66 28 63 5b 66 5d 29 7b 76 61 72 20 6d 3d 63 2e 63 6f 6e 74 61 69 6e 73 28 6c 29 3b 74 2e 64 69 64 43 6f 6d 70 6c 65 74 65 28 6e 75 6c 6c 29 2c 28 22 74 6f 67 67 6c 65 22 3d 3d 3d 66 7c 7c 22 72 65 6d 6f 76 65 22 3d 3d 3d 66 26 26 6d 7c 7c 22 61 64 64 22 3d 3d 3d 66 26 26 21 6d 29 26 26 28 68 3f 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 65 78 65 63 75 74 65 41 63 74 69 6f 6e 28 65 2c 72 2c 69 2c 66 2c 6c 2c 76 2c 79 29 7d 2c 75 2c 74 29 3a 74 2e 65 78 65 63 75 74 65 41 63 74 69 6f 6e 28 65 2c 72 2c 69 2c 66 2c 6c 2c 76 2c 79 29 29 7d 7d 29 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 61 72 67 65 74 73 22 2c 76 61 6c 75 65 3a Data Ascii: n(e){e!==r&&e.classList.remove(l)});else if(c[f]){var m=c.contains(l);t.didComplete(null),("toggle"===f\|\|"remove"===f&&m\|\|"add"===f&&!m)&&(h?g(function(){t.executeAction(e,r,i,f,l,v,y)},u,t):t.executeAction(e,r,i,f,l,v,y))}})})}}},{key:"getTargets",value:
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 Data Ascii: new TypeError("Cannot call a class as a function")}function a(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function s(e,t){if("function"!=typeof t&&
2024-03-03 23:26:31 UTC	1237	IN	Data Raw: 69 64 20 30 3d 3d 3d 72 3f 64 6f 63 75 6d 65 6e 74 3a 72 2c 73 3d 65 2e 73 65 6c 65 63 74 6f 72 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 22 2e 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 3a 73 3b 69 28 74 68 69 73 2c 74 29 3b 76 61 72 20 63 3d 61 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 6f 2c 73 65 6c 65 63 74 6f 72 3a 6c 2c 57 61 66 65 72 43 6c 61 73 73 3a 28 75 7c 7c 6e 28 29 29 2e 64 65 66 61 75 6c 74 7d 29 29 3b 72 65 74 75 72 6e 20 63 2e 73 79 6e 63 28 29 2c 70 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 5b 65 5d 3d 63 5b 65 5d 2e 62 69 6e 64 28 63 29 7d 29 2c 63 2e 61 64 64 45 76 65 6e 74 Data Ascii: id 0===r?document:r,s=e.selector,l=void 0===s?".wafer-toggle":s;i(this,t);var c=a(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:o,selector:l,WaferClass:(u\|\|n()).default}));return c.sync(),p.forEach(function(e){c[e]=c[e].bind(c)}),c.addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49789	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	569	OUT	GET /caas-assets-production/assets/v1/polyfills.570a7e8b6540e7fd.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1492131 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:31 GMT Etag: "570a7e8b6540e7fdbd6d0a32b502f75c" Last-Modified: Thu, 15 Feb 2024 16:48:06 GMT Server: ECAcc (nya/789E) Vary: Accept-Encoding x-amz-id-2: yzBAaSJZSKNeh3efF+OmDs6XC1skCSTxIawErG2k4n7cdEswNJOJXJo51cwAFTRQHiLjHcIQDcY= x-amz-replication-status: COMPLETED x-amz-request-id: A3N3FQZ45SZ0DVBQ x-amz-server-side-encryption: AES256 x-amz-version-id: igFc9fJ4uEYuczv8QYcKGMobz10BcI0x X-Cache: HIT Content-Length: 19005 Connection: close
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var
2024-03-03 23:26:31 UTC	2622	IN	Data Raw: 64 22 29 29 7d 29 2c 30 29 7d 2c 66 2e 6f 6e 74 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4e 65 74 77 6f 72 6b 20 72 65 71 75 65 73 74 20 74 69 6d 65 64 20 6f 75 74 22 29 29 7d 29 2c 30 29 7d 2c 66 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 6e 65 77 20 5f 28 22 41 62 6f 72 74 65 64 22 2c 22 41 62 6f 72 74 45 72 72 6f 72 22 29 29 7d 29 2c 30 29 7d 2c 66 2e 6f 70 65 6e 28 73 2e 6d 65 74 68 6f 64 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 22 3d 3d 3d 74 26 26 6e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3f 6e Data Ascii: d"))}),0)},f.ontimeout=function(){setTimeout((function(){a(new TypeError("Network request timed out"))}),0)},f.onabort=function(){setTimeout((function(){a(new _("Aborted","AbortError"))}),0)},f.open(s.method,function(t){try{return""===t&&n.location.href?n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49793	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	529	OUT	GET /aaq/wf/wf-tabs-1.12.6.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: tsAXDqQmwxEHscIEzuuulXjhZpLw9ZAtYqe/fE024sVZIVOLgaK2D/VZ4ffE4DRDOFxohTjZLk4= x-amz-request-id: 0AJRV2584D11CZQX Date: Tue, 27 Feb 2024 08:38:39 GMT Last-Modified: Tue, 15 Mar 2022 07:44:13 GMT ETag: "37e8ba981f7f4f2319c129547e77412e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: cJHOK.OWbDhGC7mVs_QWbU7pF5o8P2mJ Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 15071 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 485273 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 61 62 73 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 61 62 73 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 74 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 3a 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 76 61 72 20 61 3d Data Ascii: pe=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Object.setPrototypeOf(t,e):t.__proto__=e)}Object.defineProperty(e,"__esModule",{value:!0});var r=function(){function t(t,e){var a=
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 6e 64 45 76 65 6e 74 2c 77 3d 68 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 54 3d 5b 22 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 22 2c 22 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 49 6e 22 2c 22 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 4f 75 74 22 2c 22 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4c 65 61 76 65 22 2c 22 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4f 76 65 72 22 2c 22 74 61 62 43 68 61 6e 67 65 22 2c 22 74 61 62 43 6c 69 63 6b 22 2c 22 74 61 62 46 6f 63 75 73 49 6e 22 2c 22 74 61 62 4d 6f 75 73 65 4f 76 65 72 22 5d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 69 28 74 68 69 73 2c 65 29 3b 66 6f 72 28 76 61 72 20 61 2c 73 3d 6f 28 74 68 69 73 2c 28 65 2e 5f 5f 70 72 6f 74 Data Ascii: ndEvent,w=h.ATTR_PREFIX,T=["handleKeyDown","handleTargetFocusIn","handleTargetFocusOut","handleTargetMouseLeave","handleTargetMouseOver","tabChange","tabClick","tabFocusIn","tabMouseOver"],_=function(t){function e(t){i(this,e);for(var a,s=o(this,(e.__prot
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 3d 7b 61 63 74 69 76 65 43 6c 61 73 73 3a 6e 2c 61 75 74 6f 53 77 69 74 63 68 52 6f 74 61 74 69 6f 6e 49 6e 74 65 72 76 61 6c 3a 45 2c 61 75 74 6f 53 77 69 74 63 68 54 69 6d 65 6f 75 74 3a 5f 2c 62 6f 75 6e 64 61 72 79 3a 4f 2c 65 6c 65 6d 3a 74 2c 69 6e 61 63 74 69 76 65 43 6c 61 73 73 3a 6c 2c 69 73 43 6f 6c 6c 61 70 73 61 62 6c 65 3a 68 2c 73 69 6e 67 6c 65 54 61 62 70 61 6e 65 6c 3a 48 2c 73 68 6f 75 6c 64 41 6c 6c 6f 77 44 65 66 61 75 6c 74 3a 64 2c 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 3a 6d 2c 73 68 6f 75 6c 64 44 69 73 61 62 6c 65 46 6f 63 75 73 3a 62 2c 73 68 6f 75 6c 64 48 61 6e 64 6c 65 46 6f 63 75 73 3a 76 2c 73 68 6f 75 6c 64 48 61 6e 64 6c 65 48 6f 76 65 72 3a 66 2c 73 68 6f 75 6c 64 53 63 72 6f 6c 6c 52 65 73 74 6f 72 65 3a 63 2c Data Ascii: ={activeClass:n,autoSwitchRotationInterval:E,autoSwitchTimeout:_,boundary:O,elem:t,inactiveClass:l,isCollapsable:h,singleTabpanel:H,shouldAllowDefault:d,shouldAutoSwitch:m,shouldDisableFocus:b,shouldHandleFocus:v,shouldHandleHover:f,shouldScrollRestore:c,
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 2e 5f 75 74 69 6c 2c 61 3d 74 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 2c 69 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 3b 61 26 26 28 6d 28 69 2c 22 66 6f 63 75 73 69 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 49 6e 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 6d 28 69 2c 22 66 6f 63 75 73 6f 75 74 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 4f 75 74 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 6d 28 69 2c 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4c 65 61 76 65 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 6d 28 69 2c 22 6d 6f 75 73 65 6f 76 65 72 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4f 76 65 Data Ascii: ._util,a=t.shouldAutoSwitch,i=t.targetElem;a&&(m(i,"focusin",this.handleTargetFocusIn,{passive:!1}),m(i,"focusout",this.handleTargetFocusOut,{passive:!1}),m(i,"mouseleave",this.handleTargetMouseLeave,{passive:!1}),m(i,"mouseover",this.handleTargetMouseOve
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 2e 73 77 69 74 63 68 54 61 62 28 22 6e 65 78 74 22 2c 7b 66 6f 63 75 73 3a 21 30 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 30 3a 65 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 73 77 69 74 63 68 54 61 62 28 22 6e 65 78 74 22 2c 7b 66 6f 63 75 73 3a 21 30 7d 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 77 69 74 63 68 54 61 62 54 69 6d 65 6f 75 74 26 26 62 28 74 68 69 73 2e 5f 75 74 69 6c 2e 73 77 69 74 63 68 54 61 62 54 69 6d 65 6f 75 74 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 61 63 74 69 76 61 74 65 54 61 62 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 Data Ascii: .switchTab("next",{focus:!0});break;case 40:e&&(t.preventDefault(),this.switchTab("next",{focus:!0}))}}},{key:"pauseSwitching",value:function(){this._util.switchTabTimeout&&b(this._util.switchTabTimeout,this)}},{key:"activateTab",value:function(t){var e=t
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 68 74 3d 4b 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2b 22 70 78 22 29 7d 7d 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 69 3d 61 2e 74 61 62 45 6c 65 6d 2c 73 3d 61 2e 68 61 73 54 72 69 67 67 65 72 2c 72 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6e 3d 76 6f 69 64 20 30 3b 69 66 28 6e 3d 45 3f 78 26 26 78 5b 30 5d 3a 78 26 26 78 5b 72 5d 2c 69 3d 3d 3d 74 29 7b 69 66 28 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 64 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 21 30 29 2c 53 26 26 28 69 2e 73 Data Ascii: ht=K.offsetHeight+"px")}}k.forEach(function(){var a=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},i=a.tabElem,s=a.hasTrigger,r=arguments[1],n=void 0;if(n=E?x&&x[0]:x&&x[r],i===t){if(i.classList.add(d),i.setAttribute("aria-selected",!0),S&&(i.s
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 3a 22 64 65 61 63 74 69 76 61 74 65 54 61 62 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 61 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 69 3d 61 2e 61 63 74 69 76 65 43 6c 61 73 73 2c 6f 3d 61 2e 69 6e 61 63 74 69 76 65 43 6c 61 73 73 2c 73 3d 61 2e 74 61 62 73 45 6c 65 6d 73 2c 72 3d 61 2e 74 61 72 67 65 74 45 6c 65 6d 73 2c 6e 3d 61 2e 74 72 69 67 67 65 72 41 63 74 69 76 65 43 6c 61 73 73 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 54 61 62 45 6c 65 6d 3d 6e 75 6c 6c 2c 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d Data Ascii: :"deactivateTab",value:function(t){var e=this,a=this._util,i=a.activeClass,o=a.inactiveClass,s=a.tabsElems,r=a.targetElems,n=a.triggerActiveClass;this._state.activeTabElem=null,s.some(function(){var a=arguments.length>0&&void 0!==arguments[0]?arguments[0]
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4f 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 26 26 74 68 69 73 2e 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 28 29 7d 7d 2c 7b 6b 65 79 3a 22 74 61 62 4d 6f 75 73 65 4f 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 65 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 2c 69 3d 65 2e 73 68 6f 75 6c 64 48 61 6e 64 6c 65 48 6f 76 65 72 3b 61 26 26 74 68 69 73 2e 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 28 29 2c 69 26 26 74 68 69 73 Data Ascii: n",this.handleKeyDown)}},{key:"handleTargetMouseOver",value:function(t){this._util.shouldAutoSwitch&&this.pauseSwitching()}},{key:"tabMouseOver",value:function(t){var e=this._util,a=e.shouldAutoSwitch,i=e.shouldHandleHover;a&&this.pauseSwitching(),i&&this
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 73 65 4f 76 65 72 22 5d 2c 5b 22 5f 73 65 6c 66 22 2c 22 6d 6f 75 73 65 6f 76 65 72 22 5d 5d 7d 2c 65 2e 64 65 66 61 75 6c 74 3d 5f 2c 74 2e 65 78 70 6f 72 74 73 3d 65 2e 64 65 66 61 75 6c 74 7d 2c 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 75 3d 6f 28 61 28 22 2e 2f 73 72 63 2f 62 61 73 65 2e 6a 73 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 Data Ascii: seOver"],["_self","mouseover"]]},e.default=_,t.exports=e.default},"./src/controller.js":function(t,e,a){"use strict";function i(){return u=o(a("./src/base.js"))}function o(t){return t&&t.__esModule?t:{default:t}}function s(t,e){if(!(t instanceof e))throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49790	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	572	OUT	GET /caas-assets-production/assets/v1/vendor-glide.41c2233c6591d1e1.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1492131 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:31 GMT Etag: "41c2233c6591d1e1f54e3b7c1af8f209" Last-Modified: Thu, 15 Feb 2024 16:48:08 GMT Server: ECAcc (nya/793F) Vary: Accept-Encoding x-amz-id-2: 0Ub0VSfMmVzUdOAENxO1b7GOaM+x6QFittsJ3URWbck7nvowht8TH9vp/+o8NRA+nE+NonAVTfc= x-amz-replication-status: COMPLETED x-amz-request-id: A3N6PY75QP7J3N2E x-amz-server-side-encryption: AES256 x-amz-version-id: 9sjC_PuisVcfYMnwU3tuLBpPsl1Whur9 X-Cache: HIT Content-Length: 31162 Connection: close
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 65 6e 64 6f 72 2d 67 6c 69 64 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 43 41 41 53 5f 41 4f 4c 43 4f 4d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 31 34 5d 2c 7b 34 31 33 34 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 2c 6e 29 7b 69 66 28 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 Data Ascii: /! For license information please see vendor-glide.js.LICENSE.txt /(self.webpackChunkCAAS_AOLCOM=self.webpackChunkCAAS_AOLCOM\|\|[]).push([[3414],{4134:function(t){function e(t,e,n){if(e&&!Array.isArray(e)&&"number"==typeof e.length){var r=e.length;retur
2024-03-03 23:26:31 UTC	14779	IN	Data Raw: 65 29 2c 74 2e 61 66 74 65 72 3d 70 28 74 2e 61 66 74 65 72 29 29 3a 74 3d 70 28 74 29 2c 69 2e 5f 76 3d 74 7d 7d 29 2c 77 28 69 2c 22 72 65 64 75 63 74 6f 72 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2e 76 61 6c 75 65 2c 6e 3d 74 2e 73 65 74 74 69 6e 67 73 2e 70 65 72 56 69 65 77 3b 72 65 74 75 72 6e 20 6d 28 65 29 3f 65 2e 62 65 66 6f 72 65 2f 6e 2b 65 2e 61 66 74 65 72 2f 6e 3a 32 2a 65 2f 6e 7d 7d 29 2c 6e 2e 6f 6e 28 5b 22 72 65 73 69 7a 65 22 2c 22 75 70 64 61 74 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 6d 6f 75 6e 74 28 29 7d 29 29 2c 69 7d 2c 53 69 7a 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 3d 7b 73 65 74 75 70 53 6c 69 64 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f Data Ascii: e),t.after=p(t.after)):t=p(t),i._v=t}}),w(i,"reductor",{get:function(){var e=i.value,n=t.settings.perView;return m(e)?e.before/n+e.after/n:2*e/n}}),n.on(["resize","update"],(function(){i.mount()})),i},Sizes:function(t,e,n){var i={setupSlides:function(){fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49792	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	537	OUT	GET /aaq/wf/wf-autocomplete-1.31.8.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: jmtRlYfg5q8EbpQfzG4wIU6WZSlQPsbpTMI9UkY0aQjQAqYGwkjA7garsLbOpNRY0rvzst87Vio= x-amz-request-id: 300D3MST5441R6JT Date: Thu, 29 Feb 2024 01:36:55 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "2ed3fd24c05aadf407ab0550e217596a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: tN7eaH3sKsI8Er3FZh9P6IhfxZGzu3nm Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 31014 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 337777 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wa
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 74 2e 6e 63 29 2c 73 2e 73 72 63 3d 74 2e 70 2b 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 22 2b 7b 30 3a 22 36 64 37 34 32 65 39 36 36 63 22 7d 5b 65 5d 2b 22 2e 63 68 75 6e 6b 2e 6a 73 22 3b 76 61 72 20 6c 3d 73 65 74 54 69 6d 65 6f 75 74 28 69 2c 31 32 65 34 29 3b 72 65 74 75 72 6e 20 73 2e 6f 6e 65 72 72 6f 72 3d 73 2e 6f 6e 6c 6f 61 64 3d 69 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 6e 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 61 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 61 29 7b 74 2e 6f 28 65 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 61 7d 29 7d 2c Data Ascii: t.nc),s.src=t.p+"wf-autocomplete-1.31.8-"+{0:"6d742e966c"}[e]+".chunk.js";var l=setTimeout(i,12e4);return s.onerror=s.onload=i,o.appendChild(s),n},t.m=e,t.c=a,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:a})},
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 61 29 26 26 28 65 5b 61 5d 3d 69 5b 61 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 74 5b 69 5d 3b 61 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 61 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 61 26 26 28 61 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 Data Ascii: gth;t++){var i=arguments[t];for(var a in i)Object.prototype.hasOwnProperty.call(i,a)&&(e[a]=i[a])}return e},u=function(){function e(e,t){for(var i=0;i<t.length;i++){var a=t[i];a.enumerable=a.enumerable\|\|!1,a.configurable=!0,"value"in a&&(a.writable=!0),Ob
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 20 30 3d 3d 3d 67 3f 31 3a 4e 75 6d 62 65 72 28 67 29 2c 6e 75 6d 50 6c 61 63 65 68 6f 6c 64 65 72 73 3a 66 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 64 2c 73 79 6e 63 4f 6e 53 65 61 72 63 68 3a 79 2c 74 61 72 67 65 74 3a 73 2c 74 65 6d 70 6c 61 74 65 3a 63 2c 74 79 70 65 3a 4c 2c 75 72 6c 3a 75 2c 74 69 6d 65 6f 75 74 3a 6e 75 6c 6c 3d 3d 3d 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 3f 36 65 33 3a 4e 75 6d 62 65 72 28 77 29 7d 29 2c 6d 26 26 6f 2e 72 65 6e 64 65 72 43 6c 65 61 72 42 75 74 74 6f 6e 28 29 2c 6f 2e 63 72 65 61 74 65 4c 69 73 74 45 6c 65 6d 28 29 2c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 6f 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 75 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 43 6c 65 61 72 42 75 74 74 6f 6e 22 Data Ascii: 0===g?1:Number(g),numPlaceholders:f,placeholder:d,syncOnSearch:y,target:s,template:c,type:L,url:u,timeout:null===w\|\|void 0===w?6e3:Number(w)}),m&&o.renderClearButton(),o.createListElem(),o.addEventListeners(),o}return o(t,e),u(t,[{key:"renderClearButton"
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 61 29 26 26 28 65 5b 61 5d 3d 69 5b 61 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b Data Ascii: r("Invalid attempt to destructure non-iterable instance")}}(),n=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var a in i)Object.prototype.hasOwnProperty.call(i,a)&&(e[a]=i[a])}return e},o=function(){function e(e,t){
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 65 6d 3a 74 2c 65 72 72 6f 72 43 6c 61 73 73 3a 6e 2c 69 64 3a 6c 2c 69 64 49 6e 64 65 78 3a 6b 2c 73 65 6c 65 63 74 6f 72 3a 73 2c 73 75 62 6d 69 74 4f 6e 43 6c 65 61 72 3a 4e 75 6d 62 65 72 28 63 29 7c 7c 30 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 6f 7d 2c 22 73 65 6c 65 63 74 22 3d 3d 3d 66 26 26 28 74 68 69 73 2e 5f 75 74 69 6c 2e 66 6f 72 6d 45 6c 65 6d 3d 76 28 74 2c 22 77 61 66 65 72 2d 66 6f 72 6d 22 29 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 3d 7b 61 63 74 69 76 65 3a 21 31 2c 6c 69 73 74 4f 70 65 6e 3a 21 31 2c 6f 72 69 67 69 6e 61 6c 54 65 72 6d 3a 22 22 2c 70 6c 61 63 65 68 6f 6c 64 65 72 73 56 69 73 69 62 6c 65 3a 21 31 2c 74 65 72 6d 3a 22 22 7d 2c 4f 26 26 74 68 69 73 2e 72 65 6e 64 65 72 43 6c 65 61 72 42 75 74 74 6f 6e 28 29 2c 4c 2e 66 Data Ascii: em:t,errorClass:n,id:l,idIndex:k,selector:s,submitOnClear:Number(c)\|\|0,successClass:o},"select"===f&&(this._util.formElem=v(t,"wafer-form")),this._state={active:!1,listOpen:!1,originalTerm:"",placeholdersVisible:!1,term:""},O&&this.renderClearButton(),L.f
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 74 6f 6e 43 6c 69 63 6b 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6e 64 65 72 43 6c 65 61 72 42 75 74 74 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 63 6c 65 61 72 42 75 74 74 6f 6e 54 65 78 74 2c 69 3d 65 2e 65 6c 65 6d 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 22 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2e 73 74 79 6c 65 2c 7b 70 6f 73 Data Ascii: tonClick,{passive:!1})}},{key:"renderClearButton",value:function(){var e=this._util,t=e.clearButtonText,i=e.elem,a=document.createElement("div"),r=document.createElement("div");a.classList.add("wafer-autocomplete-input-wrapper"),Object.assign(a.style,{pos
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 64 28 72 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 53 75 67 67 65 73 74 69 6f 6e 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 69 3d 74 2e 61 72 69 61 43 6f 6e 66 69 67 2c 61 3d 74 2e 65 6c 65 6d 2c 72 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 2c 6e 3d 74 2e 6e 75 6d 50 6c 61 63 65 68 6f 6c 64 65 72 73 2c 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 73 3d 6f 2e 75 72 6c 2c 75 3d 6f 2e 73 79 6e 63 4f 6e 53 65 61 72 63 68 2c 63 3d 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 3b 69 66 28 21 28 73 26 26 72 26 26 74 68 69 73 2e 67 65 74 4c 69 73 74 4d 61 72 6b 75 70 26 26 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 3d 74 68 69 73 Data Ascii: d(r),t}},{key:"getSuggestions",value:function(){var e=this,t=this._util,i=t.ariaConfig,a=t.elem,r=t.targetElem,n=t.numPlaceholders,o=this._util,s=o.url,u=o.syncOnSearch,c=void 0!==u&&u;if(!(s&&r&&this.getListMarkup&&this._state.active))return!1;var d=this
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 73 2c 6e 3d 69 26 26 28 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 69 29 2c 6f 3d 68 28 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 22 29 29 5b 30 5d 3b 6f 7c 7c 28 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 75 6c 22 29 2c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 22 29 29 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 74 61 72 67 65 74 45 6c 65 6d 3d 6e 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 6c 69 73 74 45 6c 65 6d 3d 6f 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 79 6c 6b 4d 61 70 3d 79 28 6e 29 2c 61 26 26 72 Data Ascii: s,n=i&&(t\|\|document.body).querySelector(i),o=h(n.getElementsByClassName("wafer-autocomplete-list"))[0];o\|\|(o=document.createElement("ul"),o.classList.add("wafer-autocomplete-list")),this._util.targetElem=n,this._util.listElem=o,this._util.ylkMap=y(n),a&&r
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 7b 6b 65 79 3a 22 63 6c 65 61 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 6c 61 63 65 68 6f 6c 64 65 72 73 56 69 73 69 62 6c 65 3d 21 31 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 64 69 64 2d 73 75 62 6d 69 74 22 29 2c 74 68 69 73 2e 68 69 64 65 4c 69 73 74 28 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 5f 75 74 69 6c 2e 6c 69 73 74 45 6c 65 6d 3b 6c 2e 64 65 73 74 72 6f 79 28 74 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 Data Ascii: {key:"clear",value:function(){var e=this,t=this._util.elem;this._state.active=!1,this._state.placeholdersVisible=!1,t.classList.remove("wafer-autocomplete-did-submit"),this.hideList(),setTimeout(function(){var t=e._util.listElem;l.destroy(t),t.innerHTML="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49794	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	530	OUT	GET /aaq/wf/wf-rapid-1.10.8.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	855	IN	HTTP/1.1 200 OK x-amz-id-2: qb1obBUhbD2YMTezdtBeuSS7sY+x6UtohkG4l/B/OA4mc1N5LMXVr7OJohzK0cflVadyNtgtJKI= x-amz-request-id: NS01RR6QEZJSAHWF Date: Sat, 17 Feb 2024 00:22:27 GMT Last-Modified: Thu, 16 Nov 2023 07:51:34 GMT ETag: "808af2d936dda9bf28a182c7ca2dccde" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: CpHK8dRTJ7Xf.D6vJKo2wpCLD6UmC4Yi Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13552 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1379045 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 72 61 70 69 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 72 61 70 69 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 Data Ascii: ther be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 72 22 2c 22 68 61 6e 64 6c 65 52 61 70 69 64 4d 6f 75 73 65 4c 65 61 76 65 22 5d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 72 2e 73 65 6c 65 63 74 6f 72 3b 69 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6f 3d 61 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 73 65 6c 65 63 74 6f 72 3a 6e 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 6d 7d 29 29 2c 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: r","handleRapidMouseLeave"],O=function(e){function t(e){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=r.selector;i(this,t);var o=a(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{selector:n},{STATE_ATTRS:m})),s=e.getAttribute
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 65 2e 6d 6f 75 73 65 45 6e 74 65 72 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 29 2c 6f 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 75 28 74 2c 5b 7b 6b 65 79 3a 22 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 28 73 7c 7c 6e 28 29 29 2e 67 65 74 52 61 70 69 64 49 6e 73 74 61 6e 63 65 29 28 29 3b 69 66 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 72 3d 74 2e 65 6c 65 6d 2c 69 3d 74 2e 6e 61 6d 65 2c 61 3d 74 2e 74 72 69 67 67 65 72 2c 6f 3d 74 2e 74 72 69 67 67 65 72 4d 65 74 68 6f 64 2c 63 3d 74 2e 70 6f 73 2c 75 3d 69 5b 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 43 6f 75 6e 74 7c 7c 30 Data Ascii: e.mouseEnterTimeout=null,o.addEventListeners()),o}return o(t,e),u(t,[{key:"_beaconTrigger",value:function(){var e=(0,(s\|\|n()).getRapidInstance)();if(e){var t=this._util,r=t.elem,i=t.name,a=t.trigger,o=t.triggerMethod,c=t.pos,u=i[this._state.inViewCount\|\|0
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 69 6e 56 69 65 77 43 6f 75 6e 74 3d 30 29 3b 65 2e 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 28 29 2c 2b 2b 65 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 43 6f 75 6e 74 2c 65 2e 6e 6f 64 65 49 6e 56 69 65 77 28 29 7d 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 49 6e 74 65 72 76 61 6c 29 29 7d 7d 2c 7b 6b 65 79 3a 22 6e 6f 64 65 4f 75 74 4f 66 56 69 65 77 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 74 3d 65 2e 64 69 64 4c 6f 63 6b 2c 72 3d 65 2e 69 6e 56 69 65 77 54 69 6d 65 6f 75 74 49 6e 73 74 61 6e 63 65 3b 21 74 26 26 72 26 26 28 5f 28 72 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 54 69 6d 65 6f 75 74 49 6e 73 74 61 6e 63 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e Data Ascii: inViewCount=0);e._beaconTrigger(),++e._state.inViewCount,e.nodeInView()},this._util.triggerInterval))}},{key:"nodeOutOfView",value:function(){var e=this._state,t=e.didLock,r=e.inViewTimeoutInstance;!t&&r&&(_(r),this._state.inViewTimeoutInstance=null,this.
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: alised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function l(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.crea
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 72 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 76 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 72 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 69 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 Data Ascii: (n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,n){return r&&e(t.prototype,r),n&&e(t,n),t}}(),v=function e(t,r,n){null===t&&(t=Function.prototype);var i=Object.getOwnPropertyDescriptor(t,r);if(void 0===i){var a=Object.getPrototypeOf(
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 28 30 2c 28 66 7c 7c 69 28 29 29 2e 67 65 74 52 61 70 69 64 49 6e 73 74 61 6e 63 65 29 28 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6d 28 65 29 2c 63 3d 6c 2e 69 64 3b 72 65 74 75 72 6e 20 73 2e 69 73 4d 6f 64 75 6c 65 54 72 61 63 6b 65 64 28 63 29 26 26 73 2e 72 65 6d 6f 76 65 4d 6f 64 75 6c 65 28 63 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 72 61 70 69 64 2d 74 72 61 63 6b 65 64 22 29 2c 21 30 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 72 6f Data Ascii: (0,(f\|\|i()).getRapidInstance)();if(!s)return!1;var l=m(e),c=l.id;return s.isModuleTracked(c)&&s.removeModule(c),e.classList.remove("wafer-rapid-tracked"),!0},T=function(e){function t(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r=e.ro
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 3a 74 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6d 61 70 4f 66 66 73 65 74 28 29 2c 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 73 79 6e 63 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e Data Ascii: rollDirection:t})}},{key:"handleResize",value:function(){this._mapOffset(),this._validateWithThrottle()}},{key:"sync",value:function(e){if(v(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"sync",this).call(this,e),e){var r=this._state.elementIn
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 74 28 72 2c 65 29 2c 72 2e 6e 6f 64 65 49 6e 56 69 65 77 28 29 7d 65 6c 73 65 20 72 2e 6e 6f 64 65 4f 75 74 4f 66 56 69 65 77 28 29 7d 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 76 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 64 65 73 74 72 6f 79 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 6e 3d 72 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 69 3d 72 2e 65 6c 65 6d 65 6e 74 57 69 74 68 49 6e 74 65 6e 74 69 6f 6e 61 6c 56 Data Ascii: t(r,e),r.nodeInView()}else r.nodeOutOfView()}})}}},{key:"destroy",value:function(e){if(!e)return void v(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"destroy",this).call(this);var r=this._state,n=r.elementInstances,i=r.elementWithIntentionalV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49798	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	583	OUT	GET /cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: y/MffzZJvP9+OPygPJcnHXUkZMXGVbA/26q3BGOn2Qs1KI0WzbqMyXDSus3zDcCaMvMNYUCuNlI= x-amz-request-id: BVABD1XVXFVBWBNT Date: Wed, 28 Feb 2024 23:47:46 GMT Last-Modified: Thu, 08 Dec 2022 13:22:59 GMT ETag: "bb980c649e36b9383b349df5028c41e0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 59528 Referrer-Policy: no-referrer-when-downgrade Age: 344326 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 e8 88 00 12 00 00 00 01 fe 64 00 00 e8 1e 00 03 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 3e 1b f2 74 1c 9e 06 06 60 3f 53 54 41 54 5e 00 87 76 08 81 7c 09 9f 14 11 10 0a 85 a5 18 84 cc 08 01 36 02 24 03 a3 4e 0b 91 6a 00 04 20 05 8b 46 07 ce 6a 0c 85 1f 5b aa c7 71 06 dd b6 5d d4 22 48 77 82 22 aa bf d6 ba 23 f1 02 53 87 50 8d 5b 7f b7 89 b0 e9 96 06 7f a7 2e ac 60 b7 05 83 ee 08 39 84 f6 a9 37 fb ff ff ff 37 24 15 19 b3 e9 20 6d 37 00 06 43 c4 eb f5 fe 57 a8 99 99 23 69 12 ee cc 12 12 1e 56 32 58 c9 39 d0 c4 06 73 e2 18 e6 a6 85 cb 34 87 2c 50 d7 6d 8e 69 95 b6 27 10 2e 70 b8 4a 76 76 95 c3 55 d3 b6 14 f6 e6 ac c3 6d 83 93 d1 5a 6b 75 56 1c 36 4b 76 7e a9 a4 4a f5 2e 0b 6f a7 3c 42 fb 96 67 21 Data Ascii: wOF2dB>t`?STAT^v\|6$Nj Fj[q]"Hw"#SP[.`977$ m7CW#iV2X9s4,Pmi'.pJvvUmZkuV6Kv~J.o<Bg!
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 1e a8 ce c4 8f 66 7d b3 49 bd 05 3a d5 1c 69 ce c9 5f 63 58 ef 98 aa 70 4c bd de ab 6b 10 93 e1 fc c8 15 86 cb 0b 10 12 0b 12 1e f8 ae a6 f3 df 6b 3c 1c 1d 0c 00 af 6b 0f 5d 0c 97 ac 16 30 e2 2c e0 e3 46 88 20 e4 d0 c2 f3 af 05 54 67 27 3a 78 be 74 65 b1 41 f3 8d 3d 86 7e c6 56 b4 99 cb 49 88 31 60 14 b9 5a fd dd c1 94 fa 1b 35 26 cd 44 5a e3 71 10 69 f7 88 a3 2d dd 31 d1 af 3d cb ea 4e dc 68 34 a4 24 77 c9 87 20 7c 6c 96 62 28 ea 7f a9 9a 2d b1 6f ff 05 2c 39 23 10 82 ef e8 10 42 d1 81 aa 5c c2 9d ab f2 b4 fb 57 81 bb 5f 89 80 13 e4 90 03 e5 b4 ba 8a e7 a8 d2 6e 3a 97 a9 72 ed b2 b2 cf bf 99 96 9f be ea ea 02 0a 18 60 44 ac e5 c8 02 2b 51 02 65 67 a4 20 01 21 6b 22 29 5c 29 93 22 29 aa ba ef bd 7a 55 ef 55 a1 bb ab 1a ae 1b 20 80 02 b0 24 80 25 b7 01 10 Data Ascii: f}I:i_cXpLkk<k]0,F Tg':xteA=~VI1`Z5&DZqi-1=Nh4$w \|lb(-o,9#B\W_n:r`D+Qeg !k")\)")zUU $%
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 9b 61 e4 44 df 08 3b cc 22 37 43 02 47 41 d5 b9 9a 79 30 79 65 12 f7 5b d3 64 f7 c1 12 4f 65 95 cd 64 01 03 f8 52 ee 00 33 58 64 5a 26 9c 68 8d ae 20 5e 57 e0 b6 11 38 0f 00 0f aa 63 a1 c9 e1 99 9c 8d e2 f0 ba 22 59 46 20 b8 51 51 75 ac f0 45 f6 1e 5a a2 af 7d ee e2 60 24 ce 9b 7f b6 cd f6 14 72 f1 af b0 ff c6 c1 21 8d 4b 24 7c d7 d2 2b 26 c3 6c 98 5b 6d 3e 1d 86 4b 4b 75 1d 71 6a 98 0a ef 93 f1 c7 6a c0 61 e1 97 26 3f dc 5c 3a 4a af 64 e1 14 14 49 4c 05 f3 20 d0 1c e0 1b 03 82 97 58 c8 bd 4f 8d 04 1b 05 7f df 72 95 d1 68 c6 08 bd cd 5f 28 d5 0d 7d ea 8a 32 50 de 78 65 57 51 67 48 bb 1e 62 33 4b 17 ba 83 b1 98 89 58 a3 2b 16 62 71 f0 f9 26 e5 2e 32 12 90 6d cd 55 ec 64 f1 d7 a8 bb 1e 45 f4 2f ca db f7 55 3d 41 75 47 e5 ca b7 03 db db 40 7e fb 69 25 07 d1 Data Ascii: aD;"7CGAy0ye[dOedR3XdZ&h ^W8c"YF QQuEZ}`$r!K$\|+&l[m>KKuqjja&?\:JdIL XOrh_(}2PxeWQgHb3KX+bq&.2mUdE/U=AuG@~i%
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: f3 14 86 69 c6 32 ad dc 9e 4e 1e cc 67 bc 76 1c f7 fc 82 77 fa fc fc 22 0f cb ff 0f 1f 84 a4 44 12 97 42 27 39 85 3d c5 4d c9 b7 73 1e af b9 fd f1 ed a7 33 7c 54 0d ab 63 49 0e eb bd 8a 90 25 6b 25 eb d6 28 ca b5 0b f5 d2 70 70 1d e7 cc 32 62 5b f6 ab 9f 5f 57 8a eb 36 35 58 b9 f0 a9 f0 15 3c ac b7 cb 03 be ad df 7e 5a 48 41 28 12 18 54 22 61 b5 44 a7 26 c0 48 4d f5 68 6a 76 67 1b 67 47 27 85 5a ee 02 1c af 83 d4 0a 9f 69 11 bc f4 07 ea bd 7f 1f 45 2e a2 b5 54 64 d7 4a c1 46 d9 c6 1e 19 47 2b 87 d1 e9 41 f4 62 f2 17 e5 5a ed 52 b9 b9 d3 21 f7 96 8e 84 eb 7c 22 44 6d b8 bc ef 3f c9 0f f6 7f 65 76 d8 c0 a6 1e 80 1b 82 96 06 63 36 ca 34 8b 73 8f 28 4e 43 4e 62 69 b9 55 25 f5 5b 40 9b 56 d3 ad 4d 0c 6e 31 8b f6 72 bf 66 0f 6f fe fe ee cd 46 ec d2 76 0c df 5f Data Ascii: i2Ngvw"DB'9=Ms3\|TcI%k%(pp2b[_W65X<~ZHA(T"aD&HMhjvggG'ZiE.TdJFG+AbZR!\|"Dm?evc64s(NCNbiU%[@VMn1rfoFv_
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 20 07 d5 90 5d a7 b8 7e f9 32 e6 fb 6e a3 b1 10 1b 33 f5 4f 55 14 80 8c 9f a3 82 c5 b5 30 48 bf c8 ef 6a ff 68 68 36 2b cb f5 5b 49 f0 c2 f9 6e 6d 8b 9b bf f8 c2 43 da 60 3d b1 66 fc 26 5f bc 6f 66 04 e1 1b e1 c1 4f fd d1 21 ce 10 d6 86 8f ee 22 86 05 f8 30 b6 88 6b 1e 9b 79 32 7a ab ce e4 da aa 07 5a 75 01 52 1d 3e 74 b9 23 ab 0b 74 5f 38 5b 69 e1 eb 96 3c 58 fb 6f 66 86 65 5d 97 4c 19 49 4e cd 13 59 35 0a 48 7d 8e e3 2c 80 5d 83 4e d4 67 a5 1e 6c c9 3d a5 1a 6a e7 8c 33 c0 2d df 2c b4 0d ce 33 fc 88 01 48 73 c4 86 d3 f0 57 e1 93 91 f4 c7 8f de 0a 5c 16 80 1e da cf a4 fe da 50 39 dd 1d 61 96 35 3d bc f9 70 4c db da f7 3b 12 ac 4c 9b b1 3a 52 c3 f4 27 ac ba 74 ec d3 1c d9 f3 79 f9 20 a2 32 08 7c a3 c3 9c d2 57 79 f3 c7 6b 52 bc 19 86 ba 38 c3 a3 3d 51 67 Data Ascii: ]~2n3OU0Hjhh6+[InmC`=f&_ofO!"0ky2zZuR>t#t_8[i<Xofe]LINY5H},]Ngl=j3-,3HsW\P9a5=pL;L:R'ty 2\|WykR8=Qg
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: b1 a7 db 70 13 b7 8c 7b b1 b8 87 5a a9 55 59 a4 2c 80 11 19 c9 a0 20 94 fa 0a f5 15 c5 7f b6 cd 89 1b 7d d8 88 42 b2 5a dd e7 3f 7e e4 8f 80 0c b2 fb c2 73 aa 3b 50 b8 ed 24 bd 3e 30 fc 10 bf ec 38 c2 20 02 04 6e cc 02 49 26 00 15 ac 5b 02 09 b3 73 eb bf f3 1f c6 e6 99 13 5b 0a cf a9 06 b1 ae 79 2c db 5e 05 5a 90 8a 16 a4 3e af b4 01 88 33 28 2a f3 0d c3 99 86 d1 5c 86 47 ee 59 6d c0 b6 a4 7b be 49 6d 30 5c 83 ad d9 d1 71 5c b4 23 6a dd e1 59 45 99 e1 a9 cd bb a6 88 3b 9c 82 12 d6 ac 80 e6 b1 e6 88 27 77 8d 82 9c 79 97 59 04 3e 4a 9e 74 46 de 61 3a e7 c6 18 9c 31 06 67 38 4f 63 b6 ed b1 5e 00 ce 18 c3 58 8f 5f ca 1d 44 3e c6 67 9a 90 c1 50 3d 5e 50 72 7c be 81 0b 6e 8b 4c 0b 39 78 75 f5 4d 2e cb 96 1c 22 d4 f4 75 c7 88 dc 4c 50 2e 66 49 c9 c9 30 7d a5 da Data Ascii: p{ZUY, }BZ?~s;P$>08 nI&[s[y,^Z>3(*\GYm{Im0\q\#jYE;'wyY>JtFa:1g8Oc^X_D>gP=^Pr\|nL9xuM."uLP.fI0}
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 96 b4 a5 23 33 99 cb 42 96 82 0a 26 2b 59 cb 46 b6 8d 44 a4 f2 3d c9 5e 70 21 e4 20 47 39 c9 59 2e 72 15 12 62 9f ea 5d 4b de ff dd 3a e1 a4 40 05 2b 4c 6e 72 97 87 50 f2 94 97 bc e5 23 5f f9 29 bc d3 bb 84 40 a2 d0 18 2c 6e f0 99 e0 87 c1 64 b1 39 5c 1e 5f 20 12 4b e4 0a a5 4a ad d1 1a fc ca 84 c3 f2 ad 10 45 a0 f6 e5 cf 72 38 19 65 2d 5d 27 cd 00 2e 90 69 fc 7b 5c a0 63 13 92 52 d1 33 aa 54 a7 59 27 12 4f b5 e1 50 fe f2 07 9b 5a 1b 30 24 06 4f a2 d4 0f 79 66 f3 dd 6b 6d 30 b4 bd 97 2f e6 65 f5 b7 ed 15 55 73 ab 39 66 67 4d f0 17 1f 16 18 21 b0 61 03 39 41 81 57 0e 0d de 9a 3c 8c 04 a7 c1 b0 fb 51 13 30 2a bf 1d e7 e6 e5 17 14 c6 14 53 90 a2 94 a4 0c 02 d9 a5 2d 1d 7b 8d 03 63 49 92 d2 3a 64 43 77 93 65 60 64 91 6c 81 a3 b4 40 a6 0d 70 98 48 fe 98 70 a4 Data Ascii: #3B&+YFD=^p! G9Y.rb]K:@+LnrP#_)@,nd9\_ KJEr8e-]'.i{\cR3TY'OPZ0$Oyfkm0/eUs9fgM!a9AW<Q0*S-{cI:dCwe`dl@pHp
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 19 fe d6 cb e0 b1 b0 7b 56 6c 74 17 1e bf 57 0f ec b1 18 20 cb d4 d9 e3 74 ec 64 2f 57 c4 72 b6 cc 5e 67 ea 75 b6 63 80 02 86 38 f8 18 f4 1f 9f 4b b4 14 4b 43 9f 88 ff 41 88 2d 76 b6 71 6d a6 6f b8 7f 1f de 3e 8e 30 56 b9 14 37 28 60 fb 99 50 23 dd ce db 71 ab c3 a7 ae 00 d0 87 8f f0 10 e8 7f f7 79 e3 f3 fa e7 b5 2f a9 68 c7 2c 1f bc b9 be f1 ba 7d de 00 f4 3f 03 f4 df 7d ae f6 37 5f 94 18 b9 85 28 f3 f7 b7 64 ff 76 37 3b fe 9f ff a3 fe b3 fa e7 b3 ff 80 9b 1b 4e f4 ae 3f 01 13 18 41 07 32 90 82 00 f8 c0 28 9e 01 00 5f fc 50 64 37 f0 c5 2b d7 f5 3f 5a c0 67 2f 5d 67 bc 7c 4e 3f f8 fe fc e2 c3 8b 97 2f 26 b3 97 6b 5e d7 5c af b9 dc 28 fc b6 bb 66 fd a2 9f ff 98 aa a9 14 7d 02 d6 dd c4 0c ff dc 7f c6 9e 7b cf e8 33 f2 dc 15 d4 6d 40 3c ce ef 93 64 dc cf 82 Data Ascii: {VltW td/Wr^guc8KKCA-vqmo>0V7(`P#qy/h,}?}7_(dv7;N?A2(_Pd7+?Zg/]g\|N?/&k^\(f}{3m@<d
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 7a 8e c1 4d 8d db de 96 37 ca e0 ea 24 2a e1 fb fc 4e 1b 6a 43 32 f4 f8 52 72 8d cc 30 49 21 77 f6 45 9b bc 20 b9 ad 36 1e cc 0c 52 91 36 1b 07 99 19 e5 72 dc b5 dd 51 73 ba 10 c7 9d 01 e9 b9 54 c0 0d 53 ea 27 2f f5 90 91 bc d1 b3 c6 4b 74 cc 04 0b 26 d7 9f 2d a5 34 4b dc 82 87 33 19 cb 93 a0 3c 33 1a 72 dc 89 86 0e 6c 4e c8 2a cf 52 70 05 c3 be dc 04 30 e6 00 5b a4 4c cb 26 e6 37 6f 20 5c 46 e0 06 c2 8c bf 70 b3 e2 be e5 ec 00 b5 34 96 ab 00 ed 6c 89 2f 8c 41 4f c7 75 9f 8d 67 6d 03 36 02 b4 38 27 d8 be df fb 4e d2 82 30 9f 5a 70 7d 2e ab 4b 75 46 a6 af 61 3e 56 82 fc 6e c3 2d 66 43 31 0d 68 9d f3 99 3e 01 00 39 46 79 ff 00 58 25 33 d0 b4 2d 7d 3d c7 e0 8e 0d f3 55 9d 61 a8 78 cf 56 6c f5 cd e9 04 18 75 18 2e 57 32 21 dc 7d 70 1b a6 0d 77 03 98 79 8c a3 Data Ascii: zM7$NjC2Rr0I!wE 6R6rQsTS'/Kt&-4K3<3rlNRp0[L&7o \Fp4l/AOugm68'N0Zp}.KuFa>Vn-fC1h>9FyX%3-}=UaxVlu.W2!}pwy
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 7c ea 5b 7c 27 a5 ac 95 97 f9 d7 f8 fb d8 b8 10 f1 eb 70 fd 35 3b 20 0c cc f7 e4 1f 04 39 36 ab 72 2c 07 ae d5 b2 7b 66 67 4f 6c 20 9e b0 f6 d1 c3 45 15 8d a5 ff c1 0b f2 b8 35 c6 9c a7 61 52 bf d7 6c a9 9a a5 90 eb 3c 86 28 4f f9 5f eb ef e9 bd 4f 86 12 11 a9 c3 10 6a 66 7f 24 92 98 52 2f b4 fc e9 91 17 07 b6 e2 66 78 d0 25 4f e9 17 03 f3 af ff 70 fd ba 14 d0 78 f2 a8 43 27 d6 13 63 60 8b a8 7c ea d2 70 41 62 be 0b 21 24 66 1f 9e 5b 10 ab 89 80 e1 26 2f d4 41 b4 a2 93 62 80 80 b3 01 8d c1 c1 90 7f ed e0 a5 bf 37 d8 1f dc b0 75 72 70 80 c1 40 34 6c f1 8f 04 33 b1 de 1a 0d bd 07 05 b7 a8 31 38 ab 8b f3 fc 41 45 77 07 6b 45 6a 20 db 4d 91 5e 6d 55 ed 83 c7 4c 18 31 d1 35 07 d7 7c 91 fc 68 55 1e e8 fa 4c e7 25 e1 78 3c fa 42 f4 dd 01 71 8e 6b 33 0c 0b e1 18 Data Ascii: \|[\|'p5; 96r,{fgOl E5aRl<(O_Ojf$R/fx%OpxC'c`\|pAb!$f[&/Ab7urp@4l318AEwkEj M^mUL15\|hUL%x<Bqk3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49797	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	580	OUT	GET /cv/apiv2/aolfp/fonts/opensans/Open_Sans-Bold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: MecvoPwIDNkz1CUte3lCdza9IP1g/vGldDg33XyRay0NKAgbCbFBlrmPKcoF5HbCbR6GQMZlYts= x-amz-request-id: SZBTVJ9F7YM7NJMG Date: Thu, 01 Feb 2024 19:56:57 GMT Last-Modified: Thu, 08 Dec 2022 13:22:59 GMT ETag: "e3bb9f53f3ae5587004d7afe0a715a9d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 57488 Referrer-Policy: no-referrer-when-downgrade Age: 2690975 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 e0 90 00 12 00 00 00 01 fe 60 00 00 e0 25 00 03 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 3e 1b ef 20 1c 9e 06 06 60 3f 53 54 41 54 5a 00 87 76 08 81 7c 09 9f 14 11 10 0a 85 a9 04 84 ca 2f 01 36 02 24 03 a3 4e 0b 91 6a 00 04 20 05 8b 2e 07 ce 6a 0c 85 1f 5b e1 c4 91 05 e5 ee 6f c0 40 09 74 de b6 69 7a 4a a8 98 21 37 44 27 4b 0f e5 6e aa ce 4b 8e 2b 33 08 d3 12 65 db a7 42 81 f3 00 3f 3a ab b7 9f fd ff ff ff ff ff ae 64 31 c6 bc 7f e8 1f 00 31 cb 54 2d 53 d5 da 5a db 36 08 55 e7 83 77 88 49 8b 80 ec 42 2a 8f 11 f1 58 9d 44 d2 39 b8 5c 2b f1 67 c5 05 cd 11 6d 9b 3b f4 2d 6a 4f 5c 61 d0 04 94 a1 35 f3 87 33 90 a1 21 cd f5 96 73 cc 2d 32 9f 8c 55 6d 8e ec 9d 9f 66 46 a1 cb 81 ac ba ed bd 2f b1 40 b9 Data Ascii: wOF2`%B> `?STATZv\|/6$Nj .j[o@tizJ!7D'KnK+3eB?:d11T-SZ6UwIB*XD9\+gm;-jO\a53!s-2UmfF/@
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 44 75 4a 86 04 c8 71 98 26 fe ba dd 30 66 d9 af 38 ef 79 5c 73 96 e5 f5 fa 24 6a 98 fe cf 94 f5 6f 17 04 be 69 56 2f 08 80 20 09 b2 d9 66 fc cd ce ba b3 e6 cb 9a 20 51 a9 72 45 ca 55 f5 e4 ee 64 3b 48 64 6c 92 2a fd e1 29 ab fe 5e e7 fb 36 73 a6 f5 dd e3 14 f1 25 a2 88 59 4c 46 42 c4 ec 80 f9 fa af b9 ae 44 7e e8 a3 48 78 58 52 1c ff 56 00 04 47 3a ed 7f 66 57 60 ef ce 48 71 fc 91 2b 82 a2 fb 45 27 c9 94 9c 0f 6c be 07 18 4b d3 c8 ff 75 f6 bb 0e 08 72 c0 10 28 00 81 f8 18 d2 69 ae 77 51 40 79 d4 05 95 2f 91 b5 25 3f 4c 45 9e 70 18 71 94 64 39 b1 20 64 08 f1 03 4b 71 c1 50 7a 44 70 fc 8c ce b3 3f 45 a6 91 60 1a ba 8d 8c 53 3b 6c 0b 0f 73 79 fe f7 93 d5 1d b6 07 fb 6d 0b 6d 3f 94 38 b0 fc 70 83 60 95 2e c3 a2 a5 18 44 15 ce 5f 0b a8 de f6 ff 5b a9 bd e9 7b Data Ascii: DuJq&0f8y\s$joiV/ f QrEUd;Hdl*)^6s%YLFBD~HxXRVG:fW`Hq+E'lKur(iwQ@y/%?LEpqd9 dKqPzDp?E`S;lsymm?8p`.D_[{
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 8e a6 f7 42 80 2a 2c 5b e8 60 74 b8 71 4d 7f aa 0f 81 d8 ec 78 8f 20 7a 03 30 96 fd 0b 84 25 5c a8 69 0f 12 5a 2e 8b 2c b3 ca 2d df ec 0d f5 2f f9 fb 79 9f f6 59 23 0d fd cc 2a ed bb be ef c7 fb d7 5d 1c b9 b0 44 a5 5f 06 64 50 36 ca 16 39 ea 4a f7 d5 2d f2 bf c9 36 39 9b 91 f5 b9 19 5b 9c 6b 7f 65 ea 4a d7 ba d5 42 9f e8 73 7d a1 ea aa 2d 4b f3 36 dc 0f 35 ef bb a8 2a 0b ac 92 b5 1f 00 98 3f e7 3f 84 3f 4f 50 e4 ba 05 23 bf 28 ed ae df 86 0c 5a 7b 10 d7 54 17 4a 1e 00 e0 51 88 81 7b 00 e0 38 ff 04 af 88 27 f7 dc 0d 2b 19 af 99 93 e8 8c 44 88 1e 6b 62 de 5b 30 62 44 82 a4 5c 87 7e 91 f3 b0 8a 41 4f 58 47 e3 1b 0c 7f 42 20 47 3a d2 ba 1e f7 76 65 23 63 d1 ba 82 07 98 e0 1b c8 4c 03 73 f7 d1 36 16 66 9d eb 9f 23 c8 8a ec c5 4a 02 0a b1 06 08 20 40 64 4b 1e Data Ascii: B,[`tqMx z0%\iZ.,-/yY#]D_dP69J-69[keJBs}-K65*???OP#(Z{TJQ{8'+Dkb[0bD\~AOXGB G:ve#cLs6f#J @dK
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 53 2f 8d dc 1e 16 05 17 73 85 d7 e5 88 9f d6 67 e4 03 54 9c 03 9a ad 02 83 53 60 e9 03 70 71 33 8d 8f dd e9 8c 74 06 6b b7 8e 75 02 ff b3 6e 51 98 ec c5 56 9e d3 a5 9f ff e9 18 4e 7a de 92 7e 62 83 73 9f 69 50 08 75 dc 5c 75 d4 db bf f9 fa 7d 1a 7f 37 d1 86 8c cf 37 73 6f 0b e3 05 2b ea b7 1b 68 2f b0 f1 8b ba 1a fe 33 1b 66 b7 d9 21 af 0a 99 6d ad 36 cc aa 35 3a 61 b7 b6 e1 fc c5 c7 ec d6 36 d1 94 79 60 99 14 70 58 72 9c 48 e8 ea 25 18 e0 46 d2 4f 12 b6 cb fe ec 14 af c5 08 d8 a1 3e 72 47 45 00 ed 38 a4 3c a6 cf dc f9 40 e9 ae f2 0d bb 15 a9 ae dd bf 8b ca f5 5a b6 1f 2b 3d ec d5 e8 7d dc 76 d3 ee 89 4f 07 78 b5 95 dd fb fd 65 a9 66 3b 08 5c 10 0c 33 b1 86 23 ae e3 14 e6 c9 2b 38 bd 3c 5b 21 5e 53 3e 48 7c 49 d3 24 a8 90 45 09 bf 3b 67 0c 24 08 53 67 4b Data Ascii: S/sgTS`pq3tkunQVNz~bsiPu\u}77so+h/3f!m65:a6y`pXrH%FO>rGE8<@Z+=}vOxef;\3#+8<[!^S>H\|I$E;g$SgK
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 86 50 41 3c a1 d7 47 58 c9 91 56 26 91 75 6c d8 65 47 22 ab 13 44 58 5c 2d 64 c4 43 16 8e 2a 13 15 f0 44 1a 7e cf c0 53 db 45 9f d6 c2 45 6e 65 fc ce 81 24 fa 30 df cc 0e 4c 99 15 31 79 12 93 72 ed 85 df 94 a2 57 c2 93 3a 3b fd 19 87 29 93 05 89 72 8b bc c7 41 6f 48 9e 4e a5 73 a8 3c a1 98 79 4a 6c 38 87 59 b9 17 54 83 da f2 dd 69 23 27 33 49 db b4 5d 14 8d 9f 6e af 98 35 77 39 8a 6d 28 37 7f 70 a1 6d 48 9c 70 6e 3f ba c6 0b 11 b4 61 45 d4 5b de 2f e1 0a fc e9 28 5e 9a 3a 34 53 af 13 bb 6d 0d 17 7a 0d 14 9e cf b0 3b 1c 9f 9e 65 6f e6 89 16 39 39 0c c5 f0 24 51 61 6e 9f 07 7c 54 1c cd 01 7b a6 8d c4 57 4a 02 67 c6 e9 cc 7a c9 db 63 e0 cb ce 5d 08 ac 5b d5 f9 91 57 ab ed 34 da 00 66 f1 a0 8e 5b be d0 78 a8 9b 45 1f 71 22 79 27 97 d3 c2 b4 05 e8 b5 34 e5 48 Data Ascii: PA<GXV&uleG"DX\-dC*D~SEEne$0L1yrW:;)rAoHNs<yJl8YTi#'3I]n5w9m(7pmHpn?aE[/(^:4Smz;eo99$Qan\|T{WJgzc][W4f[xEq"y'4H
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 11 87 64 3a b5 ac 2a a2 48 06 af 78 43 c6 62 9f 12 93 59 e4 10 e9 36 14 a0 f3 8c f7 18 46 1a 73 30 01 26 40 c4 e3 a0 25 46 29 6c d4 76 9d 15 28 e2 c8 60 11 07 83 2d de 39 28 e2 60 50 06 55 1c 15 e7 60 cf c1 ea 76 d7 89 f6 32 59 67 e8 36 13 80 97 78 9f b1 70 db ed fb d2 ed f4 57 1b 0c 21 22 f4 d9 7b 8b 10 ed 8d e0 ea b8 33 a9 02 a4 95 8b 6d d9 f9 61 fa 5e 36 69 ee 3b fb cd 60 e0 48 ed e0 82 4b 0d a0 19 d8 0e 71 6f f0 14 a4 66 9c 61 a7 33 0e 0c 08 76 49 5f 57 f0 b2 9f 2e 7f 7b 0c 6c 40 c5 17 1b 07 9d 4b ad 33 14 9b f4 7a 0e de 39 66 42 7b 06 68 ab 76 8a 66 6f f8 0d 3d f6 8d 68 c4 da 10 c2 1c b4 e2 7b eb 11 d1 51 22 82 24 e3 6c e9 2e 65 47 bf 0f 23 9c b6 c3 5f 75 00 5b 2e 5f 6a b4 69 d8 0c 1c f3 06 69 bc ae e7 27 f9 6f ec 0f 75 c9 f9 59 9a 63 29 48 40 80 e8 Data Ascii: d:*HxCbY6Fs0&@%F)lv(`-9(`PU`v2Yg6xpW!"{3ma^6i;`HKqofa3vI_W.{l@K3z9fB{hvfo=h{Q"$l.eG#_u[._jii'ouYc)H@
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 0d 62 0a 7e e3 40 41 6d ec 44 33 6b a1 99 5e ae fe 02 f9 49 27 16 55 f3 59 b3 a7 1d 9b e0 3f f3 65 01 2b 04 e6 70 07 33 82 39 de 62 69 f0 d6 64 b5 12 ec 06 83 dd 5b 35 3f a1 8e ef 8a 08 91 7a e9 ad 8f be a2 f4 d3 1f 02 c9 8b 66 1f 62 09 71 23 ae 39 bd 0a 0d a2 4d 63 7d 41 e6 3c 64 01 cf 83 76 12 86 10 df 48 d5 88 31 c1 b0 e1 6f 06 5e a4 7e 06 43 cd 30 cf 32 eb 43 6d 1b 3d 75 bd 10 68 94 e3 d6 dc e6 41 a0 fc c3 af 18 11 9e 9f 9f 9c 1c 4d aa d3 77 b8 06 66 78 10 56 20 23 95 b9 a0 81 c7 5f d2 2c 90 33 ad d1 0c 9a 45 73 68 1e 2d a0 45 b4 84 94 ed 0a 8b 1f ef 6f 3e 7c 5c 6f 97 96 fe 10 b6 44 2b 68 15 ad a1 75 7e 43 8b a4 65 ca a1 81 4f 74 e4 93 22 70 08 20 90 1f f3 ee e6 86 fc 3f 13 92 f8 88 08 15 64 7b 7b e9 b3 a5 df ad ef a4 a3 a0 04 c7 b1 37 f3 c4 6d 13 e1 Data Ascii: b~@AmD3k^I'UY?e+p39bid[5?zfbq#9Mc}A<dvH1o^~C02Cm=uhAMwfxV #_,3Esh-Eo>\|\oD+hu~CeOt"p ?d{{7m
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: ad ff 66 1e 3f 3c 7e 56 46 e1 9f ed 25 5f 25 de a2 47 79 a4 1e 4f ab 52 d5 c1 21 15 1a ad 4e 57 23 ca 43 b9 4c 85 a6 94 8f f2 a3 65 08 74 0b 47 9c af f9 47 5b ed b4 d6 26 96 d0 66 54 36 d2 c8 1c a0 d9 21 fc fc e4 56 36 a0 76 13 ec 7f 2e c3 bf ae 22 d5 84 30 0e 09 20 7b 25 bc e9 d2 77 69 44 bc 64 b7 7c 0d e0 bd 3d 53 3b da d2 c6 ef a3 2c 65 d9 b0 dd c9 f5 cf 3b e9 33 27 9f 21 f3 ea d8 30 58 87 0e 73 d6 f4 f9 ae 4f 4d a8 74 aa 63 ce 92 3d e7 48 65 a7 11 b3 96 93 82 dd d8 ae 93 33 85 2d 07 24 c5 3a da 88 a0 73 c7 42 77 a5 7e d0 3a d6 ed 3b d6 6e c0 4c 1d 4a 69 d1 6d b8 2e df d4 48 97 7e 93 fd de 47 be bb 4a 13 3d c6 eb 52 4b 4b f6 af db 84 39 db bb f5 b9 00 20 b1 dd 16 8e dc 8e a5 8f 0c 0f 0d b6 34 37 35 36 d4 d7 d5 d6 54 57 55 56 94 6b cb 4a 4b 8a 8b 34 85 Data Ascii: f?<~VF%_%GyOR!NW#CLetGG[&fT6!V6v."0 {%wiDd\|=S;,e;3'!0XsOMtc=He3-$:sBw~:;nLJim.H~GJ=RKK9 4756TWUVkJK4
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 7c 85 bc a9 f6 85 a8 1c f0 f9 fa 0f 11 49 c5 52 ae 34 0f b6 a9 5a 81 2b 54 ea 49 2b 92 1c d1 d9 33 16 cc 1a 3e 26 c3 b5 d8 f3 c1 17 68 8c ec 24 f0 ce 6b 0f 35 a8 f1 69 30 21 fd f0 2d 12 66 7d 8b 7b 21 68 0f 4e 8f 5c e4 e7 0a 9d b3 3b 24 f7 0c 02 97 26 07 d5 4a 2b 01 66 26 57 c9 19 ac 16 ae d7 d7 30 c0 a0 78 4a 14 d4 40 ff 58 9f ca 57 2a 34 17 86 71 3d ab 24 e8 02 b9 42 ce ee a0 86 67 78 09 83 c5 c0 fc 18 91 3c e6 c8 61 72 cc 5b 09 78 7b 55 69 40 b4 cc da e1 72 72 a2 e1 5c e5 cc 18 36 fb da 43 79 71 24 8c 5b 39 b8 2d ef 47 44 bd 61 66 00 8f 9c 2e ba ac ba 41 fb a3 06 4d 0a 88 fb c5 cb a4 8a 40 94 03 eb a2 ab e1 5f 19 85 8e ef 5e 90 dc fc c4 14 56 a8 29 11 55 94 a7 27 e9 41 3e f2 61 b5 4b 57 8f 1d b0 52 3f f4 03 10 32 57 83 5b e5 95 b4 b4 60 93 db 2d ef 78 Data Ascii: \|IR4Z+TI+3>&h$k5i0!-f}{!hN\;$&J+f&W0xJ@XW*4q=$Bgx<ar[x{Ui@rr\6Cyq$[9-GDaf.AM@_^V)U'A>aKWR?2W[`-x
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 39 02 ba 54 6b b3 d5 a5 89 44 87 68 b0 3f 75 77 b2 c2 51 2f c9 9f 23 a0 87 82 46 8c e4 01 e4 a5 d6 1a c0 62 a1 28 58 4b 44 22 76 e6 71 35 e7 de da c9 be bd 37 33 4d fe 5d f8 a3 17 7d 09 b6 b4 81 cb f6 e3 ee 78 91 49 26 18 e9 44 78 5f d4 18 48 70 46 42 12 e4 b1 39 2b 0f 2e 30 2f ec 14 3e 44 55 33 84 28 2c c6 8f b4 ac 99 34 6f 6b 35 7f d8 6d 39 73 ec d2 6b b7 82 2a 01 c5 c5 69 05 0b 08 6d 33 4d 94 c3 5d 73 ff ee 6c 35 1f 65 22 83 2c 96 7c 9f 35 1d 74 3f 4b 6c 7e 5c 93 69 b8 38 01 e2 19 18 69 41 4e 43 f1 66 5a 1a 2c 78 5f fa 79 05 1c b3 a5 81 df 31 56 1d 58 db d9 6e 0f e5 79 4b 32 f1 e3 0a 0d 24 9d b0 79 3d 5e 1f a9 e2 7f 2a b1 b0 f4 c3 19 ab e0 c6 98 e7 5e e3 bf b1 fe b9 1b c9 54 93 52 32 c3 87 96 b2 b9 e2 92 cc ec ed c8 c6 5c f6 a5 58 4b aa 7e fb a8 b5 73 Data Ascii: 9TkDh?uwQ/#Fb(XKD"vq573M]}xI&Dx_HpFB9+.0/>DU3(,4ok5m9skim3M]sl5e",\|5t?Kl~\i8iANCfZ,x_y1VXnyK2$y=^^TR2\XK~s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49791	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	565	OUT	GET /caas-assets-production/assets/v1/utils.9111c432fb133fce.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	983	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1492070 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:31 GMT Etag: "9111c432fb133fce842e7e4cedff8354" Last-Modified: Thu, 15 Feb 2024 16:48:08 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/799A) Vary: Accept-Encoding x-amz-id-2: 1Iv9Zqjhs5Xp2wOeeBgqlAOtTomKQOrA4nSUdtIG96vKkZtRRlm6YkOqmYNRB0jL369JSh0CnpA= x-amz-replication-status: COMPLETED x-amz-request-id: 6K9WVVQWPT9M2AVG x-amz-server-side-encryption: AES256 x-amz-version-id: n4EBaCaYCOBjJY3G_hQQJr2AKjEpiaBK X-Cache: HIT Content-Length: 3809 Connection: close
2024-03-03 23:26:31 UTC	3809	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49799	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	579	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: WPlujYf8kD0826IdV15cg7UGHMWpaOfQWzd/6CzPAHP19UnObGUF+ZKe9fll027LKi7Gn/cmzyA= x-amz-request-id: 08NDVB6NSQE5K3MX Date: Fri, 02 Feb 2024 03:45:44 GMT Last-Modified: Wed, 25 Jan 2023 09:31:52 GMT ETag: "5f64ea58a43603ddab8b2e538701f6f8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 50492 Referrer-Policy: no-referrer-when-downgrade Age: 2662848 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c5 3c 00 0d 00 00 00 02 66 8c 00 00 c4 e2 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b a7 2c 1c cc 76 06 60 00 85 52 0a 87 cd 08 86 b3 2e 01 36 02 24 03 a1 0a 0b 90 48 00 04 20 05 8b 26 07 c5 15 5b 80 10 92 04 85 e3 ee 5e a9 42 b0 d1 6d 08 94 d7 d9 34 ab 02 3e eb 0d 9c db 34 24 df 49 e7 8d 95 eb d5 a0 31 54 23 de be a7 00 ce 83 80 74 fe f5 a5 b3 ff ff ff ff ff b3 93 89 8c e5 e5 0a 97 34 b5 00 00 4c 7c 7d b7 41 70 99 08 67 35 23 52 52 18 b9 d4 da 23 b3 2b 95 99 51 27 4f f4 0c 22 99 59 c6 17 c7 2c db 04 97 59 37 13 81 7d 6b b9 06 d9 62 62 ee 4e 8e 88 5c d1 d1 fb c4 27 73 92 ba 5e 7f bc e1 f1 1c ee e6 2a 7f d1 e8 ad 77 44 45 8e 53 e6 e7 cd 6b f9 54 3e 95 bf 37 56 21 fa 1c 5d b0 19 2a ed 10 9b Data Ascii: wOF2<f@,v`R.6$H &[^Bm4>4$I1T#t4L\|}Apg5#RR#+Q'O"Y,Y7}kbbN\'s^wDESkT>7V!]
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 80 94 12 dc 32 72 66 11 46 00 cd a0 29 32 80 06 94 18 19 aa 3a 92 33 6d bb 9c c7 38 8a cf 3b 96 03 4a 85 02 1c 7c 3e d2 1f 3c 1c b6 9f 23 68 21 a0 9d c2 51 01 65 fc 18 71 a6 41 50 e7 c3 09 0e c3 e1 74 ca 33 19 0e e7 ff b3 df ac 5c e4 5e f0 52 78 95 90 45 63 f1 89 4a fd e7 47 d2 bc 69 6d 2e 69 a3 8d b8 36 08 96 77 1e 3c 06 e6 69 10 d0 cc 07 e0 13 1c 4a 04 cb e3 a0 f3 d0 9e 2d c9 33 1d 8c 06 e6 fb 5f 55 73 25 2d 5f 4a ed 63 86 b1 b4 35 e3 bd 3d cb 60 7d 7c f0 4b 00 09 d9 54 71 42 c9 51 4c db d7 1a 7d a5 03 a4 ed 80 74 79 ba 2e a7 d5 3e 67 db 93 31 5b 96 31 d3 96 17 ff 51 d5 aa 35 2d cf 68 f7 62 2c 9a 6b 4a 8d 26 97 9d 0d 81 7a b6 40 d2 13 34 9e 4b 21 f0 e3 e3 83 00 08 f2 e4 b8 21 84 72 ab eb ae ee ae ae b6 2b cf be f6 d6 6c f7 c5 ee 0b 8a 94 1d 6b 1c d9 08 Data Ascii: 2rfF)2:3m8;J\|><#h!QeqAPt3\^RxEcJGim.i6w<iJ-3_Us%-_Jc5=`}\|KTqBQL}ty.>g1[1Q5-hb,kJ&z@4K!!r+lk
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 38 aa ce 4f f1 b6 4f 40 8b b5 a4 62 f3 63 db 94 cd 36 b1 95 09 ee f7 36 a5 e2 55 5a 36 36 1f 22 8b cb 2b 08 70 8e 79 f4 de 2b 8a bd 7f 94 3e 25 ed bd 6b c3 37 a9 41 03 21 96 1a fa 9a 17 68 65 9e 69 a6 e5 35 4e 0a 56 8a ca 8d 71 2b 27 a0 94 4f 70 f6 d6 df 6c 45 61 12 bf ca 9f c6 24 3c c8 8d 7c 13 63 f9 f4 62 e4 e2 82 2e b3 07 9b 3c 9f a0 15 5e a0 65 45 9b 7c ba 1e 4a f5 1a 40 21 2b eb 1e ed c5 c1 05 3e b3 6f d7 ae 93 b0 54 07 92 36 43 44 b6 e1 a8 fa 59 32 83 92 46 8a bf 50 13 16 9c 48 5c 01 d4 b8 81 45 38 8c 43 d8 87 4d 53 23 55 c0 ff c8 f3 98 18 49 64 b2 e4 c8 53 a0 42 83 1e 23 3a 24 13 33 8b 9d d2 3d 97 23 57 9e 7c 34 a5 aa d4 7a ad 4e 93 45 4b 56 ad d9 b2 c3 2e 3f f9 2d 69 60 08 01 a1 20 3e 62 8e 93 a6 48 93 16 1d a7 51 4c 2c ac 6c ec 1c 5c dc 18 5e 3e Data Ascii: 8OO@bc66UZ66"+py+>%k7A!hei5NVq+'OplEa$<\|cb.<^eE\|J@!+>oT6CDY2FPH\E8CMS#UIdSB#:$3=#W\|4zNEKV.?-i` >bHQL,l\^>
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 6f ab 53 de f9 e4 9b 5f 97 f2 ef c6 6b ba 6a 6a 15 49 34 d3 e6 f5 36 1a 26 58 e1 c0 8d 17 8e ee ba 38 49 c7 49 97 0c a1 f9 39 46 b0 b0 c0 8e 0b 0f 7e 78 42 44 88 91 40 86 ce ab bd 09 18 98 f5 7d 4e c7 f0 11 20 88 40 14 89 14 19 59 bf 91 df b6 6d 01 7e c1 39 2e 13 af 78 cd f7 f7 ff b4 1c 86 77 db 0a fc 4a 75 67 39 48 ec 76 09 bd 92 1f f7 6c 4c fa fb 54 76 45 57 77 37 18 9f ee e7 5c 27 bc fa 19 0d f0 ab f4 6b dd 21 a0 7c 4e 42 e4 73 12 21 ec 26 c6 33 fa 5d da b7 ab f3 fc 60 06 d5 1e de bf f8 0e 78 10 38 86 01 6e 1a a0 04 11 10 09 9c 22 fd aa ff 8e 11 b9 80 11 44 d0 3b e1 00 44 21 03 40 20 fa 55 ac ee f4 8b 3d 47 f9 eb af 7d 62 3d 46 93 c1 d3 08 ff 83 d4 86 5e ad e7 42 1f 3d 67 f5 84 1c e6 28 c7 62 a6 21 4a ba 36 a1 bf 3e 0c ff 99 ae 61 0d 1d 58 f7 de 88 0e Data Ascii: oS_kjjI46&X8II9F~xBD@}N @Ym~9.xwJug9HvlLTvEWw7\'k!\|NBs!&3]`x8n"D;D!@ U=G}b=F^B=g(b!J6>aX
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: f3 cb e9 77 f7 e5 e5 be 36 93 a6 cc 5a f0 25 22 d1 b8 6e f4 56 27 f2 1f 74 38 f0 71 38 52 46 86 ae 3e 17 bd d6 a0 59 87 83 08 1c 27 6b 9a d1 aa 51 1f cc d3 e8 5c d6 a3 d7 49 6f a3 1c 95 a8 16 28 17 78 9c 69 c4 eb cc ec 92 a5 3e 75 fe 04 7f 0d ea 2b d3 4d b4 17 63 46 b1 0a bc ca 5d f7 d4 5f 94 c6 60 b3 2b 91 69 ef 21 d3 bc 72 74 42 86 16 03 18 1d 3d 02 65 8f 6c 25 ca bd f4 5a 63 e2 12 b6 44 a5 58 d1 f1 f3 cc 90 28 53 a3 4d cf 59 bb 15 a9 50 a5 21 7f 0b 13 7c 42 87 8f b2 93 20 85 4c 95 8e 34 19 9e 2b 54 ac f2 50 76 d7 e2 b3 07 15 2a 45 7b 7b ac 88 51 a2 4e 93 3e 2d d2 4e 2f 94 a9 56 53 9b 28 c5 ea 86 f3 30 63 84 af cb c3 7f b8 00 73 ab 7c 2d 4d 2f a4 eb bd a6 6c 59 e5 77 30 bd 3c f3 9c c1 91 af d6 e5 3f 9e 35 4e bd f7 fa 2b f3 07 7b 69 ca 71 fb 4b 61 4c 83 Data Ascii: w6Z%"nV't8q8RF>Y'kQ\Io(xi>u+McF]_`+i!rtB=el%ZcDX(SMYP!\|B L4+TPv*E{{QN>-N/VS(0cs\|-M/lYw0<?5N+{iqKaL
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: ba c4 99 16 07 c5 94 3d af 43 1b d2 60 5d ca 43 0b 9a c5 c4 89 d4 a6 2c 18 09 95 0d 8e 25 93 2e 9f 22 72 62 d1 07 d1 b5 01 f8 bb 29 93 66 81 c1 71 38 94 6a e5 43 df 11 32 c6 8a a8 20 95 a2 71 13 c2 02 f9 48 d4 e6 88 4a 11 50 3a ae 2c 1f 7f 28 12 a1 5d 20 03 0f 48 ad e7 e4 79 2a fe f9 50 78 93 70 59 84 43 2f ac 46 a6 c8 44 6e ee 54 70 c0 16 d2 10 4a a1 a4 95 18 f6 2f 4d a2 78 51 42 72 21 8a a3 18 12 51 44 84 bb 06 85 10 8f fc c8 07 bc 4e 71 3c 6d c9 b1 0e 9a e2 ee 8f 30 28 94 a0 12 f0 71 3d 8c 07 65 0f d1 ae ee 38 a2 b0 f1 0b 0b 33 32 09 96 4d d0 7a 02 a3 11 bf 3d b0 6e e9 ec f1 97 de a4 46 39 9a 5c 19 92 3d 3a 9a 9b 3f ba b0 6b 63 a8 02 44 27 fc 39 67 e0 f7 8e 5b 4d 87 0e 42 fb 1d 3b 10 da 0e 7d 0f 6c 0d 55 7c 0b a1 b5 c0 17 52 b4 da 91 75 e4 86 c7 91 94 Data Ascii: =C`]C,%."rb)fq8jC2 qHJP:,(] Hy*PxpYC/FDnTpJ/MxQBr!QDNq<m0(q=e832Mz=nF9\=:?kcD'9g[MB;}lU\|Ru
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: c5 2f 8b ab 8b 2b 8b 8b 8b 0b 8b 13 8b 75 dd 39 dd 99 1d ea f3 cf 19 85 81 01 c4 47 ce 32 9d 56 c8 e3 3f c2 41 b4 5e 25 26 82 85 78 b5 1a de e3 57 1a 31 66 06 9c df 3b 97 c4 cd 7c 0c 2c ce 72 4b d5 e0 c1 8b 0f 3f 1c 01 c4 ef 14 c1 44 6f d7 56 b8 e9 b0 80 27 88 2a c1 a3 d9 02 20 75 07 40 c9 64 a0 d8 09 70 fa 05 c0 83 37 00 e5 af 80 e2 55 00 b8 86 1e 36 3d 7d c2 ee 3b 02 d9 4e b0 35 58 73 fe 21 ed e6 46 82 ae 27 cb 37 c4 a2 fb 91 93 01 39 91 9a 69 88 41 78 6b 7d 2a c1 36 4c e8 64 c8 47 4d a5 4f 25 b1 da 49 c3 13 c9 9c 37 37 64 e6 d4 55 f7 9a 48 3f 85 26 37 36 b4 a2 e7 4b 5e c3 a6 40 2a 98 bb c7 ee dd 60 02 61 a0 e5 6b 79 0a 82 03 72 21 b7 b1 6e 3f 49 89 c5 2e 7a 0c b6 bd db a3 44 9e f6 e1 34 ed 55 b6 42 35 86 4e be 0a 51 15 67 30 63 4d 3e 4a e8 3c ae 6e 57 Data Ascii: /+u9G2V?A^%&xW1f;\|,rK?DoV'* u@dp7U6=};N5Xs!F'79iAxk}6LdGMO%I77dUH?&76K^@`akyr!n?I.zD4UB5NQg0cM>J<nW
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 30 49 67 49 66 15 97 da c4 c5 d4 9a 2e b5 6a 0e e9 30 07 4b 4b 39 a4 d5 1c d2 75 0e 69 c5 09 b4 e5 12 9f 69 39 b1 b4 8c 34 94 73 b9 34 7d a1 bd 66 bc a2 0f b6 cc aa 9c e5 0f d9 26 3b 7b 3f e7 55 0c d7 a5 37 25 3b 65 ab 8c e3 04 d3 04 4f 09 a6 04 e6 10 dd 22 f1 3a 86 7f 1f a7 0c 7b b8 33 b7 79 ae f3 a2 ab ea 3f 6e 6d ed c9 46 81 31 cf 7b 8e a7 b0 62 ad 26 27 13 96 38 1c b0 cb ed 86 bb d9 d3 eb c5 d2 3f 35 eb b5 5a 55 0c df 68 36 5b cb 1a 0a 45 5a 32 4a 12 0a 98 4e 52 89 b1 40 91 2e a2 6b 2e 35 77 d1 64 82 80 0b 72 22 ae c6 1b 9f e6 f2 40 47 f3 b8 59 9f 2b a4 ce b2 18 2d 2d c5 80 55 5a 4a 8c c8 52 49 13 91 62 44 61 13 ab ac 25 85 5e 2c 53 48 95 61 39 86 a2 5e b6 2c 95 b3 2e ca 34 db cb be 41 e9 8d 5b ac 8b 9c 49 c6 d8 2a d2 39 17 e9 21 9e b1 31 97 72 28 ba Data Ascii: 0IgIf.j0KK9uii94s4}f&;{?U7%;eO":{3y?nmF1{b&'8?5ZUh6[EZ2JNR@.k.5wdr"@GY+--UZJRIbDa%^,SHa9^,.4A[I*9!1r(
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 21 03 31 d1 57 32 fa fd c2 ac 37 61 ef c8 9b be 73 63 50 87 9a 55 c9 db bc 12 66 6e 87 b4 71 81 64 d5 ef 60 7c f3 11 50 3b d9 70 e4 6e ba 78 7e 77 67 27 96 70 fe c0 95 1f 3e e3 3a ed 62 b6 ad c9 0c 04 69 cc 34 8a 32 6c f2 51 b3 6b 77 a1 6b d9 ce fa b5 02 48 e3 bf 9d 31 77 77 c7 62 00 a2 89 6d a7 b1 75 9f 35 23 47 6c 07 2e ee ac 8c ac 16 de 16 03 92 e5 56 ce d6 b6 3d 49 30 1c bb ac 10 b8 83 a2 e1 a4 6c b0 5b 76 cb 59 e5 dd ab 04 97 38 1a 86 0e 25 9d 5f ed c8 3e b1 c1 e7 35 67 78 d8 78 d9 35 2d aa 6c 97 ac 2e 78 36 1f 18 a0 2f 03 a5 35 1f 36 39 a3 fb 66 40 4c e7 02 8e 87 ae 3d a3 b5 38 69 6d 60 12 6a f3 db 8d 0c 7e 53 08 b7 31 8b ec 76 2b 24 87 5e 31 67 f4 82 bb 4e e5 fe f8 61 93 01 4d 48 14 ce ff 34 a7 60 18 6d 9f 44 af 1b 54 2f 69 ed 97 e0 91 df 0f a2 b6 Data Ascii: !1W27ascPUfnqd`\|P;pnx~wg'p>:bi42lQkwkH1wwbmu5#Gl.V=I0l[vY8%_>5gxx5-l.x6/569f@L=8im`j~S1v+$^1gNaMH4`mDT/i
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 62 87 9e 50 cd a3 d8 d2 18 8a e3 c0 21 30 25 3b e1 07 b6 26 de 67 29 c5 b5 29 a6 1e 8e 46 ef 33 68 fd 36 36 04 7b ed eb 9a f8 52 13 69 11 e3 52 7a 3a 6d cb 36 cb fe 1f 1a f5 01 f0 89 16 6c 74 1d 7e 28 48 8c 02 ab a4 c9 88 02 ab eb 5a d9 bd d4 8c 71 28 4a de 88 10 63 df 0a 6f c3 05 87 e1 38 12 fb 79 61 6e b7 5c a3 27 87 5f b5 34 65 d0 42 a8 31 a5 65 87 8c 91 3a b1 5b b1 28 22 bb b1 f8 3e da 6a 09 70 af bf b1 92 cb 2b a4 6a af 29 1a f3 0a aa b7 72 9c 0b d0 01 bc fa 37 75 70 a7 93 a7 a0 11 30 d0 72 d9 cb 39 66 73 1d ff e4 3c 33 48 ec 1d d7 78 ad 33 d3 98 38 f7 94 cc 6c 0a e2 b9 32 13 49 0e 9d 2a aa c8 1a c1 cc 59 5b cc 28 ce 89 15 41 72 bc ce ca 39 4b ee d0 34 22 5b 58 64 8f 70 8f 70 7e ad 46 3b 52 f1 5a af 2b d0 5f 2d 00 a0 4d 55 d3 bf 0b 11 77 0f df 7d ef Data Ascii: bP!0%;&g))F3h66{RiRz:m6lt~(HZq(Jco8yan\'_4eB1e:[(">jp+j)r7up0r9fs<3Hx38l2I*Y[(Ar9K4"[Xdpp~F;RZ+_-MUw}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49802	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	581	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: 3XQBVjUlCKhXNsHwbkNyDlezvnQpYzjvre3yZ8qlpXmH9sAf5s79/rBMeCWg3yO8XhiglZkW4V8= x-amz-request-id: 5FSA5P4WBSD34YDP Date: Sat, 23 Dec 2023 10:12:37 GMT Last-Modified: Wed, 25 Jan 2023 09:31:52 GMT ETag: "0cdbbfc728ac34db132f284a7066d40b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 51100 Referrer-Policy: no-referrer-when-downgrade Age: 6182035 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c7 9c 00 0d 00 00 00 02 61 a0 00 00 c7 43 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b a7 56 1c cc 76 06 60 00 85 52 0a 87 c2 60 86 a5 66 01 36 02 24 03 a1 0a 0b 90 48 00 04 20 05 8b 36 07 c5 15 5b f2 09 92 04 85 c7 ee 9e 01 b4 56 ea ae 2a fe 7d 3f fc 28 27 e2 11 c6 b8 fa 19 d0 73 b3 7c b0 63 55 c9 25 78 d3 d1 e4 76 0c 56 fd dc df ad ec ff ff ff ff ff fc 64 21 87 de 9f e4 fe 83 80 1a d0 76 dd 36 08 2e e3 10 0d f7 28 8e 28 2a 81 36 50 14 a6 f3 be 78 a9 c6 07 21 ec 18 4e 83 4e 66 9e b0 84 7d e4 37 a1 92 be 2e b5 56 4c 58 1b 7c 51 25 af f3 36 ed 0f 53 cc 21 5b 57 be 71 31 87 9a 07 3f 67 d6 5e db 8d db 0c 03 7f 66 33 5c 07 db fd 42 c0 c7 79 4b 36 8a ba e8 c6 d7 66 b7 0d 5f 65 4e 88 0d 78 31 87 Data Ascii: wOF2aC@Vv`R`f6$H 6[V}?('s\|cU%xvVd!v6.((6Px!NNf}7.VLX\|Q%6S![Wq1?g^f3\ByK6f_eNx1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 9c 65 92 40 56 b8 80 c2 0a b0 4e 22 47 90 1d f1 41 6e 3c 3c 20 1e 03 0c c3 34 d2 98 02 cc ff ff b5 95 ef d8 a5 7d 44 33 a9 d1 68 b4 2c fa ce 44 f4 87 82 26 0e 69 2a b6 52 8b 6b e2 6c 63 e2 8a a5 ad 7d 43 68 4b b0 bc f3 e0 01 3d 0d 02 ca 3c 30 0f 65 80 43 26 9c 70 68 cb e1 e8 81 ca fd 4f 35 ab d4 8e b4 b5 d1 99 c8 65 1b 25 32 73 ce 84 1b 85 23 10 ec af 21 48 76 9d 7a ac 09 cf 9a 88 1f 0f 1f 0d 02 20 a7 d5 2d cd 1a 67 a3 ab cb a3 8b 2e 0d 37 3c ff df e9 cf a6 bc 84 b1 73 12 57 85 42 d9 d6 5d 89 92 7f bc 74 e6 2a ce d7 38 e4 16 aa 2e b8 ca 4a fc ff f6 e6 ec bd b3 fb c3 7b d4 a6 76 65 1c 42 b6 e6 70 6a 99 ff 37 c9 bc 99 39 27 f3 0b d5 11 45 2b c2 94 66 bb d3 04 21 89 4a 1c 12 a4 c0 69 cc 6f d9 1b ed 99 96 9c f3 e3 26 f0 07 4a 76 ab a5 1e ef aa d4 eb 9c 90 69 Data Ascii: e@VN"GAn<< 4}D3h,D&iRklc}ChK=<0eC&phO5e%2s#!Hvz -g.7<sWB]t8.J{veBpj79'E+f!Jio&Jvi
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 93 91 27 a1 72 2f cf b1 35 93 e7 cf 73 b7 51 b9 b6 b7 df d7 c4 b1 ae b1 a3 8a 43 f9 ee 3d ba b4 47 3e f9 5a 1a 7e c8 92 6c 73 d3 a5 df e5 59 6e a5 b9 3b d7 dd f9 48 d0 d2 1a 2f cc 87 e7 24 78 cd 6a f3 72 b7 8f e7 3b 52 cd 79 ce 54 ef d4 b5 b9 45 45 b9 4b 47 ee c8 31 5d 45 f9 00 7a da 73 61 48 71 99 7c 46 7e 1d d5 2c d7 d7 66 fa 0b eb 26 4e 18 c5 5a ea 87 ee c2 0c 17 24 f1 6a 64 14 1d 37 2c c7 06 cf cc 88 1d ee 92 94 42 49 2d ab 03 2d ee e5 15 5d 53 47 5b 08 08 ad 35 ac 92 a0 46 e5 2e db a9 a9 3e 80 15 2d d5 ec b1 be 4e 77 b9 f9 4d 98 bb 72 3c 4d 8a 39 18 c9 70 d4 01 50 e3 23 ca 90 89 e7 e8 c0 5d 73 a5 8c ff 93 e7 0a 3a 26 75 5a 76 d1 a6 c3 80 09 2b 76 30 3a 38 13 b3 fd 0a 15 2b 57 a1 52 15 9e 7a 37 b4 b8 e3 ae 56 ef 4d fb 64 d6 a2 65 7e b0 82 5e 57 27 ac Data Ascii: 'r/5sQC=G>Z~lsYn;H/$xjr;RyTEEKG1]EzsaHq\|F~,f&NZ$jd7,BI--]SG[5F.>-NwMr<M9pP#]s:&uZv+v0:8+WRz7VMde~^W'
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: d0 11 be a7 c8 2c 27 cd eb ca 7c 78 7c 79 3e d7 c5 20 a1 40 11 ed f5 de aa f7 e5 ef 48 1f f2 61 1f 71 94 39 8e 7f a1 f7 24 6e ba be c9 6e 99 fb ae eb 1c 87 30 24 c4 49 91 26 4b 57 bc 0a 26 0d 2c 4c 38 9c 2d 87 85 80 08 62 24 91 ed 44 a1 40 09 9d 2a 75 18 da f7 12 f0 3b 78 88 88 22 61 07 19 72 e4 51 29 63 50 a3 f9 51 3c 31 1e 66 cf 39 ea 50 0c 4c ab 93 af e6 1c 8f 80 e7 e8 04 c4 c3 a3 fb f2 d5 c2 23 14 06 31 30 a0 b9 e1 58 54 02 f4 b9 1f bc e2 a1 27 c7 27 28 17 71 4b d4 d1 08 68 c7 71 87 94 e5 e8 d6 01 6d 0e d4 8f b8 50 3d e2 41 2a f0 21 39 b4 6f f1 8e 58 c2 31 28 06 40 e0 c1 00 91 06 94 87 90 61 d9 01 89 94 02 20 0a 80 16 09 ba 5f 17 ff a8 0c 90 14 ac 98 b8 0d c5 01 18 08 09 14 bb 40 5e da 22 9d fe c9 a4 ff de 13 e5 2c 65 b5 4d d7 b2 98 fa 27 ea 6b 05 01 Data Ascii: ,'\|x\|y> @Haq9$nn0$I&KW&,L8-b$D@u;x"arQ)cPQ<1f9PL#10XT''(qKhqmP=A!9oX1(@a _@^",eM'k
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 74 19 b4 fb e4 72 de 8d 84 94 ac 46 2f 6b 49 74 d6 28 55 12 41 ee 25 49 86 84 df f0 a9 e7 32 8b 33 97 ca 96 c9 25 4e 82 56 1a c2 58 44 76 9f 7e 5e af be d0 77 92 7b ce 98 1f 14 8c 25 95 5b 81 ed 2e 23 a0 c2 d9 01 a5 ee ed ae d6 4f 41 25 14 13 b1 ed c1 78 74 5d 73 7b 17 74 d1 94 73 92 7b e0 46 77 6c 23 d2 27 0e ff 34 99 31 67 0d 85 d1 d0 32 ba 49 99 5a 7c 8d 6e b9 e3 c1 52 74 cf 8a 56 ad 27 41 b6 66 f4 18 06 7d 46 ac b8 38 e8 ba 1b ee 6f e3 a2 98 c2 56 0f 17 a7 4a 8d 3a 3d 86 2c 14 28 52 ac 5a 8d a6 7d 79 3c bb 43 4a ad 61 2d b6 3c 5a 12 9d 31 13 a6 d8 54 7b 79 ad 2e 07 0d 6e 6a 3e 79 16 cf 7d a5 3a 72 b0 c5 50 08 03 bc 33 a9 9b 56 a2 1b 36 5f 95 3b 66 e4 53 fe 6c bd 6a 39 6a ec dc 72 fe d5 49 c0 f1 50 d9 6f 7f c5 da 32 68 bc 46 5f 73 7e 4d cf 35 0d d7 44 Data Ascii: trF/kIt(UA%I23%NVXDv~^w{%[.#OA%xt]s{ts{Fwl#'41g2IZ\|nRtV'Af}F8oVJ:=,(RZ}y<CJa-<Z1T{y.nj>y}:rP3V6_;fSlj9jrIPo2hF_s~M5D
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 72 c6 13 5c 74 e6 e9 a0 30 f6 95 3a d8 60 15 cb ba 2c 98 61 22 de 12 c6 03 8a 62 50 25 d4 47 3a d4 b9 dc 68 57 88 a9 89 c4 64 50 6d eb 23 5c 0e 8a e3 b0 05 cd 70 d7 8f 5a 88 36 85 92 48 25 15 6e 82 9c 32 1f 51 6a 0e 25 8a 88 38 32 a1 70 fc 81 47 ae 5d 22 10 8f c0 23 cf c1 f3 74 ec e3 21 59 37 32 9b 90 41 4f ba 10 43 f3 f0 50 70 83 1b 20 82 40 45 c7 88 32 ec af ce 3e b0 83 f0 92 c8 70 21 54 40 07 0d 4a 54 ec 1a 28 80 82 9d 90 a1 b4 0b 48 96 c5 1d 1d 64 a4 b6 8e 3a 28 ac bc 95 eb c8 6e 81 dd 29 b7 a0 d9 15 26 9e 28 da 9e 22 8d 21 4c 42 33 e2 f4 14 6c a5 52 bd 61 de f4 d1 e3 af de aa 19 1f 4f 85 22 b9 32 f7 66 bf d4 85 c1 97 a1 2a 50 6d fd d5 b7 f6 47 e3 77 d1 ce 1f e7 57 63 19 9c ef ce b7 d4 62 6b e0 6b 74 66 53 9f 55 d7 a7 46 cb 9e eb 34 a8 9a 99 ae 8a 32 Data Ascii: r\t0:`,a"bP%G:hWdPm#\pZ6H%n2Qj%82pG]"#t!Y72AOCPp @E2>p!T@JT(Hd:(n)&("!LB3lRaO"2f*PmGwWcbkktfSUF42
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 77 f5 02 de 78 ef 31 62 cc 52 24 be 74 4e 4b f1 18 03 0f 99 34 ae 1e 99 34 19 3b c9 92 43 fb 42 11 51 be be d4 59 4b 10 81 42 5e ba 0c 99 67 11 00 b5 23 00 96 a7 00 16 5b 02 5e f5 22 00 5f fc 1b c0 9a 3f 03 2c de 05 00 46 b3 5d ea bd f4 6f 73 14 53 98 c7 5c 28 52 f3 cb 6f f5 2b 7f 40 34 0d e0 77 8c 9d 9e ef 38 19 90 0b 52 3d 0f 49 ed b6 13 7d b2 c2 56 cc 24 c9 b0 9d 10 95 7e b3 60 b5 b1 ab 6e 92 dd 2e ce 75 fd a6 b0 53 10 42 d0 97 ca 00 a7 07 21 80 e2 cf 0a 5d e3 98 95 a1 ad aa 6e fb 5a 82 0e 42 9d 3c 0d b4 4d 8a cc 7b 42 ec cd 9c 4c 6a e4 ad 9b 40 10 02 58 4b 8c 62 12 52 b0 46 d7 49 51 88 57 89 06 5a 52 70 5a 46 b4 61 51 75 ca 31 47 20 38 4a e7 67 d3 6c c3 8c d0 57 48 3a 0a d3 2d 49 df ea 76 70 35 45 30 4f 02 3b 20 48 4b 3e 73 a3 84 41 79 36 e7 63 5a be Data Ascii: wx1bR$tNK44;CBQYKB^g#[^"_?,F]osS\(Ro+@4w8R=I}V$~`n.uSB!]nZB<M{BLj@XKbRFIQWZRpZFaQu1G 8JglWH:-Ivp5E0O; HK>sAy6cZ
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 1a 0d df 7f 0f fa 3e f4 06 6b b5 0a 62 2c 5b 87 60 13 9c ad 96 b8 36 ed 35 fa 30 96 63 b0 0e 30 f3 78 e1 f1 9b e1 02 cc 25 93 6c d9 83 cc 19 9f b8 02 76 cf e6 82 6d 0b 75 8b a4 ee fe f9 d0 35 80 7e 08 17 e2 15 f3 02 0d 7e 1a 61 69 db 36 c2 6c 82 14 db 0d f6 e5 db fb d5 0a ef 0e fb bd 5e a7 d7 ef 0f 87 23 a7 a1 11 88 46 34 f5 3c 10 c3 2f 7d 72 ae 0d 02 c1 99 41 25 8d 6c 04 6f 08 8c 60 88 4c 0f 77 eb 37 5a cc 89 30 82 1c e4 c4 68 e0 9c fa 91 6b f2 da 8f 3c 05 07 3e f9 1e 51 e8 42 37 0c 5d cf 6b 67 2e 06 01 42 93 c8 69 d8 10 ad c2 38 c8 a5 1f ec 68 37 00 a5 8b 11 fa 44 fb 2b ee 28 37 6a c3 60 92 83 f5 69 7f 8e fe 82 62 17 c2 e7 49 24 0d 43 ee 8e 95 06 7a ae b1 6d 2a 06 cc 4d 3e 97 9e 5b 27 4d 10 7a 3e 87 ae df 98 b9 10 6e e8 9e 0a 2f 07 32 d7 41 87 04 02 a3 Data Ascii: >kb,[`650c0x%lvmu5~~ai6l^#F4</}rA%lo`Lw7Z0hk<>QB7]kg.Bi8h7D+(7j`ibI$Czm*M>['Mz>n/2A
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: ff 5d bd e8 5e 6a 47 21 2d c0 a4 33 f9 22 88 fb d1 9e 38 cc 00 30 3c b4 31 0a 59 dd c4 cc 5c 64 1c fc f8 47 f4 b2 f9 8d a6 00 25 3d 98 b6 f2 e3 94 30 0c d8 55 f6 22 ed 24 5b be ff 7d b4 01 f0 fa 3d b9 99 cc 5c 38 e0 88 c2 b0 81 d8 04 2b 29 03 a6 f0 0a 9a 10 cb a8 1e f4 3b db dc 88 4f 48 11 4c 6c 61 43 f9 88 d5 7a 55 1f 7e ea a3 30 ca 5e 3d 0f 29 95 51 41 16 30 10 d1 06 4c 71 54 39 28 ff 9c 6a 83 25 b9 43 2c c5 20 94 0d 1a 2b 7b 12 2f b0 1d 22 56 16 86 9a 18 9b 1c c3 7d 5d 3d 7b 95 4c 12 6b 82 50 11 ad 6a d3 71 ae 80 a4 b3 e5 0d 31 64 92 15 e1 da aa c9 31 01 52 77 94 27 08 d3 62 5a 50 9e ba cb ee 5d 14 18 82 95 d1 f0 50 cd 4a b9 00 6b 2f f2 e5 36 cf 2a d9 44 2f d7 49 6e 62 da a2 bc 81 d2 f3 3f 5f a1 7c 2d 81 f2 ca bb 90 df 21 37 5d 8d b3 06 0e f8 bf db ca Data Ascii: ]^jG!-3"80<1Y\dG%=0U"$[}=\8+);OHLlaCzU~0^=)QA0LqT9(j%C, +{/"V}]={LkPjq1d1Rw'bZP]PJk/6*D/Inb?_\|-!7]
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: c6 ce 35 06 d5 df 1a bd bb f3 48 24 c3 f1 f1 90 18 b3 31 db e0 c6 79 b3 4a c0 ef e5 0b a7 d9 cf 86 81 7a cb f7 84 cc 6b 26 63 68 87 36 92 9e 26 2e b0 18 b2 aa aa cc 70 8e 76 01 76 33 6d 8b 94 cb c1 b5 bd 18 0f 27 77 fd 67 8c 82 e7 48 05 0c d2 e4 46 8a 62 12 53 19 43 95 69 3e 72 e0 5c 1a 85 8f 6a 30 33 ce 12 a8 c5 79 19 c3 0a 65 b1 e3 7c 1b 4b d8 eb 11 0b bb 15 e6 6b 38 76 fd c0 9b 31 5d 09 2a b6 47 94 02 7c a3 12 91 2e 4a 94 cd e9 ea 98 cf fc e3 91 88 08 01 33 cf f1 b4 2f 2d 9d dd 92 7d 50 d6 c8 67 a0 d5 49 91 ad 67 92 26 60 69 f8 25 23 0e c2 ae 32 d3 3a 00 e5 56 f0 89 5a ae ca 80 51 69 74 b8 a5 36 1b 9d 05 42 fa d0 4b 50 db f8 af e6 52 f6 f4 cb d4 99 8b 97 a0 cd c0 bb 72 eb ba ca 9e 75 9e e2 4a 09 b5 f0 11 88 d4 89 e0 a9 b4 7f 5c 71 d9 db 95 33 51 c3 80 Data Ascii: 5H$1yJzk&ch6&.pvv3m'wgHFbSCi>r\j03ye\|Kk8v1]*G\|.J3/-}PgIg&`i%#2:VZQit6BKPRruJ\q3Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49800	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	577	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: syabfqm+95vmcJSG8AYhkhcBMODruQiv7OcC2j/gAYlI6MFPF1UuA0TE9v1nsO9/7fp5sbWDH48= x-amz-request-id: 6T18X1RRH96AYJT4 Date: Sat, 27 Jan 2024 22:51:29 GMT Last-Modified: Wed, 25 Jan 2023 09:31:52 GMT ETag: "6bc69312c74a1f1d8a57de89e9b00ce4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 50532 Referrer-Policy: no-referrer-when-downgrade Age: 3112503 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c5 64 00 0d 00 00 00 02 5c 80 00 00 c5 0a 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b a7 4c 1c cc 78 06 60 00 85 52 0a 87 b9 14 86 95 7d 01 36 02 24 03 a1 0a 0b 90 48 00 04 20 05 8a 70 07 c5 15 5b bb 01 72 07 dd b6 1f 55 a9 a8 74 27 a8 4f ad f4 fe c7 8f c8 05 f4 b4 35 2e ae e7 d6 78 88 cc 54 31 4a c4 db e7 0a d0 1d 48 62 87 76 ef b3 ff ff ff ff 0d cb 62 8c 79 ff 48 f7 0f 88 d6 54 b4 d2 cd da 1a 08 a3 70 37 24 4a 47 36 69 85 de a7 3a a0 94 62 79 64 72 da 95 89 65 cc 7e 23 0c d4 be 2c 64 c2 4c 65 e9 ae e9 0c a7 58 e5 76 2f 8f e7 38 37 0c 91 3a f6 a3 d6 5a 47 51 a2 9b f7 e3 68 72 ca 09 a3 f4 6f 95 54 37 d5 3a b8 05 fc a8 15 67 9f a6 49 94 f8 9a 7a de c5 54 ca b5 83 57 56 49 95 fa 1a 90 e3 7f Data Ascii: wOF2d\@Lx`R}6$H p[rUt'O5.xT1JHbvbyHTp7$JG6i:bydre~#,dLeXv/87:ZGQhroT7:gIzTWVI
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: a8 1f 24 42 96 ea bb 57 20 4b 7d 95 41 41 1c 36 3c 7c de ce 3f bc 1b 0c 50 36 fc b0 bb 69 17 58 04 03 f0 2c e9 3c cc 24 8c c0 76 3c d8 f9 d0 7e 4c 49 9e e9 20 0a cc fb bf 65 96 74 5a 3a ed 38 67 80 0d a0 1c 52 40 36 21 52 55 d7 7c 6d 27 79 47 ab b5 9f b4 17 42 46 7e af 7f aa a9 ee ae 9e eb 09 da 0b 21 23 a7 40 98 a9 09 33 62 66 d0 d0 7e ff 7b 73 f6 de d4 99 40 97 f4 75 89 c3 78 9c 41 ee ce df 94 79 85 b3 b3 e7 ff 54 45 29 55 b5 6e 45 40 45 82 c2 16 87 14 38 8d df b7 34 a3 d3 aa aa 96 f7 39 c6 c7 8d 0c b0 2c 53 32 aa ea ea 79 bb fd 6b b4 29 c8 21 41 fb 32 cc 68 f7 90 16 c0 63 77 04 1b a3 83 7f b7 04 7d 3f 2c b9 58 58 11 09 a3 48 11 09 3d 6d e7 9b bc 95 0d ce db d6 be 2b 84 d0 85 50 bc cc 08 4d 08 23 84 30 9e c9 42 77 9c 7f 5b 0e 2d 41 04 ad f6 8f ce 61 fc Data Ascii: $BW K}AA6<\|?P6iX,<$v<~LI etZ:8gR@6!RU\|m'yGBF~!#@3bf~{s@uxAyTE)UnE@E849,S2yk)!A2hcw}?,XXH=m+PM#0Bw[-Aa
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 67 65 4c dc 78 82 8e 13 96 63 82 a1 8b 7a d7 01 d7 ee d6 0a 18 f2 bc bf dd cb 91 03 a7 54 3d e6 b8 ef 68 7b e2 1c f0 f7 73 d4 27 67 6f f4 c9 75 36 d1 26 d9 a1 a7 e4 ea bb a4 62 66 45 1e 20 45 bb 1a 05 71 67 ec 00 a0 46 1f 42 e0 83 62 64 23 4b 5f 04 f8 9f 3c 01 38 f0 d0 40 07 5d f4 d0 c7 18 73 6c 70 a4 65 60 61 65 73 50 b8 d7 a2 c5 78 2b 56 82 14 e9 72 e4 ca 53 68 c0 a0 11 a3 a6 cc f1 93 79 92 f6 b9 89 14 7e 54 56 c3 71 de 3f 59 d1 74 d3 b2 5d 2f 08 a3 38 29 eb eb ed 3d 2f 34 c3 f2 82 a4 58 ae e7 e7 45 39 1c ad 77 fb c3 f5 f1 b5 1d 2f eb e6 f5 c3 b2 f0 0d 85 18 c4 41 3c 24 41 51 28 0e 65 92 4b 3e 7a 8c 14 63 a6 14 2b e5 b8 a9 a5 9e 46 9a 69 a7 93 6e fa 99 64 d5 ba ec c2 14 53 7c 09 51 a3 45 a7 00 40 d7 f9 0a 52 a7 03 4e 42 4e 45 71 ad 4b d7 e9 be bd 07 b9 Data Ascii: geLxczT=h{s'gou6&bfE EqgFBbd#K_<8@]slpe`aesPx+VrShy~TVq?Yt]/8)=/4XE9w/A<$AQ(eK>zc+FindS\|QE@RNBNEqK
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: ce 57 13 af 1c 2a 3c 9b f1 72 91 77 ae 81 bd 0c 28 e9 6c d2 e3 bc 9d cf b9 99 f5 68 41 ff dc 4a ab 1e 01 36 f6 58 d8 43 7c 69 a6 27 5e 24 5c 64 c7 0a 7b 87 be 7c 7c ad 6f 8c ce c9 c0 68 9c 93 a1 61 9d cd c8 50 2a f9 b5 b5 75 9e 3e 00 41 04 0f 82 3c 40 f1 84 29 14 58 e4 20 21 3b 00 a2 00 4c 64 e8 76 5d fe a1 10 20 2b 22 62 12 76 94 06 e0 81 13 44 5c f2 f2 bb 5a dd e8 df dc e8 b5 4f 15 7e 72 4d 9b a2 18 eb 2f ac 76 66 0d 63 82 c6 ca 2b 8e 91 e3 f6 41 3b 82 f7 f6 ad 8d 26 2d 8b 06 0b ee 40 e8 6c 23 87 47 16 1c b3 db 5a 4b 7d 33 f3 b1 42 7c a6 87 59 72 24 88 d2 57 ae 54 49 60 99 29 fd 1a e5 4b 11 e9 ac bc d3 c9 b9 10 0a 04 1f a4 e8 d4 72 54 49 25 97 32 ed 95 c7 9a 3b 8e 3e c8 4f 50 62 f1 78 a4 ef af d6 6a 77 93 7f b9 f6 b5 a4 c2 d1 d0 2f 21 81 90 86 ac 4b c6 Data Ascii: W<rw(lhAJ6XC\|i'^$\d{\|\|ohaPu>A<@)X !;Ldv] +"bvD\ZO~rM/vfc+A;&-@l#GZK}3B\|Yr$WTI`)KrTI%2;>OPbxjw/!K
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 42 46 19 67 91 65 76 28 53 0d 7d 5c 6c 04 cd b2 15 99 e3 cb 52 9b fd 3b 7a fa 85 8a a2 f7 69 22 aa 6c 74 c8 1b 1f ca bb 06 f5 4b 74 33 ed 75 cc 80 77 b2 fb 57 ef 18 17 a5 81 0b c8 99 9e 4e bf 72 b4 ad 8d 29 96 58 61 83 1d 35 2d 1d 3d b3 63 a2 24 49 f5 5e ba 4c b9 0a 7a e6 87 94 52 23 11 e6 3d d8 ce 73 31 62 93 c3 e2 e5 1b cd dd ff 6e 46 37 dd 9f 93 40 1d 0d 0c 31 61 1d 11 5e 8b 93 28 6d 30 8f 7a de ee 62 a5 d0 8d 86 92 7c e1 79 a9 19 e6 58 60 4b 35 cc a7 61 92 2b 97 05 32 64 5d 3e c3 c5 6f 05 d9 3f 2f 5d 49 38 41 c4 ad e7 86 e6 6a ba e1 53 d0 77 92 2e 9b d4 f3 46 73 d6 38 61 61 87 bd 73 2e c0 94 f7 f6 6d 94 81 fb 8b 68 41 45 f3 29 ce 93 b1 27 db 9f f8 3f 81 a4 85 c7 1e 8f 79 8f c3 1e 33 1e 43 62 ff 55 71 3d 7a 14 f5 e8 d1 23 f6 c3 ef 33 ee b4 3d be 1e 47 Data Ascii: BFgev(S}\lR;zi"ltKt3uwWNr)Xa5-=c$I^LzR#=s1bnF7@1a^(m0zb\|yX`K5a+2d]>o?/]I8AjSw.Fs8aas.mhAE)'?y3CbUq=z#3=G
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 41 4e 99 8f 28 35 87 12 45 28 6e 33 0a fb 1f 38 64 83 08 5a 6a 07 7f f9 e4 b9 97 de f9 90 ba 77 d2 59 48 a3 27 a5 12 25 c7 4e 05 27 28 7e 57 04 92 a8 83 b7 a1 d6 ed 1f 0f 9f 0f 2f 72 5d 08 3b d8 82 0d 65 2a 35 0d 98 60 80 06 2a e5 5d 40 4a 5d 94 6b 20 25 1f 94 d5 29 7a 8a 3d 85 b9 9d 07 10 19 94 07 60 db 95 94 4e d4 e3 a7 2e 33 44 49 62 23 41 4f 11 69 55 ab 27 c6 0c 9e 3d 6e f7 42 59 52 25 88 11 21 98 ff 68 8e b3 4d 98 8c 77 55 41 dc c1 bf 23 3b 7f 77 fe aa da 58 30 7e 77 cc 81 31 63 4c 97 4c cd 8c 99 8c c6 68 c9 77 37 60 a4 d3 61 e4 9a 26 ae ce b7 81 2a 21 00 37 be 33 2c 73 44 d7 31 53 e8 74 fe ee fe c7 79 32 26 9a b2 fa 2e f1 dd 71 b6 f0 d7 5f 89 6c e7 06 d8 a0 cd 4a ce 19 50 c3 2d c3 b0 bc f4 12 97 62 c5 d4 28 53 86 87 90 90 3a 8d 1a 69 fc 81 f4 77 85 Data Ascii: AN(5E(n38dZjwYH'%N'(~W/r];e5`]@J]k %)z=`N.3DIb#AOiU'=nBYR%!hMwUA#;wX0~w1cLLhw7`a&*!73,sD1Sty2&.q_lJP-b(S:iw
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: bf 51 01 16 c2 8d ba 1e e8 be 1f 00 5e fd 0d 37 fb 8c db e8 f1 5d 44 29 2d 83 7a 8f d7 48 86 c4 96 04 ea 07 81 97 db 1d a8 4d 82 e4 30 89 21 41 c7 a8 db d2 d0 56 7f 76 64 86 1c 48 71 de a4 52 de 7d ec 65 33 bb a5 99 3a 59 e5 44 30 c1 63 63 39 f4 08 39 8b 18 89 f7 ea 76 0c df 4b 54 5c 81 16 48 2a 1a af 2d ec fd 28 a8 c3 d8 fb 3e fa e5 16 0c 3c b8 cd 22 3e 88 81 16 58 d8 2d e7 67 41 89 cf e7 38 68 e0 d2 01 b8 2f 39 4a 9c e1 96 7a aa 0e 81 b8 be 0a 8d 2e 5f 40 4e 6c 6f 85 d6 02 18 a4 53 81 2a 04 28 c7 80 53 81 96 a1 4c 9d 27 41 13 6c 0b ab 15 25 e8 18 22 79 5b 28 b2 cd 66 40 5f a8 e9 e3 a0 e0 ba 60 c2 7b 6c 87 53 13 42 82 af 95 8e d1 0a 72 ba c5 19 05 06 85 a8 cd 21 34 2d c4 12 1c 60 d6 1c 5f 94 ce 66 6a 41 0b c1 55 9b 08 76 af 8b a8 45 51 82 7a 77 78 0b 21 Data Ascii: Q^7]D)-zHM0!AVvdHqR}e3:YD0cc99vKT\H-(><">X-gA8h/9Jz._@NloS(SL'Al%"y[(f@_`{lSBr!4-`_fjAUvEQzwx!
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: f7 a5 8a 1d 34 c2 b6 ca 67 8d 1d e1 aa ee 9e 7d c2 5d 7f bf 45 ba 7f be 86 12 18 b4 49 52 de 65 bd 61 bb 63 3c 21 cf 49 59 af 99 72 3c 72 ca 6f 1f 16 15 ef 0d 07 fd 7e b7 2b 8c 87 c3 d1 b6 9c 82 c8 48 96 51 84 28 96 7b 49 92 16 82 f7 81 ba 1b 96 56 9b 0f 89 86 30 c2 89 b8 1e 8f c1 d7 1a aa 23 53 e2 19 92 98 0b 71 42 d0 94 86 16 3e 8d 02 1a 7b f1 91 48 9b b6 54 0b ed 47 e9 8c 14 01 93 65 9a 70 d5 3b 09 45 9a 25 95 e9 e3 93 9c 7a c8 74 3d a2 2b 72 98 70 2b 9a 0c 9b 38 e7 12 ea 91 04 92 ee 46 b2 66 db 25 c1 de 62 35 27 fa 6e b4 1a bd a4 56 35 02 7d ef 1b fa 98 47 14 63 10 3a de 37 93 7e 6d 45 1b 86 4c 76 d1 0c 66 64 64 62 18 0e f9 b8 d6 75 62 52 06 ac 23 1a 4a e0 e5 65 b8 09 e9 7a 37 88 fa 05 05 fe 81 e8 47 12 24 42 da 91 c6 41 df 5d 8b a4 09 12 43 1c 3b 27 Data Ascii: 4g}]EIReac<!IYr<ro~+HQ({IV0#SqB>{HTGep;E%zt=+rp+8Ff%b5'nV5}Gc:7~mELvfddbubR#Jez7G$BA]C;'
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 8d be c1 0b 1a 79 d7 c6 18 ba ae 26 86 e4 97 4d 81 8d f3 31 d7 25 c8 eb 0b a8 a0 31 34 5e d1 30 b5 0c 78 1b 2a 30 7b 97 4f fe e2 15 f4 01 e4 c9 8d 1a c3 1e 3d 86 04 9c 1c c4 1b 0e b3 41 3c 0a 01 a0 06 56 9f d0 6d ab de c0 09 dc 9a 84 a9 db 0b 50 34 b6 ec e8 9b 5b dc 6b cb e3 50 bf 24 04 05 0d f5 53 1e 00 43 3d f4 01 44 2d 79 23 c8 f3 6d 3e b0 ee 82 f5 18 80 06 51 f5 93 a8 62 74 10 2e 1a b4 39 a0 18 32 20 eb ed 7a ce 05 90 4a 80 cd 83 52 56 a3 e4 ca 6b 08 f2 cb 0f bc 0e 06 00 44 33 dc e6 33 10 c8 4f 0c 03 10 22 1f 91 72 ea 78 e1 f0 55 cf 7b 28 f0 00 b0 ca c4 e8 e9 11 35 0a 68 98 6f bf b7 3d 93 75 38 62 cc 81 f7 51 cf 63 39 03 4a 11 9f 79 63 07 73 d1 d5 15 ff 42 ee 88 2c d0 87 0e bb bb c8 b8 93 19 3d e4 c8 68 e1 9c 62 a7 d8 56 4d 52 26 f1 95 91 af 8a 49 71 Data Ascii: y&M1%14^0x*0{O=A<VmP4[kP$SC=D-y#m>Qbt.92 zJRVkD33O"rxU{(5ho=u8bQc9JycsB,=hbVMR&Iq
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: a3 35 00 da 45 3d 15 b0 a3 ea e8 c1 7f e4 4a 60 1a c0 50 77 ff 4f f4 d8 0d 76 71 7f 4d 78 f0 a1 6d 81 2c 5f 0c f4 fb d2 8e 26 a8 22 cb 8b 26 72 62 f5 6d 77 64 65 02 3e ac de 45 be c8 f9 31 c9 8d 8d ed c1 ec db 85 f7 40 b0 7c ac 69 3b a4 91 32 5a 4b 76 a2 97 d7 ef 88 e5 94 c7 5a ed cd ab f2 8c ae 7b f5 c2 e7 73 43 e8 a9 8c cb 48 bd 83 67 6c 4d d8 7f 35 f7 13 75 b0 ba a2 27 8d 25 4b f8 84 7c 36 6a 29 a4 ef e2 40 82 5c 1e 33 fc 51 fb cc ff af 20 3c b3 5a 8c c7 56 85 55 f2 53 d7 26 9d 1f 54 72 b8 ad ea 71 3a ed 6b b2 99 3e 1d a2 90 64 fe f9 d5 94 cf fe d1 67 1f 32 d5 67 ef f8 9a b9 3e 6d 0a 57 f6 57 d0 e3 0d 3d da 09 3c 75 ab 3a 7b 5a 6a 70 01 ef 5d 39 55 3e ef ee c4 52 3b 48 18 5a 9e e8 21 5b ce fb 90 43 46 0b 69 78 87 3f a7 7f 06 63 e4 28 a5 66 20 2f d6 14 Data Ascii: 5E=J`PwOvqMxm,_&"&rbmwde>E1@\|i;2ZKvZ{sCHglM5u'%K\|6j)@\3Q <ZVUS&Trq:k>dg2g>mWW=<u:{Zjp]9U>R;HZ![CFix?c(f /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49801	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	582	OUT	GET /cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: kH4u7voJ/C44c9ebqit9MYrDGOVzdPA/37D5uI4MlOzJf8VuExFVa5gELDzmVa+wsivJKnhuor0= x-amz-request-id: HB3PCQ54245DE0B8 Date: Thu, 29 Feb 2024 18:35:46 GMT Last-Modified: Thu, 08 Dec 2022 13:23:00 GMT ETag: "0562f972a5e554c9ed60eb863e15f215" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 59804 Referrer-Policy: no-referrer-when-downgrade Age: 276646 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 e9 9c 00 12 00 00 00 01 fe e4 00 00 e9 30 00 03 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 3e 1b f3 6c 1c 9e 06 06 60 3f 53 54 41 54 5a 00 87 76 08 81 7c 09 9f 14 11 10 0a 85 a5 08 84 cc 14 01 36 02 24 03 a3 4e 0b 91 6a 00 04 20 05 8b 64 07 ce 6a 0c 85 1f 5b 48 c8 91 02 96 87 ed 79 40 b6 65 3a 6f db d4 8a 47 45 8c b1 1b 28 1e b6 13 18 bf ce 31 c3 df 23 d6 e6 80 a4 1a f1 f6 e9 c1 dd 2a 84 12 cd 1c d9 ff ff ff ff bf 21 a9 c8 58 25 1d a4 1d 30 71 02 0a 07 a8 9e ff 07 59 82 dc 72 44 44 18 11 59 d1 51 f6 0e e1 42 f6 1e 82 4b 2c 64 c9 10 69 08 2e 28 97 b1 5c 2b 7a b3 a8 35 e3 0d 9a 82 e6 5a eb 6d 29 f7 21 69 b0 64 2f f6 c3 f6 84 92 da 25 a9 25 eb 0c 99 92 a1 64 77 a3 60 a2 6c 6c 29 2b ad c6 43 98 45 3f Data Ascii: wOF20B>l`?STATZv\|6$Nj dj[Hy@e:oGE(1#*!X%0qYrDDYQBK,di.(\+z5Zm)!id/%%dw`ll)+CE?
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: f3 22 78 b5 1b 42 a8 0e 10 3a c0 a2 4c db 1e 10 54 57 74 0d 12 cf bf 7f a2 f6 c0 27 28 16 c0 ba 9f ca 4d f3 e6 05 fc 19 49 b3 25 8d cf 6c 80 83 d1 50 85 f3 d7 02 aa b7 c1 ff 7f d3 4a 3a f9 6d fc bd 3a a7 ee 22 c9 11 89 e0 9d c3 1d 32 82 a5 fa a3 8d aa 8d 6a a7 d2 38 f5 2c 77 ca bd e3 94 51 3b 05 64 02 6d 64 40 0c ff 8f ab be d9 ce bb 2c a9 84 a5 d2 aa ff 1f a3 c6 cb 79 af 58 7e 4e b1 25 6c 5d cd da 23 47 18 36 65 70 0e 84 1c 0b 12 a3 24 fe a7 a6 d9 8a 78 f8 7b 10 e2 8c 25 2e 7c 6a 77 73 9e 45 e7 74 29 59 a6 2a 13 e0 c3 f4 0a f8 d2 8c 49 e5 62 ee b3 4a bb 72 2e d8 15 93 bb 4c d5 a7 4a 1d 9e be bf 67 5c ed c1 c5 30 20 6a de a3 ee 04 cd 9f 2c 91 40 be ff ff 65 5a b9 8d c8 c8 40 06 40 24 86 60 91 65 da 02 63 c9 b1 c5 99 c5 06 40 8d 95 f3 db 91 76 d2 4a 5a 65 Data Ascii: "xB:LTWt'(MI%lPJ:m:"2j8,wQ;dmd@,yX~N%l]#G6ep$x{%.\|jwsEt)Y*IbJr.LJg\0 j,@eZ@@$`ec@vJZe
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 8b 9b 22 ff 5b 55 1e 78 ad 13 c1 00 52 4a 63 51 9e 63 2d 6c 44 a0 e6 11 5c 2f 88 58 18 00 c6 08 92 b7 38 19 9e a7 4e 00 c5 19 dc 0c 5f 08 44 00 78 14 3a 48 a3 0d 10 80 4c 00 05 68 c0 a0 b3 12 22 21 15 2e 0d d7 8a 21 4b 6d 8a 77 32 e4 43 69 e7 7a da 06 3c 39 39 a6 11 a0 16 45 de 7f e7 2d 50 80 98 0c fa 18 86 16 d0 40 16 ea 3a 8b ab 0e 6e c0 a5 ff ea 32 18 64 63 c1 98 06 16 b0 7d 39 c5 69 30 1f c5 af 8b 8e cf 13 5f b0 4d 14 d8 73 31 be 09 e0 18 36 c6 e5 c2 45 47 86 e4 86 85 0f 2e 01 4a 19 ff c1 20 86 5f 20 73 f9 4f ea 60 ea ac 73 fe b7 15 b2 7a d6 49 6b 9d fa 6c e4 92 41 a4 c9 0b eb 42 88 69 c2 d8 9e 99 d9 37 c3 b6 14 10 af a0 dd c9 9a bc 91 84 68 e6 6d 04 38 d7 06 27 07 e5 f0 ed 49 a1 e3 9c a8 31 58 7a 8b c8 76 72 85 37 9b d3 77 a8 d6 6c 98 4d dd a6 24 e2 Data Ascii: "[UxRJcQc-lD\/X8N_Dx:HLh"!.!Kmw2Ciz<99E-P@:n2dc}9i0_Ms16EG.J _ sO`szIklABi7hm8'I1Xzvr7wlM$
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 18 09 cc e5 93 4a 59 e4 53 29 78 aa 1d 88 1f 9f 51 cb e1 a9 c8 db 34 7f 51 fa bb bb bf df 3c 30 9f b0 4a db d3 1e 1d ef e4 48 17 ee 1a bd bf bb 31 b7 db 4b 5e e7 76 9f b5 d1 d7 ef e6 f6 d7 ed 07 7f 99 ca db b2 58 4a a6 17 50 5f 3a 18 f9 0d 6e fa 1e 10 9f b1 f4 e7 02 6c 79 d5 dc b4 7c 9b 15 b4 c2 89 59 89 21 7d e5 2c e4 83 00 d4 08 59 44 e1 2a a7 7a d5 17 d2 6a c3 0f 76 af fe af a8 3f af cb e3 0f d1 39 8b 1f 91 f5 75 9a 39 a9 0e 78 bb 3e 95 ef 4b d2 1b 98 f5 a7 c8 b1 4a 40 93 f5 30 09 24 b7 83 80 a7 dc 1e 5e 07 53 73 11 3f 53 85 c1 6e 08 13 0c 6f d8 9f 43 88 e4 38 92 19 5b 70 5c ac 86 cf 95 10 b8 81 26 ee a0 97 a9 85 c1 4c 30 c1 b3 2c f3 26 5c e6 fd 20 9f 05 73 bf c9 52 fe 77 32 3e d1 be 9e 3e dd 2e 00 8a 41 30 0b e9 8f d5 28 34 9a 00 0d 67 ea ff a4 e2 dc Data Ascii: JYS)xQ4Q<0JH1K^vXJP_:nly\|Y!},YD*zjv?9u9x>KJ@0$^Ss?SnoC8[p\&L0,&\ sRw2>>.A0(4g
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 36 be 63 01 78 98 63 bc 9d dd af 81 2c b0 0c 13 67 7e 40 24 5f ea 68 cc 6d 7b 29 ff a9 ef 44 49 a8 ea 2c a9 e4 c9 aa e3 fd 0b 94 21 b7 6a bb e6 ab 96 b0 19 5f 77 0e 18 56 75 dd a3 e3 88 13 3c d5 9c 6b 8d 2e 87 56 d5 1d 1c 34 2c 1d 23 d8 71 b8 17 9a 07 b7 a1 99 98 e6 59 61 d6 61 af 9c 35 34 25 99 76 58 ba 7b 6e c4 3d d5 1c 82 1a b0 ad 9a 1a d8 89 4b fc 70 bd 67 c4 46 ba 0b eb b9 d6 9b b6 b8 6c 2b a7 bb c0 de ce a2 2d 08 4a ec c3 b4 5f 81 35 ae da 9c 79 b0 39 c1 a7 65 eb c2 38 f5 d2 57 1f 9c c8 ec c4 3d e3 f7 f9 f5 d7 63 8c 60 e5 66 04 32 21 b8 3d 1b b0 48 7a cc 4b 8e d5 03 c5 02 ce d9 05 2f b9 e5 3b 34 a3 af c7 99 d3 06 8e c2 a1 2f 09 59 00 6a 54 d4 96 6f d6 5e df 57 c0 76 ac 59 f4 e0 b8 74 cf ba e1 d2 2f 83 e9 d0 29 2a f6 2e f8 1d ed 4b b0 ff eb c4 a0 6d Data Ascii: 6cxc,g~@$_hm{)DI,!j_wVu<k.V4,#qYaa54%vX{n=KpgFl+-J_5y9e8W=c`f2!=HzK/;4/YjTo^WvYt/)*.Km
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 17 5e 05 74 d6 86 a7 63 a2 b8 53 8a 19 57 e0 ea 71 c6 5e 61 a7 2d 1e c3 c8 c6 16 df 52 7c 4b 8e c0 10 bb 1e a0 a6 f0 71 df e2 ec a8 36 4a 9b 91 b1 b2 b7 79 dc 72 db 07 b9 00 58 bb c8 b5 02 d7 88 05 65 b8 80 eb 1a 9d b5 b3 33 8c 8d 9b 11 80 37 9e 78 04 69 5b 50 2b d5 c5 eb c5 3b 13 d6 e4 6c 4d 71 71 75 b1 74 4d 07 28 94 c6 44 8d f0 b6 c4 a6 e6 58 ef 52 06 1c a4 0d 6c 88 47 b6 00 8a 0a 56 56 b3 72 fd 4a 25 b5 5f 5e 81 57 a0 19 34 ef 93 d8 85 8d 0e 70 20 e2 41 bb 87 5d 29 20 d0 7f c9 55 ff 45 43 1a 52 39 f4 c0 8c 26 7a c2 13 c8 24 d3 6d f5 d9 74 9c 48 cc 47 8b ab 1f 7d fd 34 b7 39 08 94 85 15 4c 02 1a 92 35 ec 10 2a 9d 39 b2 81 c4 ce 79 c3 ed 89 2b 9e 6c a2 b6 71 92 3b cc ac e6 96 cd 47 17 aa 95 5c b5 92 7f 32 6b 03 c0 be 46 bd 27 57 0a 36 5b 0f 4e a4 61 6c Data Ascii: ^tcSWq^a-R\|Kq6JyrXe37xi[P+;lMqqutM(DXRlGVVrJ%_^W4p A]) UECR9&z$mtHG}49L5*9y+lq;G\2kF'W6[Nal
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 02 a4 b3 58 4b 5b 4f 16 7f 83 f7 2a 09 b5 04 a4 ab 76 53 4b 41 64 e5 8d 15 c3 c9 c3 31 56 85 11 62 da 53 d3 93 d6 b1 dc 75 e6 f2 f0 3b 5e f2 9b 28 c6 fa 8b 41 a9 42 b5 3a 17 77 9e a4 c0 e5 5e 45 b3 eb 95 8d a4 41 be 42 25 2a d0 d5 b4 bb f9 67 b3 ea ca 7e e0 99 b4 cd cf 1e 78 2e b0 f9 85 e6 17 9b 36 4d 7f 78 5b eb 69 65 f2 f5 5d dc 39 9d 7b 5f 5d ec 2a ef 9b 8b 5f 15 72 cf c2 53 b5 a0 70 11 22 45 41 89 16 03 2d 56 1c 02 d5 94 66 06 d0 19 4c d6 81 a2 77 33 5b 99 a4 72 79 7c 81 50 64 6e 61 09 f2 dc 4d e7 ee 49 fb 72 eb 5d 43 05 2b ac ac 6d 6c ed ec 1d 1c 41 b1 92 84 c6 60 86 32 9c 91 8c 66 2c e3 99 80 83 8d 6f e4 85 9c fc 50 42 4d 41 0a 53 14 5a 8a 53 9a b2 94 a7 2a d5 a9 49 6d ea 52 9f 86 0c a4 22 95 29 81 d4 2e 3a ce 87 70 48 28 34 8e c5 4e b2 25 a9 6b 52 Data Ascii: XK[OvSKAd1VbSu;^(AB:w^EAB%g~x.6Mx[ie]9{_]_rSp"EA-VfLw3[ry\|PdnaMIr]C+mlA`2f,oPBMASZSImR").:pH(4N%kR
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 24 69 32 94 51 49 13 34 45 9b 69 1e 35 d1 22 5a 46 38 4a 27 2a 95 51 25 d5 29 36 f8 02 ca 52 a4 b4 32 2a 51 cb 1a 4b 96 e4 3c 92 f3 eb 41 5d d3 52 87 7a bb 9e a5 cb 9c 8b bb da 6a 11 ff 90 7f d6 1b 27 8f 53 c7 19 63 d1 58 de 46 4f 26 fd 04 aa d3 71 d8 cc 2a 99 b3 b9 b2 b4 d5 b8 b6 ab fd 76 61 18 83 e5 6a 20 a2 74 b2 91 bc 6e 7a 4a 33 0f 46 5c 27 ab f4 ed e5 a4 a4 4a ad cc ca ee 26 60 d0 74 ee 07 13 36 93 17 d7 a5 c9 af 13 fe b9 51 38 0b 90 20 aa 56 d0 38 6b 24 0b 59 59 02 11 a9 b4 71 35 aa 53 8d ce 07 5a 68 65 e1 5d d8 58 c8 a6 8f b3 c6 62 98 49 db fa bf fa fb 3e e4 b1 7d d0 79 e6 78 ef 8d 1c b1 6b 61 94 76 3d 60 17 9a 68 cf 68 ad 77 c9 ad ef 4e 8b 05 80 09 bc 83 7f c0 41 de c8 ff a4 7f e2 3f e1 ff f9 f0 36 f2 77 22 27 5a 4a 69 c3 6b c3 fc df 63 47 ff dd Data Ascii: $i2QI4Ei5"ZF8J'Q%)6R2QK<A]Rzj'ScXFO&q*vaj tnzJ3F\'J&`t6Q8 V8k$YYq5SZhe]XbI>}yxkav=`hhwNA?6w"'ZJikcG
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 99 38 96 e4 ef a3 7a b1 7e 9c 5f 25 d9 3c c8 fc 09 9e d9 70 b5 ee 7b c8 5b 67 c4 50 28 83 ba d8 c9 c0 19 6d 94 f6 32 89 9d 1b e9 32 2f 9b 38 a6 a5 37 97 08 da 63 c6 ea 4a a4 10 56 12 79 9a f3 b8 c6 77 1f 4c b4 d1 ae 77 d1 d2 2c 4e cd c9 ce ae 37 80 e9 eb 0c 87 86 b8 be 84 b1 60 b0 e4 6d f1 41 11 6e 82 34 29 e4 8e ec 19 a5 de d5 ba 1e ff 94 dc 64 0c 4c 52 d8 9d 7d d2 07 af 49 6e 6e d8 83 99 4e 50 6b b3 71 98 99 46 76 62 c5 f2 63 e1 74 21 76 3b 06 e9 ae cc 81 6b a7 e0 67 2f 04 b4 8e 1c 9b b7 ce 4b b4 8e 86 85 90 eb 8f fa 52 1a 95 ae c7 a3 51 bb ca 24 38 cf 8c 81 ec 76 a2 91 95 f0 01 af ca 43 0a ad a0 de 37 1b 00 ba 1c e0 8c 16 a9 96 30 77 bc 8e 70 09 81 1b 08 d3 7f 61 b2 6c cd 4a 5c 21 09 4d b9 09 80 cd 96 f8 0a 0c 2a 9a 36 6d 61 ef b5 0d 60 84 d4 aa 15 c1 Data Ascii: 8z~_%<p{[gP(m22/87cJVywLw,N7`mAn4)dLR}InnNPkqFvbct!v;kg/KRQ$8vC70wpalJ\!M*6ma`
2024-03-03 23:26:31 UTC	1300	IN	Data Raw: 75 c9 61 79 14 91 ed 9c b0 b9 63 f1 87 ae cf 04 31 c2 13 88 12 ce 27 3d 8e 18 cb c0 98 c6 5d 7d cf 4f c6 68 76 43 95 b8 17 e1 e6 44 3d a2 16 eb 2f cf f0 80 20 59 56 e0 54 37 1e 01 5e 73 cc da 1f dc dd e1 09 9a c1 9a a3 0e a8 bb df 03 97 b5 b4 e6 6e fc 72 b1 30 44 f8 2d 5c 7e b5 01 ae 60 6e f1 6b 0f 15 9d 75 76 4b 81 f7 2e ef 5b c7 7b 1a 27 c4 88 f6 de 43 56 bd 32 fd 95 19 19 d6 18 72 49 c5 c8 7b b3 a6 84 92 8a 48 c5 57 81 7f 13 ba f5 d1 17 02 64 37 84 98 ed 6b 88 32 a1 5e 35 ff 3a f0 6d 42 8b f7 e1 4e 17 2d fd 96 30 6f 7f ae 5d ef e1 fd 69 4b 9d 43 e2 88 70 d8 ab 2d bf 9c 1a ae 24 e4 0b 21 38 b6 95 a9 9d ac a4 f8 94 f9 ee 76 20 9a d1 4e 48 80 80 bd 06 f5 de 42 53 7c e2 e0 b8 dd 69 ac 37 b6 5b 5a de 58 40 a3 23 ea 96 f8 c3 51 0f 52 2d b5 82 5a 83 bc 9d 94 Data Ascii: uayc1'=]}OhvCD=/ YVT7^snr0D-\~`nkuvK.[{'CV2rI{HWd7k2^5:mBN-0o]iKCp-$!8v NHBS\|i7[ZX@#QR-Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49775	152.195.55.192	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	521	OUT	GET /cmp.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:31 UTC	534	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 2039 Cache-Control: max-age=3600 Content-Type: application/javascript Date: Sun, 03 Mar 2024 23:26:31 GMT Etag: "6863ce0703ce4f482389f8a7e640e4e6" Expires: Mon, 04 Mar 2024 00:26:31 GMT Last-Modified: Thu, 08 Feb 2024 18:14:22 GMT Server: ECD (nya/78BB) Vary: Accept-Encoding x-amz-id-2: 3DrfKWC+bABFKrK9bXYmdP282qzyUE2lQN48YF4aoI6KMK7BXSB4GAyk58xRUElXpTL3lachcDc= x-amz-request-id: 7WNR35MJ2AQF756W X-Cache: HIT X-EC-BBR-Enable: 1 Content-Length: 184464 Connection: close
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 31 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 3d 73 7d 2c 35 31 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 43 6f 6d 6d 61 6e 64 3d 76 6f 69 64 20 30 3b 74 2e 43 6f 6d 6d 61 6e 64 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 73 75 63 63 65 73 73 3d 21 30 2c 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 3d 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 7b 63 61 6c 6c 62 61 63 6b 3a 74 2c 70 61 72 61 6d 65 74 65 72 3a 6e 7d 29 7d 65 78 65 63 75 74 65 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 73 70 6f 6e 64 28 29 7d Data Ascii: =s},5148:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Command=void 0;t.Command=class{constructor(e,t,n){this.success=!0,this.cmpApiContext=e,Object.assign(this,{callback:t,parameter:n})}execute(){try{return this.respond()}
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 45 6e 63 6f 64 61 62 6c 65 46 69 78 65 64 42 69 74 66 69 65 6c 64 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 33 37 39 36 29 2c 69 3d 6e 28 37 34 30 29 3b 63 6c 61 73 73 20 6f 20 65 78 74 65 6e 64 73 20 69 2e 41 62 73 74 72 61 63 74 45 6e 63 6f 64 61 62 6c 65 42 69 74 53 74 72 69 6e 67 44 61 74 61 54 79 70 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 3d 65 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 73 65 74 56 61 6c 75 65 28 65 29 7d 65 6e 63 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 72 2e 46 69 78 65 64 42 69 74 66 69 65 6c 64 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 74 68 69 73 2e 76 61 6c 75 65 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 29 7d 64 65 63 6f 64 65 Data Ascii: EncodableFixedBitfield=void 0;const r=n(3796),i=n(740);class o extends i.AbstractEncodableBitStringDataType{constructor(e){super(),this.numElements=e.length,this.setValue(e)}encode(){return r.FixedBitfieldEncoder.encode(this.value,this.numElements)}decode
2024-03-03 23:26:31 UTC	3	IN	Data Raw: 64 45 72 Data Ascii: dEr
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 72 6f 72 3d 6e 7d 2c 31 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 39 39 37 33 29 3b 63 6c 61 73 73 20 69 20 65 78 74 65 6e 64 73 20 72 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 69 7d 2c 34 35 30 34 3a 66 75 6e 63 74 69 6f Data Ascii: ror=n},1104:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.LazyDecodingError=void 0;const r=n(9973);class i extends r.DecodingError{constructor(e){super(e),this.name="LazyDecodingError"}}t.LazyDecodingError=i},4504:functio
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 29 2c 6e 65 77 20 6f 2e 45 6e 63 6f 64 61 62 6c 65 46 6c 65 78 69 62 6c 65 42 69 74 66 69 65 6c 64 28 28 28 29 3d 3e 64 2e 67 65 74 56 61 6c 75 65 28 29 29 2c 5b 5d 29 29 2c 73 75 70 65 72 28 74 2c 5b 5b 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 52 45 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 4c 41 53 54 5f 55 50 44 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 Data Ascii: ),new o.EncodableFlexibleBitfield((()=>d.getValue()),[])),super(t,[[p.TcfCaV1Field.VERSION.toString(),p.TcfCaV1Field.CREATED.toString(),p.TcfCaV1Field.LAST_UPDATED.toString(),p.TcfCaV1Field.CMP_ID.toString(),p.TcfCaV1Field.CMP_VERSION.toString(),p.TcfCaV1
2024-03-03 23:26:31 UTC	16383	IN	Data Raw: 30 31 22 3a 72 3d 21 30 2c 6e 5b 31 5d 3d 69 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 63 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 64 65 63 6f 64 65 20 73 65 67 6d 65 6e 74 20 27 22 2b 74 5b 65 5d 2b 22 27 22 29 7d 7d 74 68 69 73 2e 64 65 63 6f 64 65 53 65 67 6d 65 6e 74 73 46 72 6f 6d 42 69 74 53 74 72 69 6e 67 73 28 6e 29 2c 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 61 2e 55 73 43 74 56 31 46 69 65 6c 64 2e 47 50 43 5f 53 45 47 4d 45 4e 54 5f 49 4e 43 4c 55 44 45 44 29 2e 73 65 74 56 61 6c 75 65 28 72 29 7d 67 65 74 49 64 28 29 7b 72 65 74 75 72 6e 20 6c 2e 49 44 7d 67 65 74 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 6c 2e 4e 41 4d 45 7d 7d 74 2e 55 73 43 74 56 31 3d 6c 2c 6c 2e Data Ascii: 01":r=!0,n[1]=i;break;default:throw new c.DecodingError("Unable to decode segment '"+t[e]+"'")}}this.decodeSegmentsFromBitStrings(n),this.fields.get(a.UsCtV1Field.GPC_SEGMENT_INCLUDED).setValue(r)}getId(){return l.ID}getName(){return l.NAME}}t.UsCtV1=l,l.
2024-03-03 23:26:32 UTC	16383	IN	Data Raw: 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 41 44 44 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 3b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 75 69 6c 74 2d 49 6e 20 43 75 73 74 6f 6d 20 43 6f 6d 6d 6d 61 6e 64 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 3a 20 55 73 65 20 22 29 2e 63 6f 6e 63 61 74 28 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 47 45 54 5f 54 43 5f 44 41 54 41 2c 22 20 69 6e 73 74 65 61 64 22 29 29 3b 69 66 28 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 52 45 4d 4f 56 45 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 2c 6e 75 6c 6c Data Ascii: ion(){function e(e){if(e){var n=o.TCFCommand.ADD_EVENT_LISTENER;if(null==e?void 0:e[n])throw new Error("Built-In Custom Commmand for ".concat(n," not allowed: Use ").concat(o.TCFCommand.GET_TC_DATA," instead"));if(n=o.TCFCommand.REMOVE_EVENT_LISTENER,null
2024-03-03 23:26:32 UTC	16383	IN	Data Raw: 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 72 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 50 69 6e 67 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 6e 28 38 34 38 38 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 65 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 74 2e 63 6d 70 Data Ascii: ");function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)});Object.defineProperty(t,"__esModule",{value:!0}),t.Ping=void 0;var o=n(8488),s=function(e){function t(){var t=e.call(this)\|\|this;return t.cmp
2024-03-03 23:26:32 UTC	16383	IN	Data Raw: 53 74 61 74 65 3d 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 44 4f 4e 45 29 69 66 28 73 2e 73 74 61 74 75 73 3e 3d 32 30 30 26 26 73 2e 73 74 61 74 75 73 3c 33 30 30 29 7b 76 61 72 20 65 3d 73 2e 72 65 73 70 6f 6e 73 65 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 28 65 29 7d 65 6c 73 65 20 6f 28 6e 65 77 20 45 72 72 6f 72 28 22 48 54 54 50 20 53 74 61 74 75 73 3a 20 22 2e 63 6f 6e 63 61 74 28 73 2e 73 74 61 74 75 73 2c 22 20 72 65 73 70 6f 6e 73 65 20 74 79 70 65 3a 20 22 29 2e 63 6f 6e 63 61 74 28 73 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 29 29 29 7d 29 29 2c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 Data Ascii: State==XMLHttpRequest.DONE)if(s.status>=200&&s.status<300){var e=s.response;if("string"==typeof e)try{e=JSON.parse(e)}catch(e){}i(e)}else o(new Error("HTTP Status: ".concat(s.status," response type: ").concat(s.responseType)))})),s.addEventListener("error

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49803	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:31 UTC	580	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: yRmfATNd35xsCL2csE44Cx12GfloQHQmJfdnJPAfoiH+YQSX9f5kQlTcDVQWUD2/C47ld+mQ4Mg= x-amz-request-id: 6KRXWK0Y6NYTKVBV Date: Mon, 22 Jan 2024 15:54:26 GMT Last-Modified: Wed, 25 Jan 2023 09:31:52 GMT ETag: "b038ffc2a3543db59d8b131cc5f9585d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 51136 Referrer-Policy: no-referrer-when-downgrade Age: 3569527 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c7 c0 00 0d 00 00 00 02 6d 5c 00 00 c7 67 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b a7 66 1c cc 74 06 60 00 85 52 0a 87 da 40 86 c6 24 01 36 02 24 03 a1 0a 0b 90 48 00 04 20 05 8b 08 07 c5 15 5b 10 1a 92 44 54 22 b7 7f f9 84 b6 55 60 7c 5b 35 60 8e 79 2f 27 70 6e d3 4b dc 4a 77 82 b5 ca e6 5d fe 78 89 78 fb 40 40 77 00 5d 7f 62 45 48 f6 ff ff ff ff 7f 7a d2 90 c3 72 a7 4d da 2a 83 61 d8 cc fe 41 88 46 a0 9b 94 4b 6e 99 0b 4b 42 ed 0a 4a e9 db 9a 1f ad 72 cb 92 0a 91 86 ac 94 e5 a5 76 4c 4d 06 66 9a a9 f1 c0 e0 25 81 c4 8c 1e 9a 59 f9 5c 56 97 74 49 77 a4 2b fa 43 83 cd bc cc 73 9f 97 c3 39 a3 db e7 cd 1b b7 ae 7b 23 9d 78 46 3b 7d 50 e9 5c fe e4 33 fc 9a 1d d6 88 77 7f 75 7b 46 37 da d3 Data Ascii: wOF2m\g@ft`R@$6$H [DT"U`\|[5`y/'pnKJw]xx@@w]bEHzrM*aAFKnKBJrvLMf%Y\VtIw+Cs9{#xF;}P\3wu{F7
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: e9 fe 9d 19 57 f9 25 ca 2a bd 10 68 07 9d d9 32 28 4d d9 6f e9 cf ac dc 24 b7 94 52 b9 c5 6c a6 63 07 2f 2c 21 f8 30 ca ff cd 95 36 d9 bb b2 02 74 c0 c6 e1 f3 7d 55 28 6b c4 ee 9f 99 4c 32 7f 27 b7 97 2c f0 bd db bd 2b 51 4a 90 6c 0a 93 94 68 bb aa 40 42 02 91 90 55 ae b2 ae 46 d6 ff 5a fb 37 7b 4f 65 3a 75 6f 65 26 c8 93 b0 a4 f2 e1 f2 91 31 32 ea a5 a7 df 9f ba 6f ba 7f 7e 3f 08 11 cc 0f 2c b2 5c b9 46 11 3b b6 88 4e ac d3 8b c0 36 43 d1 25 b1 64 93 3d 8b 18 05 c5 fa 76 38 bc 3c c4 c3 7f b7 9a f7 87 e6 52 87 64 8d b5 92 24 bb 1b f6 ef d7 0e dd f1 fa af 22 9f 52 ca 9b 93 10 82 84 10 a4 13 91 22 dd 71 fa ce ec 73 9e 04 99 2e 7b 28 ee 16 06 f3 1b 8c 2a 84 11 42 18 35 84 5e 0e 3d 96 1b 47 a5 72 93 99 ac 88 9f d3 7e 5a 2f 48 ca 80 ae af 8a 49 b0 d3 d5 d8 53 Data Ascii: W%h2(Mo$Rlc/,!06t}U(kL2',+QJlh@BUFZ7{Oe:uoe&12o~?,\F;N6C%d=v8<Rd$"R"qs.{(B5^=Gr~Z/HIS
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: d8 34 a0 65 e6 69 5d 3d b2 75 3c 0f 4e 25 c4 ae 56 ce 6f 50 bc b7 d1 32 46 f7 8c df 25 2d 20 69 83 85 00 58 ad 52 b3 95 45 9c e6 24 fb 50 2c 53 67 fe 23 cf 4d 6a b4 e8 30 60 c8 88 31 53 96 ec 38 a3 a2 63 e3 e0 5a ad dc 2d d5 6a d4 a2 63 68 71 07 cb 7d 9d 7a cc e1 f8 62 de 32 1e 3f 58 a7 dd 5a 58 a1 4e 33 a9 d1 a5 87 c0 ca 5e 36 48 58 d8 b8 78 04 84 44 24 a4 e4 14 94 10 2a 7a 25 2c ea 34 59 68 91 74 14 19 ae c8 92 2d 47 be 42 45 8a d1 54 a9 d6 a4 19 d3 7d 9d 1e e8 f5 d0 a0 b4 0c 40 66 cb 29 ea d9 f4 d7 f6 d2 0c 17 57 77 1e 78 e8 71 9e 0c 71 8a 61 39 5e 10 35 dd b4 6c d7 f3 c3 ac 69 47 56 0c 04 23 d1 58 56 38 03 98 bd 34 a0 2c 3d e0 84 a4 58 8a d5 b6 7d d8 2d 60 fe 5e 7b 7e ab a9 2f 2f 2d 76 86 10 7f 4c 83 5d e6 0f 87 79 6e 97 57 5e de 5d ed c1 dc 5c a1 2d Data Ascii: 4ei]=u<N%VoP2F%- iXRE$P,Sg#Mj0`1S8cZ-jchq}zb2?XZXN3^6HXxD$*z%,4Yht-GBET}@f)Wwxqqa9^5liGV#XV84,=X}-`^{~//-vL]ynW^]\-
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 25 96 76 21 5f af 84 c4 00 ee cf 77 ec 99 f8 93 90 b3 57 6c 44 00 db 57 eb b8 9b 91 39 99 1c 9d 25 e9 1c 9d 35 e1 8e 62 4b d2 d5 3c f1 90 98 04 89 01 10 82 a0 80 90 01 14 6b 10 91 86 45 0a 12 49 05 40 84 01 52 30 74 bd c6 5f 72 16 12 c2 2f a6 c0 8e e2 06 28 f0 09 24 8e 2f 71 e3 4a 3f 70 4c 3e fb a9 3e cc 61 99 8e e9 b8 1f 70 b2 52 4a a1 24 bb 59 b2 eb 97 9a 5a 83 aa 55 f1 2d 42 88 a6 b0 32 c7 45 0e b1 ab d5 2c 69 14 b4 a9 05 bd d5 a4 06 c4 54 bd 4a 94 ad 73 8a 54 a8 7c e5 28 13 69 08 2b 21 f0 97 65 1f 4d eb d2 a2 d2 3f 99 55 08 5c 5f 9a 80 0f e1 75 5e 11 d1 f9 b8 4f f8 a4 af 32 6c 9d 3d d0 2d dc 64 1f 03 9f d0 c2 9f ed 4e ee c2 1b bb 4f 8a 0a 3d ec 42 84 80 48 07 5b c8 3e e0 94 92 93 c9 59 b7 1d 76 cb 2e 67 6d 91 6a a5 14 f3 24 9b 26 c9 78 c3 1e 37 64 a0 Data Ascii: %v!_wWlDW9%5bK<kEI@R0t_r/($/qJ?pL>>apRJ$YZU-B2E,iTJsT\|(i+!eM?U\_u^O2l=-dNO=BH[>Yv.gmj$&x7d
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 4e 93 bb ba 97 0d 0f b0 9c 57 9f 4f de 84 b9 bd ac d9 71 b5 43 9b db ee ec af 95 ad f9 30 9b 79 99 fb 56 49 d0 a0 49 9b 0e 33 36 dc 4d 28 53 e1 96 46 ed 3a 75 e9 31 bf 08 5d c3 05 6d 9c c3 ed a5 a9 21 b2 60 c5 1e 09 dd 6a f5 9a b5 ea c0 6c bf 83 a6 20 55 66 53 78 58 ae 79 8f bf 6e 28 8d c6 d1 7a 8e 83 61 81 a7 cc 6a 91 3f 65 38 17 0d d6 ad bc 93 c6 d4 ac e1 97 94 b6 de 22 dd 6d 0f 88 71 58 74 5f ab 0d 17 86 be 43 b3 21 2c b4 39 38 37 08 1b d8 0e 14 06 b0 e0 c7 36 dc 32 fb 55 fd cc 3e be b7 d1 d5 77 f6 75 a3 86 56 eb 52 59 72 a2 29 2e 85 82 53 d5 a6 73 8a 95 a7 1c 25 c6 7b 13 5a 64 3a c7 c2 44 c5 0e a4 b8 c0 d8 ac 41 52 60 0c d5 bd 23 51 22 4d 8c 90 fe 02 e3 bc 3f 91 4a f3 08 f2 bd 7b 73 80 bc 82 8c ab f7 1e 67 1e 9b 74 75 da 70 42 3c af 0c c9 24 46 47 d2 Data Ascii: NWOqC0yVII36M(SF:u1]m!`jl UfSxXyn(zaj?e8"mqXt_C!,98762U>wuVRYr).Ss%{Zd:DAR`#Q"M?J{sgtupB<$FG
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: a0 f4 5c 94 5a a0 36 c9 91 e1 8a 22 af 98 97 9f 26 37 8c ff a2 1c 86 8f 6b 68 e2 1b f7 e8 53 44 19 c2 14 52 a3 80 9f c2 6f ea b7 67 2f e0 dc 3d 7e ee 3d 98 da 30 d4 a8 50 24 ef 6a ae ad 2d e1 90 ef a5 2a 90 3a f9 af c3 c1 bf 83 fe 99 3a b4 19 da 18 c4 43 68 35 b4 52 b0 3c 6a 6a 89 43 f3 05 5f 95 e0 cb a0 81 2b 37 d4 a5 da b8 ed ea 1c 81 af b8 67 48 8f 19 a2 15 d1 83 35 c3 9f cb 23 15 5a 5c ca 99 7e 25 aa 1c 07 4b e5 eb b9 08 e2 4b 04 b0 03 33 47 ce 68 14 2c 45 8b 38 85 49 ec aa a1 4f 35 3d 52 2d e3 aa 6d ba 55 e7 e7 d4 0f ac 12 0e b4 38 00 05 35 45 71 32 9a 47 c4 c0 01 6e 94 21 01 6f 58 44 e8 58 31 1e 1d 18 2a 51 65 bb 64 58 55 56 98 08 07 32 a0 46 8e 18 54 b1 f5 1f 9e 79 90 2c 23 e4 8f 36 74 65 f2 64 8e 60 af 9f 89 8a 10 5d 11 13 3a 70 a4 a1 e5 c0 c1 26 Data Ascii: \Z6"&7khSDRog/=~=0P$j-::Ch5R<jjC_+7gH5#Z\~%KK3Gh,E8IO5=R-mU85Eq2Gn!oXDX1QedXUV2FTy,#6ted`]:p&
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 10 a5 31 1b 46 6e 6e 2a 59 3e 9d ee 93 34 a2 a6 ce e4 ba 0c 10 33 a5 e6 5e dd 99 be 14 13 cf 1a 6e bb a8 bc 83 f4 b6 16 77 72 ea 84 2a 2c 20 45 61 b0 4e 85 15 ca 50 90 01 b9 c2 30 14 81 3c 72 2a b2 78 2e 0e 00 32 10 e6 b7 6a 54 36 19 01 7d 41 d2 2f 58 63 38 bc 87 72 68 7a 8e 6b 3b d3 a0 3d 97 e4 cc 42 56 28 28 90 ef 32 fb 14 cd 8f 83 04 ce 9a 0f a4 16 e1 03 06 02 65 aa ba c2 e9 55 8c 56 14 6f 30 ef 16 37 01 45 0e f6 0b 6f 90 32 dd 12 b8 22 61 f2 14 66 58 31 bc e8 92 59 3e 5b 56 51 8d da 7e 07 a8 44 d0 9c ae c8 27 09 b8 f4 90 18 a0 b0 1e ce b1 95 2a 64 94 a3 6d 2a 1e 38 cb 1b ec 9c 80 6c 40 f5 74 62 31 4d 41 7c 75 8a 91 ae 67 7c 78 85 e2 b3 a7 e3 d1 0d 8c 65 7a 64 cf 84 b2 09 eb 30 64 a3 2f 87 bc 47 1a a4 44 16 2a 5c 86 5a 23 ce 6b 7d 7a eb 80 d5 41 04 5f Data Ascii: 1FnnY>43^nwr, EaNP0<rx.2jT6}A/Xc8rhzk;=BV((2eUVo07Eo2"afX1Y>[VQ~D'dm8l@tb1MA\|ug\|xezd0d/GD\Z#k}zA_
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: ea 15 1a b6 80 26 02 a2 a0 8e 53 8b 4a 65 e6 b6 30 e2 3e c8 25 d0 d8 5d a2 dc 13 5e 45 79 a8 e0 38 a2 28 24 ca 3c f3 56 e6 45 54 ee 7a c5 ac 40 68 98 0b 8b fa 61 99 57 ba 96 66 14 6f 69 5b 07 75 27 2d 14 44 47 00 dc 9b 19 82 20 70 18 93 c2 8b 39 55 93 2c f0 97 21 24 a5 80 f4 3d 2e 25 d4 bd b4 4d 14 0d 66 e5 83 45 e4 eb 1d 07 a1 ce 9c 79 51 ea 7b a6 de f4 d6 2c ea 8b 74 3d 47 4e 22 22 81 90 04 4a 08 e8 d2 31 c4 92 4b d3 47 1e 25 2c 90 ab 8b e6 44 f3 fe b8 c1 8d 95 2c 25 92 1c 45 d4 81 a1 40 d6 a0 d1 41 fe ea 81 1c 7f 22 04 d7 39 08 68 d3 ae 71 a4 c3 3a 17 16 94 a0 c4 75 20 cf 03 0a 88 28 9f 80 24 68 81 ea 1c ea 21 10 79 5f b6 b0 c4 4c 1b cd 0c 39 7e 50 c2 ff f0 fa 63 33 23 ca ea d2 64 d4 92 0e 50 0b 69 d6 06 e4 12 c1 d9 37 a3 4b a5 00 66 8d f4 f1 7d 1c c5 Data Ascii: &SJe0>%]^Ey8($<VETz@haWfoi[u'-DG p9U,!$=.%MfEyQ{,t=GN""J1KG%,D,%E@A"9hq:u ($h!y_L9~Pc3#dPi7Kf}
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 9c 5c 0d a5 d6 11 6c 18 7f 54 72 95 25 af a3 01 5d d3 b0 d3 bc 94 94 14 94 9d 2d ba e8 27 87 8c cb 2a 8e 49 5e 87 e1 01 10 29 3d d0 ca 38 c0 95 cf 74 28 b7 84 ea 6c 1a b9 3f 1d b6 71 68 07 51 4d a0 cd 6e a9 5d 07 b1 bf c7 bb db c0 13 98 69 b4 ae a2 77 0e d3 8d c4 17 54 71 1c 33 57 2f 83 bc 4e a3 7e 94 7e 8a 42 ee d3 d6 b8 7b fb 5c 1f 5c bb 6c 3a bb 7b 1d 62 6d b4 58 6c d6 71 6a 07 b5 3d 34 8e 1c bc 33 fc d8 cb 1c 19 34 6b cd c5 b1 d2 a4 44 af b1 b3 78 94 ee 01 cd 5b af 99 9c 1c db 41 9f 04 27 7f 13 7d 4e e5 f4 8b 40 08 4f da 1a ee 16 f2 9f eb fa 4b 5e 90 ed 28 c5 c8 47 fe cc 76 1b de 9d 1f a9 a5 d5 a3 f4 8d 60 08 55 d7 2c 4f a2 bc 76 8c bd 23 23 5d 83 e6 ba 3a 71 b1 e5 f9 9d 14 97 17 18 45 62 e7 3e f8 48 09 d4 99 fe 4f e4 64 9e 94 b6 26 d0 44 f9 0b 65 fd Data Ascii: \lTr%]-'*I^)=8t(l?qhQMn]iwTq3W/N~~B{\\l:{bmXlqj=434kDx[A'}N@OK^(Gv`U,Ov##]:qEb>HOd&De
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: e4 a3 56 1b 89 ca 3a c1 63 7e 55 4c d8 ea 11 52 ca 56 9b 6d ad ab 15 90 ec 3b 06 02 a1 5a 5a 0b c7 ca c0 1f 77 ce c1 30 54 c5 0c 08 d5 70 c1 3d 5c f8 c9 61 af 5a 90 91 8f f3 4b e5 15 4c a9 15 60 a1 28 ac c6 d5 f9 29 a7 69 77 ca c7 d2 98 3b 09 0f 56 4a ad e5 39 84 57 72 3c e7 e1 4c 14 98 52 8c ea ae bd db d7 a0 a5 89 4c e8 5a 62 fa c9 ba 37 f6 60 08 db 07 79 36 c3 4d 80 d9 b9 b7 86 ee 84 7f 52 e7 79 14 3c 11 f9 00 62 7e fe 78 62 79 00 9a 92 17 a8 10 bf 67 33 1c c0 62 59 14 d5 c0 46 8d 71 20 db 5d ab 08 39 18 23 52 ee 50 a3 42 88 1b 8d 6c fd 11 ea 1e 6c f7 69 50 00 df e8 02 70 3d 82 6c 60 81 a8 13 02 1d 75 85 8e 0a 24 fe e5 e5 30 ec a4 09 92 b7 50 89 83 96 69 7a d4 dd 21 27 7e 8d fc 3a 44 b4 a5 ca 38 34 92 30 11 99 b6 89 13 6f 8b 9c 69 b8 7a 4d 08 a6 d3 b3 Data Ascii: V:c~ULRVm;ZZw0Tp=\aZKL`()iw;VJ9Wr<LRLZb7`y6MRy<b~xbyg3bYFq ]9#RPBlliPp=l`u$0Piz!'~:D840oizM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49809	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	614	OUT	GET /cv/apiv2/aolfp/images/weather/large/26-cloudy.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: Qg/laI8jzTy3tltOhCUytp4JhYLgJtlYSczXDBOb0m+vXUPbjkK6zYJxV2ujaoTaduTRn4TtaQc= x-amz-request-id: G9BX89GTWKM9KGCH Date: Fri, 01 Mar 2024 15:19:41 GMT Last-Modified: Fri, 17 Mar 2023 06:48:19 GMT ETag: "9845f4f8fca19653ddc63008de59b3ec" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 2323 Referrer-Policy: no-referrer-when-downgrade Age: 202012 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 31 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 32 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 30 2e 38 20 32 36 43 34 37 2e 32 20 32 36 2e 34 20 33 36 20 33 37 2e 32 20 33 34 2e 34 20 35 30 2e 34 43 33 30 20 34 39 2e 36 20 32 35 2e 32 20 34 39 2e 36 20 32 30 20 35 32 2e 38 43 31 34 2e 38 20 35 36 20 31 31 2e 32 20 36 31 2e 32 20 31 30 20 36 37 2e 32 43 39 2e 36 20 37 30 2e 38 20 31 30 20 37 34 20 31 31 2e 32 20 37 37 2e 32 43 31 32 2e 34 20 38 30 20 31 35 2e 32 20 38 32 20 31 38 2e 34 20 38 32 48 36 32 43 37 37 2e 36 20 Data Ascii: <svg width="128" height="128" viewBox="0 0 128 128" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M60.8 26C47.2 26.4 36 37.2 34.4 50.4C30 49.6 25.2 49.6 20 52.8C14.8 56 11.2 61.2 10 67.2C9.6 70.8 10 74 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6
2024-03-03 23:26:32 UTC	1023	IN	Data Raw: 20 31 32 32 20 35 36 2e 34 20 31 32 32 20 37 34 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 32 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 31 36 39 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 32 20 37 34 43 31 32 32 20 39 31 2e 36 20 31 30 37 2e 32 20 31 30 36 20 38 38 2e 38 20 31 30 36 48 34 36 2e 34 43 33 35 2e 32 20 31 30 36 20 32 36 20 39 37 2e 32 20 32 36 20 38 36 2e 34 43 32 36 20 37 35 2e 36 20 33 35 2e 32 20 36 36 2e 38 20 34 36 2e 34 20 36 36 2e 38 43 35 30 20 36 36 2e 38 20 35 33 2e 32 20 36 37 2e 36 20 35 36 20 36 39 2e 32 43 35 38 2e 34 20 35 34 20 37 32 20 34 32 20 38 38 2e 38 20 34 32 43 31 30 37 2e 32 20 34 32 20 31 32 32 20 35 36 2e 34 20 31 32 32 20 37 34 5a 22 20 66 69 6c 6c 3d 22 23 37 44 43 42 46 46 22 20 66 69 6c 6c 2d 6f Data Ascii: 122 56.4 122 74Z" fill="url(#paint2_linear_104_169)"/><path d="M122 74C122 91.6 107.2 106 88.8 106H46.4C35.2 106 26 97.2 26 86.4C26 75.6 35.2 66.8 46.4 66.8C50 66.8 53.2 67.6 56 69.2C58.4 54 72 42 88.8 42C107.2 42 122 56.4 122 74Z" fill="#7DCBFF" fill-o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49812	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	529	OUT	GET /aaq/wf/wf-video-3.1.2.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	855	IN	HTTP/1.1 200 OK x-amz-id-2: vYKGtXkYfijazHuRJfm/tgqL1s/Kxajfc4xMGVe09lTz864sPqfAVOpj0eBYIftfpsJ5pbf/Zt8= x-amz-request-id: 33F4634KD0Z8VVF1 Date: Fri, 09 Feb 2024 15:59:41 GMT Last-Modified: Fri, 09 Feb 2024 08:42:19 GMT ETag: "9183a4186084c8de52d97dd3b48af62a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: yWb_PIONAttr4AdQhEOabtL5LeD82yfz Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 30578 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2014012 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 76 69 64 65 6f 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 76 69 64 65 6f 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 74 2e 69 6e 64 65 78 4f 66 28 61 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: otype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function o(e,t){var i={};for(var a in e)t.indexOf(a)>=0\|\|Object.prototype.hasOwnPrope
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 6e 74 65 72 22 2c 22 68 61 6e 64 6c 65 56 69 64 65 6f 4d 6f 75 73 65 4c 65 61 76 65 22 5d 2c 45 3d 5b 5d 2c 6b 3d 2f 5c 77 7b 38 7d 2d 5c 77 7b 34 7d 2d 5c 77 7b 34 7d 2d 5c 77 7b 34 7d 2d 5c 77 7b 31 32 7d 2f 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 65 64 69 61 49 74 65 6d 73 2c 69 3d 65 2e 70 61 67 65 53 70 61 63 65 49 64 2c 61 3d 65 2e 72 65 67 69 6f 6e 2c 6e 3d 65 2e 73 69 74 65 2c 72 3d 65 2e 6c 61 6e 67 2c 73 3d 65 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 73 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 7b 7d 3a 73 2c 64 3d 65 2e 72 61 70 69 64 43 6f 6e 66 69 67 2c 63 3d 65 2e 76 69 64 65 6f 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2c 66 3d 28 65 2e 66 6f 72 63 65 44 69 73 61 62 6c 65 46 69 72 73 74 41 64 2c 65 2e 6d 65 Data Ascii: nter","handleVideoMouseLeave"],E=[],k=/\w{8}-\w{4}-\w{4}-\w{4}-\w{12}/,O=function(e){var t=e.mediaItems,i=e.pageSpaceId,a=e.region,n=e.site,r=e.lang,s=e.pluginConfigs,l=void 0===s?{}:s,d=e.rapidConfig,c=e.videoRecommendations,f=(e.forceDisableFirstAd,e.me
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 72 3d 69 2e 65 72 72 6f 72 43 6c 61 73 73 2c 6f 3d 69 2e 73 65 6c 65 63 74 6f 72 2c 73 3d 69 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6c 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 65 72 72 6f 72 43 6c 61 73 73 3a 72 2c 73 65 6c 65 63 74 6f 72 3a 6f 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 73 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 45 7d 29 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 79 2b 22 73 72 63 22 29 2c Data Ascii: s.length>1&&void 0!==arguments[1]?arguments[1]:{},r=i.errorClass,o=i.selector,s=i.successClass;a(this,t);var l=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{errorClass:r,selector:o,successClass:s},{STATE_ATTRS:E})),d=e.getAttribute(y+"src"),
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 73 73 43 6c 61 73 73 3a 73 2c 74 61 72 67 65 74 45 6c 65 6d 3a 53 2c 74 72 69 67 67 65 72 3a 76 2c 74 79 70 65 3a 66 2c 76 69 64 65 6f 48 61 6e 64 6c 65 3a 6e 75 6c 6c 3d 3d 3d 67 7c 7c 76 6f 69 64 20 30 3d 3d 3d 67 3f 31 3a 4e 75 6d 62 65 72 28 67 29 2c 76 69 64 65 6f 4c 6f 61 64 43 6c 61 73 73 4e 61 6d 65 3a 54 2c 61 64 56 69 65 77 43 6f 6e 74 69 6e 75 6f 75 73 3a 6e 75 6c 6c 3d 3d 3d 49 7c 7c 76 6f 69 64 20 30 3d 3d 3d 49 3f 30 3a 4e 75 6d 62 65 72 28 49 29 7d 29 2c 6c 2e 5f 73 74 61 74 65 3d 75 28 7b 7d 2c 6c 2e 5f 73 74 61 74 65 2c 7b 61 64 50 6c 61 79 69 6e 67 3a 21 31 2c 61 64 56 69 65 77 65 64 3a 21 31 2c 63 72 65 61 74 65 64 3a 21 31 2c 6d 6f 75 6e 74 65 64 3a 21 31 2c 70 6c 61 79 69 6e 67 3a 21 31 2c 70 6c 61 79 69 6e 67 41 73 50 6c 61 79 6c 69 Data Ascii: ssClass:s,targetElem:S,trigger:v,type:f,videoHandle:null===g\|\|void 0===g?1:Number(g),videoLoadClassName:T,adViewContinuous:null===I\|\|void 0===I?0:Number(I)}),l._state=u({},l._state,{adPlaying:!1,adViewed:!1,created:!1,mounted:!1,playing:!1,playingAsPlayli
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 63 6f 6e 66 69 67 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 61 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 61 2e 74 79 70 65 2c 72 3d 61 2e 70 6c 61 79 6c 69 73 74 54 72 69 67 67 65 72 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 79 76 69 64 65 6f 22 3a 74 68 69 73 2e 5f 63 72 65 61 74 65 59 56 69 64 65 6f 28 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 79 76 69 64 65 6f 50 6c 61 79 6c 69 73 74 22 3a 76 61 72 20 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 73 3d 6f 2e 65 6c 65 6d 2c 6c 3d 6f 2e 74 61 72 67 65 74 45 6c 65 6d 3b 74 68 69 73 2e 61 64 64 54 6f 50 6c 61 79 6c 69 73 74 46 6f 72 56 69 64 65 Data Ascii: ngth>0&&void 0!==arguments[0]?arguments[0]:{},t=e.config,i=void 0===t?{}:t,a=this._util,n=a.type,r=a.playlistTrigger;switch(n){case"yvideo":this._createYVideo(i);break;case"yvideoPlaylist":var o=this._util,s=o.elem,l=o.targetElem;this.addToPlaylistForVide
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 73 29 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 72 65 61 74 65 59 56 69 64 65 6f 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 69 2e 66 6f 72 63 65 2c 6e 3d 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2c 72 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3b 69 66 28 6e 7c 7c 21 72 29 7b 76 61 72 20 73 3d 74 68 Data Ascii: .classList.add(s)}}}},{key:"_createYVideo",value:function(){var e=this,t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},i=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=i.force,n=void 0!==a&&a,r=this._util.player;if(n\|\|!r){var s=th
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 52 65 6e 64 65 72 3a 21 31 2c 72 61 70 69 64 43 6f 6e 66 69 67 3a 7b 70 61 67 65 50 61 72 61 6d 73 3a 43 7d 7d 2c 62 2c 7b 61 75 74 6f 70 6c 61 79 3a 21 21 6d 7d 29 3b 50 3d 4f 28 50 29 3b 74 72 79 7b 69 66 28 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 29 74 72 79 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 2e 64 65 73 74 72 6f 79 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 2e 56 69 64 65 6f 50 6c 61 74 66 6f 72 6d 2e 56 69 64 65 6f 50 6c 61 79 65 72 28 50 29 2c 21 64 29 7b 76 61 72 20 45 3d 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 77 61 66 65 72 2d 79 76 69 64 65 6f 22 29 5b 30 5d 3b 45 26 26 45 Data Ascii: Render:!1,rapidConfig:{pageParams:C}},b,{autoplay:!!m});P=O(P);try{if(this._util.player)try{this._util.player.destroy()}catch(e){}if(this._util.player=new window.YAHOO.VideoPlatform.VideoPlayer(P),!d){var E=l.getElementsByClassName("wafer-yvideo")[0];E&&E
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 69 73 2e 6d 75 74 65 3d 21 74 68 69 73 2e 6d 75 74 65 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 46 75 6c 6c 73 63 72 65 65 6e 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 22 79 76 69 64 65 6f 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 79 70 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3b 74 26 26 74 2e 73 65 74 46 75 6c 6c 73 63 72 65 65 6e 28 21 74 2e 67 65 74 46 75 6c 6c 73 63 72 65 65 6e 28 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 56 69 64 65 6f 4d 6f 75 73 65 45 6e 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 22 79 76 69 64 65 6f 50 6c 61 79 6c 69 Data Ascii: is.mute=!this.mute)}},{key:"handleFullscreenClick",value:function(e){if(e.preventDefault(),"yvideo"===this._util.type){var t=this._util.player;t&&t.setFullscreen(!t.getFullscreen())}}},{key:"handleVideoMouseEnter",value:function(){var e=this;"yvideoPlayli
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 3d 65 7d 7d 2c 7b 6b 65 79 3a 22 70 6c 61 79 6c 69 73 74 49 74 65 6d 41 63 74 69 76 65 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 70 6c 61 79 6c 69 73 74 2d 61 63 74 69 76 65 22 29 2c 76 6f 69 64 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 6c 61 79 69 6e 67 41 73 50 6c 61 79 6c 69 73 74 3d 21 30 29 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 6c 61 79 69 6e 67 41 73 50 6c 61 79 6c 69 73 74 3d 21 31 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 70 6c 61 79 6c 69 73 74 2d 61 63 74 69 76 65 22 29 7d 7d 2c 7b 6b 65 79 3a 22 70 6c 61 79 6c 69 73 74 49 Data Ascii: =e}},{key:"playlistItemActive",set:function(e){var t=this._util.elem;if(e)return t.classList.add("wafer-playlist-active"),void(this._state.playingAsPlaylist=!0);this._state.playingAsPlaylist=!1,t.classList.remove("wafer-playlist-active")}},{key:"playlistI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49811	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	529	OUT	GET /aaq/wf/wf-image-1.4.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: yvqUrP3h7ehL9sGPIyEgII/KPUwBvM/cwfH1YLAP5JyQXfhiARnMe6/6LVhxKHy+yWFW7NptE4A= x-amz-request-id: H7XBA33AKDPF0QZA Date: Fri, 19 Jan 2024 16:43:24 GMT Last-Modified: Fri, 15 Apr 2022 16:44:15 GMT ETag: "0f944c1de0dc49c3bc3219d06247aecb" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 7.1x.E._eKreMwUiAajO1Y2Gu2hueeh2 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 6928 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 3825789 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 69 6d 61 67 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 69 6d 61 67 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 72 29 7b 72 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 73 65 74 22 2c 72 29 2c 65 2e 73 72 63 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 76 61 72 20 61 Data Ascii: e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function n(e,t,r){r&&e.setAttribute("srcset",r),e.src=t}function i(e,t,r){var a
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 72 6f 6f 74 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 64 6f 63 75 6d 65 6e 74 3a 72 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 67 73 2c 69 3d 6e 2e 64 61 72 6b 53 72 63 73 65 74 2c 6c 3d 6e 2e 6e 61 74 69 76 65 43 6c 61 73 73 2c 75 3d 6e 2e 73 65 6c 65 63 74 6f 72 2c 66 3d 6e 2e 73 65 70 61 72 61 74 6f 72 2c 64 3d 6e 2e 73 72 63 73 65 74 2c 70 3d 6e 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 79 3d 6f 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 73 2c 73 65 6c 65 63 74 6f 72 3a 75 2c 73 75 63 63 Data Ascii: ]?arguments[0]:{},r=e.root,s=void 0===r?document:r;a(this,t);var n=t.prototype.configs,i=n.darkSrcset,l=n.nativeClass,u=n.selector,f=n.separator,d=n.srcset,p=n.successClass,y=o(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:s,selector:u,succ
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 72 63 73 65 74 22 2c 64 29 7d 29 29 2c 74 2e 5f 61 64 64 45 76 65 6e 74 73 54 6f 45 6c 65 6d 65 6e 74 28 65 2c 70 2c 22 64 65 66 61 75 6c 74 22 2c 6f 29 7d 72 65 74 75 72 6e 20 61 28 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 43 6f 6c 6f 72 53 63 68 65 6d 61 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 64 61 72 6b 6d 6f 64 65 49 6e 73 74 61 6e 63 65 73 2c 74 3d 21 30 2c 72 3d 21 31 2c 61 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 2c 73 3d 65 2e 6b 65 79 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 74 3d 28 6f 3d 73 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 74 3d 21 30 29 7b 76 61 72 20 6e 3d 6f 2e 76 61 6c 75 Data Ascii: rcset",d)})),t._addEventsToElement(e,p,"default",o)}return a()})}},{key:"handleColorSchemaChange",value:function(){var e=this._state.darkmodeInstances,t=!0,r=!1,a=void 0;try{for(var o,s=e.keys()[Symbol.iterator]();!(t=(o=s.next()).done);t=!0){var n=o.valu
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 72 72 6f 72 28 7b 65 6c 65 6d 3a 65 2c 6d 65 74 61 3a 7b 73 72 63 3a 73 2c 73 72 63 73 65 74 3a 69 7d 2c 6e 61 6d 65 3a 22 57 61 66 65 72 49 6d 61 67 65 22 2c 73 74 61 63 6b 3a 6e 75 6c 6c 7d 29 2c 77 28 74 2c 22 65 72 72 6f 72 22 2c 72 29 2c 77 28 74 2c 22 6c 6f 61 64 22 2c 76 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 22 6e 61 74 69 76 65 22 21 3d 3d 72 3f 28 22 69 6d 61 67 65 22 3d 3d 3d 6c 7c 7c 22 70 69 63 74 75 72 65 22 3d 3d 3d 6c 3f 6e 28 65 2c 73 2c 69 29 3a 65 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3d 27 75 72 6c 28 22 27 2b 73 2b 27 22 29 27 2c 6f 2e 5f 69 74 65 6d 4c 6f 61 64 65 64 28 65 29 29 3a 28 6f 2e 5f 61 64 64 42 6f 75 6e 64 61 72 79 53 75 63 63 65 73 73 43 6c 61 73 73 28 65 29 2c 65 2e 63 6c 61 73 Data Ascii: rror({elem:e,meta:{src:s,srcset:i},name:"WaferImage",stack:null}),w(t,"error",r),w(t,"load",v)},v=function a(){"native"!==r?("image"===l\|\|"picture"===l?n(e,s,i):e.style.backgroundImage='url("'+s+'")',o._itemLoaded(e)):(o._addBoundarySuccessClass(e),e.clas
2024-03-03 23:26:32 UTC	428	IN	Data Raw: 61 74 69 76 65 43 6c 61 73 73 3a 22 77 61 66 65 72 2d 69 6d 67 2d 6e 61 74 69 76 65 22 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 22 77 61 66 65 72 2d 69 6d 67 2d 6c 6f 61 64 65 64 22 2c 61 6c 6c 6f 77 50 72 65 66 65 74 63 68 3a 21 30 7d 2c 74 2e 64 65 66 61 75 6c 74 3d 53 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 73 3d 6f 28 72 28 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c Data Ascii: ativeClass:"wafer-img-native",successClass:"wafer-img-loaded",allowPrefetch:!0},t.default=S,e.exports=t.default},"./src/entry.js":function(e,t,r){"use strict";function a(){return s=o(r("./src/controller.js"))}function o(e){return e&&e.__esModule?e:{defaul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49804	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	578	OUT	GET /caas-assets-production/assets/v1/video_player_wafer.26c9b9ee98384ac4.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 7183168 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:32 GMT Etag: "26c9b9ee98384ac4a431acf585e366ab" Last-Modified: Mon, 11 Dec 2023 19:57:20 GMT Server: ECAcc (nya/78CF) Vary: Accept-Encoding x-amz-id-2: Vsscs2G09WR9XTH6gfTwqwTu9+jqFA8pVkr3Cw8sstvECOMdscJ3Y8EZzS+3WCWlQvtcKYjUdEA= x-amz-replication-status: COMPLETED x-amz-request-id: 6TDHPBE1H3VT96FJ x-amz-server-side-encryption: AES256 x-amz-version-id: pALHbauE6vmpoobFLoMG0iBB_9OY0brI X-Cache: HIT Content-Length: 5590 Connection: close
2024-03-03 23:26:32 UTC	5590	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49808	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	570	OUT	GET /caas-assets-production/assets/v1/dispatcher.707ae9824ebcbc09.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 2416687 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:32 GMT Etag: "707ae9824ebcbc09bbd340e68bbc68bd" Last-Modified: Fri, 02 Feb 2024 10:23:32 GMT Server: ECAcc (nya/78C4) Vary: Accept-Encoding x-amz-id-2: 47Dh6JL5A0tEaHpQRveVM7FFiVly24Gfi+M/4eFmpYXw9Jx4NzxYyxtaa5aFec015YJZWdbq5U4= x-amz-replication-status: COMPLETED x-amz-request-id: 4M9WVT0CW04PYRTH x-amz-server-side-encryption: AES256 x-amz-version-id: nTNAff9C7s61YaZi3nOnfdV643FPWIr4 X-Cache: HIT Content-Length: 4037 Connection: close
2024-03-03 23:26:32 UTC	4037	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49805	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	579	OUT	GET /caas-assets-production/assets/v1/notification_banner.915ccd933b879101.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	983	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 7183166 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:32 GMT Etag: "915ccd933b879101e81b4465e2d17dcb" Last-Modified: Mon, 11 Dec 2023 19:57:16 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/789E) Vary: Accept-Encoding x-amz-id-2: NFpXZVFNX5ctNmWdrVmcQ4oXkdqKgWpQrYy7PVIyozRt4TnD9WMLNbig5SAUM4wqCEDfzV6nYEI= x-amz-replication-status: COMPLETED x-amz-request-id: 2W5N3W4XF03KXAW4 x-amz-server-side-encryption: AES256 x-amz-version-id: SmPmcjRcmXmBGKCy9eeKkJRSKwVStbet X-Cache: HIT Content-Length: 1884 Connection: close
2024-03-03 23:26:32 UTC	1884	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49813	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	530	OUT	GET /aaq/wf/wf-module-2.0.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: 9mnNpk8YsXTq/6OFpuNdz8dNHzAy/JIjYh3iyynYgmmg2Q2VB+DDluCgOzxIlYHWC7xJYUU/foA= x-amz-request-id: 9SZ1QMZEJX0DXVZ5 Date: Sun, 04 Feb 2024 02:01:17 GMT Last-Modified: Wed, 15 Feb 2023 07:47:03 GMT ETag: "9390416f18e2d244487267f89affab32" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Q_qOOo7f75Cp6HzJTHI6hFYh4LHEym7F Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4616 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2496316 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6d 6f 64 75 6c 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6d 6f 64 75 6c 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-module",[],t):"object"==typeof exports?exports["wafer-module"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: rototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var s=Object.assign\|\|function(e){
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 61 7d 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 61 29 2c 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 6d 6f 64 75 6c 65 3a 61 64 64 65 64 22 2c 7b 65 6c 65 6d 3a 65 2c 6d 65 74 61 3a 7b 69 64 3a 66 7d 7d 29 7d 2c 69 2c 30 29 2c 69 7d 72 65 74 75 72 6e 20 75 28 74 2c 65 29 2c 61 28 74 2c 5b 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 69 66 28 72 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 69 64 3b 6c 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 6d 6f 64 75 6c 65 3a 64 65 73 74 72 6f 79 65 64 22 2c 7b 65 6c 65 6d 3a 72 2c 6d 65 74 61 3a 7b 69 64 3a 6f 7d 7d Data Ascii: a}),e.classList.add(a),b(function(){l.emitWaferEvent("module:added",{elem:e,meta:{id:f}})},i,0),i}return u(t,e),a(t,[{key:"destroy",value:function(){var e,r=this._util.elem;if(r){var o=this._util.id;l.emitWaferEvent("module:destroyed",{elem:r,meta:{id:o}}
2024-03-03 23:26:32 UTC	716	IN	Data Raw: 65 43 6f 6e 74 72 6f 6c 6c 65 72 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 72 6f 6f 74 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 64 6f 63 75 6d 65 6e 74 3a 72 2c 61 3d 65 2e 73 65 6c 65 63 74 6f 72 2c 63 3d 65 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 22 77 61 66 65 72 2d 6d 6f 64 75 6c 65 2d 63 6f 6d 70 6c 65 74 65 22 3a 63 3b 75 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6c 3d 73 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f Data Ascii: eController,f=function(e){function t(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r=e.root,n=void 0===r?document:r,a=e.selector,c=e.successClass,f=void 0===c?"wafer-module-complete":c;u(this,t);var l=s(this,(t.__proto__\|\|Object.getPro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49806	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	563	OUT	GET /caas-assets-production/assets/v1/gam.09f1193fa836b536.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 453211 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:32 GMT Etag: "09f1193fa836b536210a64b2d00529e1" Last-Modified: Thu, 15 Feb 2024 16:48:05 GMT Server: ECAcc (nya/797C) Vary: Accept-Encoding x-amz-id-2: NhxKUCLGkwCTupKTZny5MLYQ3q4DaSTtcKJgTSlhTKroPbSgX16y7fmmT8Zk2zMwQFZxOZMbfRo= x-amz-replication-status: COMPLETED x-amz-request-id: 555TPYQFNGNFRB9M x-amz-server-side-encryption: AES256 x-amz-version-id: zs9nf7DVS1RmLdHHUzgpBUUpG9HpLtcK X-Cache: HIT Content-Length: 13441 Connection: close
2024-03-03 23:26:32 UTC	13441	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49807	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	562	OUT	GET /caas-assets-production/assets/v1/dl.e4ad001a9e7c47e8.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1492042 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:32 GMT Etag: "e4ad001a9e7c47e8f5abab6082868bbf" Last-Modified: Thu, 15 Feb 2024 16:48:04 GMT Server: ECAcc (nya/7913) Vary: Accept-Encoding x-amz-id-2: ju8s4ZA3znyyih9CKmUG7UBa89z0M4iEwvy334eWOC/t+O4OQR7NY/JUuK6oXH9FW3cykAqCDGM= x-amz-replication-status: COMPLETED x-amz-request-id: 08CPJ8GEHJJNHR5G x-amz-server-side-encryption: AES256 x-amz-version-id: vfRSxCNR2Jq5k9JCByNRVbx9vebi.rsi X-Cache: HIT Content-Length: 52304 Connection: close
2024-03-03 23:26:32 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 6c 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 Data Ascii: /! For license information please see dl.js.LICENSE.txt /!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e
2024-03-03 23:26:32 UTC	1	IN	Data Raw: 6e Data Ascii: n
2024-03-03 23:26:32 UTC	16383	IN	Data Raw: 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 2c 72 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 67 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 76 61 72 20 65 3d 7b 74 72 79 4c 6f 63 3a 74 5b 30 5d 7d 3b 31 20 69 6e 20 74 26 26 28 65 2e 63 61 74 63 68 4c 6f 63 3d 74 5b 31 5d 29 2c 32 20 69 6e 20 74 26 26 28 65 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 74 5b 32 5d 2c 65 2e 61 66 74 65 72 4c 6f 63 3d 74 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 29 7b 76 61 72 20 65 3d 74 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 65 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 65 2e 61 72 67 2c 74 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 Data Ascii: ot an object"),r.delegate=null,g)}function T(t){var e={tryLoc:t[0]};1 in t&&(e.catchLoc=t[1]),2 in t&&(e.finallyLoc=t[2],e.afterLoc=t[3]),this.tryEntries.push(e)}function A(t){var e=t.completion\|\|{};e.type="normal",delete e.arg,t.completion=e}function N(t
2024-03-03 23:26:32 UTC	16383	IN	Data Raw: 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 62 65 6e 6a 69 50 6c 61 63 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 69 73 52 65 6e 64 65 72 65 64 29 7c 7c 74 68 69 73 2e 66 61 6c 6c 62 61 63 6b 52 65 6e 64 65 72 65 64 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6e 64 65 72 4e 61 74 69 76 65 6c 79 22 2c 76 61 6c 75 65 3a 28 6c 3d 6b 28 50 28 29 2e 6d 61 72 6b 28 28 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 50 28 29 2e 77 72 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 74 2e 70 72 65 76 3d 74 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 69 66 28 74 68 69 73 2e 65 6c 65 6d 2e 69 73 Data Ascii: ",get:function(){var t;return(null===(t=this.benjiPlacement)\|\|void 0===t?void 0:t.isRendered)\|\|this.fallbackRendered}},{key:"renderNatively",value:(l=k(P().mark((function t(){return P().wrap((function(t){for(;;)switch(t.prev=t.next){case 0:if(this.elem.is
2024-03-03 23:26:32 UTC	3154	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 65 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 29 2c 74 68 69 73 2e 65 6c 65 6d 26 26 28 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 64 50 6c 61 63 65 6d 65 6e 74 73 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 61 64 52 65 66 72 65 73 68 43 6f 75 6e 74 65 72 3d 30 2c 74 68 69 73 2e 77 61 66 65 72 4d 6f 64 75 6c 65 41 64 64 65 64 51 75 65 75 65 3d 5b 5d 2c 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 72 65 61 64 79 28 Data Ascii: nction(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}(this,e),this.elem=document.querySelector(n),this.elem&&(this.initializedPlacements=new Map,this.adRefreshCounter=0,this.waferModuleAddedQueue=[],window.wafer.ready(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49810	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	573	OUT	GET /caas-assets-production/assets/v1/recipe_search.dc61a583417d3d7b.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	982	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 866534 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:32 GMT Etag: "dc61a583417d3d7bc0d0c1d0d9f02f25" Last-Modified: Thu, 15 Feb 2024 16:48:06 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/79A7) Vary: Accept-Encoding x-amz-id-2: NpO4kSxCckOj8BHX3wrjYp9287taVs/zTKBm24djAcigqiV1uwwwgb+d8jrFXiJu8JYcj4poW+4= x-amz-replication-status: COMPLETED x-amz-request-id: 9CGRFWSC2HWRMG3E x-amz-server-side-encryption: AES256 x-amz-version-id: uSUr07LpbbsY9Y4.RmqBk.qiC3KeGVGE X-Cache: HIT Content-Length: 5121 Connection: close
2024-03-03 23:26:32 UTC	5121	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49773	54.198.146.149	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	895	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ
2024-03-03 23:26:32 UTC	468	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, User-Agent, X-Forwarded-For, X-Oath-Gcrumb Server: guce Date: Sun, 03 Mar 2024 23:26:32 GMT Connection: close Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Access-Control-Allow-Methods: HEAD, GET, OPTIONS
2024-03-03 23:26:32 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 39 68 6a 71 6a 73 6c 69 75 61 31 70 34 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"9hjqjsliua1p4","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49814	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	528	OUT	GET /aaq/wf/wf-text-1.2.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:32 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: jjS2LneuPOn7oCmLPPvsJsTS/ShmJwDTCluIEIEVDdBo1QGIj3mLK8Mw6GP8LMhlc98DoPUvDs4= x-amz-request-id: 9RDWKE864TJ3XERQ Date: Tue, 27 Feb 2024 02:31:06 GMT Last-Modified: Mon, 23 Aug 2021 06:24:25 GMT ETag: "2429af8e863dd0a24a014a7270aec347" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: OPP8OVj8GMv8MfkR.jmYn7rj.hGKhZca Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 3920 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 507327 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 65 78 74 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 65 78 74 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 75 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 Data Ascii: pe=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var u=Object.assign\|\|function(e){for(va
2024-03-03 23:26:32 UTC	1300	IN	Data Raw: 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e Data Ascii: e:{default:e}}function f(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function u(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function
2024-03-03 23:26:32 UTC	20	IN	Data Raw: 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 7d 29 7d 29 3b Data Ascii: orts=t.default}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49815	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	530	OUT	GET /aaq/wf/wf-beacon-1.3.4.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: tOPCrc7kC+jlBOtvdoZRr0RMPs3lIDOSOId42d2fcxMXzMQgLRbN9ig8qNuYN9I1omHD9QktgVo= x-amz-request-id: 0KJZVJF4S33GXM17 Date: Wed, 21 Feb 2024 16:22:03 GMT Last-Modified: Mon, 13 Feb 2023 05:31:36 GMT ETag: "e78582b54dd8af6ceb66109ec39d402a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: uicRV2XkT8oSMEinQk8RF9dNboX_0nQX Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 11137 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 975870 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typeof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: rototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var a=Object.assign\|\|function(e){
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 28 6e 29 7d 2c 75 3d 5b 22 69 6d 61 67 65 2d 62 65 61 63 6f 6e 73 22 2c 22 62 65 61 63 6f 6e 73 22 5d 2c 66 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 68 3d 66 2e 62 61 73 65 2c 64 3d 66 2e 63 6f 6e 73 74 61 6e 74 73 2c 76 3d 66 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 70 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2c 79 3d 70 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 2c 62 3d 70 2e 66 69 72 65 42 65 61 63 6f 6e 2c 67 3d 5b 22 68 61 6e 64 6c 65 42 65 61 63 6f 6e 43 6c 69 63 6b 22 2c 22 68 61 6e 64 6c 65 42 65 61 63 6f 6e 4d 6f 75 73 65 65 6e 74 65 72 22 5d 2c 77 3d 64 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: (n)},u=["image-beacons","beacons"],f=window.wafer,h=f.base,d=f.constants,v=f.WaferBaseClass,p=window.wafer.utils,y=p.elementInView,b=p.fireBeacon,g=["handleBeaconClick","handleBeaconMouseenter"],w=d.ATTR_PREFIX,m=function(e){function t(e){var r=arguments.
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 41 2c 69 6e 76 69 65 77 54 69 6d 65 3a 30 2c 69 6e 76 69 65 77 53 74 61 72 74 54 69 6d 65 3a 30 2c 74 72 69 67 67 65 72 50 65 72 63 65 6e 74 59 3a 69 73 4e 61 4e 28 54 29 3f 35 30 3a 54 2c 74 72 69 67 67 65 72 50 65 72 63 65 6e 74 58 3a 69 73 4e 61 4e 28 43 29 3f 35 30 3a 43 2c 75 72 6c 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 77 2b 22 75 72 6c 22 29 7d 29 2c 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 5b 65 5d 3d 6c 5b 65 5d 2e 62 69 6e 64 28 6c 29 7d 29 2c 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 6d 26 26 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 6c 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 63 28 74 2c 5b 7b 6b 65 79 3a 22 6c 6f 61 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: A,inviewTime:0,inviewStartTime:0,triggerPercentY:isNaN(T)?50:T,triggerPercentX:isNaN(C)?50:C,url:e.getAttribute(w+"url")}),g.forEach(function(e){l[e]=l[e].bind(l)}),"mouseenter"===m&&l.addEventListeners(),l}return o(t,e),c(t,[{key:"load",value:function(){
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 64 41 6c 77 61 79 73 54 72 69 67 67 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 65 61 63 68 43 6c 69 63 6b 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 7d 7d 2c 7b 6b 65 79 3a 22 6e 6f 64 65 4f 75 74 6f 66 56 69 65 77 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 69 6e 76 69 65 77 53 74 61 72 74 54 69 6d 65 3b 69 66 28 74 3e 30 29 7b 76 61 72 20 72 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 68 69 73 2e 5f 75 74 69 6c 2e 69 6e 76 69 65 77 54 69 6d 65 2b 3d 72 2d 74 7d 74 68 69 73 2e 5f 75 74 69 6c 2e 69 6e 76 69 65 77 53 74 61 72 74 54 69 6d 65 3d 30 7d 7d 2c 7b 6b 65 79 3a 22 73 74 61 74 65 44 69 64 55 70 64 61 74 65 22 2c 76 Data Ascii: dAlwaysTrigger",value:function(){return"eachClick"===this._util.trigger}},{key:"nodeOutofView",value:function(){var e=this._util,t=e.inviewStartTime;if(t>0){var r=Date.now();this._util.inviewTime+=r-t}this._util.inviewStartTime=0}},{key:"stateDidUpdate",v
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 74 2e 64 65 66 61 75 6c 74 3d 6d 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 63 3d 69 28 72 28 22 2e 2f 73 72 63 2f 62 61 73 65 2e 6a 73 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 Data Ascii: t.default=m,e.exports=t.default},"./src/controller.js":function(e,t,r){"use strict";function n(){return c=i(r("./src/base.js"))}function i(e){return e&&e.__esModule?e:{default:e}}function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a clas
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 Data Ascii: rguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},f=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.definePrope
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 72 3d 21 31 2c 6e 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 2c 6f 3d 65 2e 76 61 6c 75 65 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 74 3d 28 69 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 74 3d 21 30 29 69 2e 76 61 6c 75 65 2e 69 6e 73 74 61 6e 63 65 2e 6e 6f 64 65 4f 75 74 6f 66 56 69 65 77 28 29 7d 63 61 74 63 68 28 65 29 7b 72 3d 21 30 2c 6e 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 74 26 26 6f 2e 72 65 74 75 72 6e 26 26 6f 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 72 29 74 68 72 6f 77 20 6e 7d 7d 7d 65 6c 73 65 20 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c Data Ascii: r=!1,n=void 0;try{for(var i,o=e.values()[Symbol.iterator]();!(t=(i=o.next()).done);t=!0)i.value.instance.nodeOutofView()}catch(e){r=!0,n=e}finally{try{!t&&o.return&&o.return()}finally{if(r)throw n}}}else this._validateWithThrottle()}},{key:"handleResize",
2024-03-03 23:26:33 UTC	737	IN	Data Raw: 2c 6e 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 2c 6f 3d 65 2e 65 6e 74 72 69 65 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 74 3d 28 69 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 74 3d 21 30 29 7b 76 61 72 20 61 3d 6c 28 69 2e 76 61 6c 75 65 2c 32 29 2c 73 3d 61 5b 30 5d 2c 63 3d 61 5b 31 5d 2c 75 3d 63 2e 69 6e 73 74 61 6e 63 65 2c 66 3d 75 2e 5f 75 74 69 6c 2c 68 3d 66 2e 68 61 73 4f 66 66 73 65 74 59 2c 64 3d 66 2e 68 61 73 4f 66 66 73 65 74 58 2c 76 3d 66 2e 74 72 69 67 67 65 72 50 65 72 63 65 6e 74 59 2c 70 3d 66 2e 74 72 69 67 67 65 72 50 65 72 63 65 6e 74 58 3b 21 68 26 26 28 63 2e 69 6e 73 74 61 6e 63 65 2e 6f 66 66 73 65 74 59 3d 2d 70 61 72 73 65 49 6e 74 28 73 2e 63 6c 69 65 6e 74 48 Data Ascii: ,n=void 0;try{for(var i,o=e.entries()[Symbol.iterator]();!(t=(i=o.next()).done);t=!0){var a=l(i.value,2),s=a[0],c=a[1],u=c.instance,f=u._util,h=f.hasOffsetY,d=f.hasOffsetX,v=f.triggerPercentY,p=f.triggerPercentX;!h&&(c.instance.offsetY=-parseInt(s.clientH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49816	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	530	OUT	GET /aaq/wf/wf-fetch-1.19.1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	887	IN	HTTP/1.1 200 OK x-amz-id-2: CcrcqZIYY75Jff2ocf6Ut/LKYWvLzDW1AcK4SyXl9WqnPg9p31eSIjZKRRB5clfvHP+n70ynQvjM8KA3l5ZkJznmqIpA3AMY0dp4lSv9N3c= x-amz-request-id: YCKVZ4CMMNNGW9TX Date: Thu, 15 Feb 2024 14:18:55 GMT Last-Modified: Fri, 20 Oct 2023 09:18:13 GMT ETag: "83379d1cf4df945eadf3f545ce6dd7d2" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: QAq_AzKDx.aTwX4kgKMqil_11NgBrBit Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 17306 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1501659 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 66 65 74 63 68 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 Data Ascii: tion"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 65 28 61 2c 72 2c 6e 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 69 29 72 65 74 75 72 6e 20 69 2e 76 61 6c 75 65 3b 76 61 72 20 6f 3d 69 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 6e 29 7d 2c 66 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 64 3d 66 2e 62 61 73 65 2c 68 3d 66 2e 63 6f 6e 73 74 61 6e 74 73 2c 79 3d 66 2e 75 74 69 6c 73 2c 67 3d 66 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 76 3d 68 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 6d 3d 79 2e 63 6c 65 61 72 41 6e 64 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2c 70 3d 79 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 Data Ascii: etPrototypeOf(t);return null===a?void 0:e(a,r,n)}if("value"in i)return i.value;var o=i.get;if(void 0!==o)return o.call(n)},f=window.wafer,d=f.base,h=f.constants,y=f.utils,g=f.WaferBaseClass,v=h.ATTR_PREFIX,m=y.clearAndSetInnerHTML,p=y.convertNodeListToArr
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 2b 22 74 61 72 67 65 74 22 29 2c 4e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 74 69 6d 65 6f 75 74 22 29 2c 46 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 74 79 70 65 22 29 7c 7c 22 64 65 66 61 75 6c 74 22 2c 4d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 75 73 65 2d 70 61 67 65 2d 72 69 64 22 29 2c 52 3d 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 66 65 74 63 68 2d 74 72 69 67 67 65 72 2d 6f 66 66 73 65 74 22 29 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 74 72 69 67 67 65 72 2d 6f 66 66 73 65 74 22 29 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 57 3d 63 28 52 2c 32 29 2c 42 3d 57 5b 30 5d 2c 44 3d 57 5b 31 5d 2c 71 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 72 65 Data Ascii: +"target"),N=e.getAttribute(v+"timeout"),F=e.getAttribute(v+"type")\|\|"default",M=e.getAttribute(v+"use-page-rid"),R=(e.getAttribute(v+"fetch-trigger-offset")\|\|e.getAttribute(v+"trigger-offset")\|\|"").split(" "),W=c(R,2),B=W[0],D=W[1],q=e.getAttribute(v+"re
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 65 64 65 6e 74 69 61 6c 73 3a 67 2c 64 65 6c 61 79 3a 6e 75 6c 6c 3d 3d 3d 48 7c 7c 76 6f 69 64 20 30 3d 3d 3d 48 3f 31 65 34 3a 4e 75 6d 62 65 72 28 48 29 2c 64 65 70 65 6e 64 65 6e 63 79 45 6c 65 6d 3a 4c 2c 64 65 73 74 72 6f 79 54 61 72 67 65 74 4f 6e 46 61 69 6c 75 72 65 3a 6e 75 6c 6c 3d 3d 3d 4f 7c 7c 76 6f 69 64 20 30 3d 3d 3d 4f 3f 31 3a 4e 75 6d 62 65 72 28 4f 29 2c 69 6d 70 6f 72 74 61 6e 63 65 3a 49 2c 74 69 6d 65 6f 75 74 3a 6e 75 6c 6c 3d 3d 3d 4e 7c 7c 76 6f 69 64 20 30 3d 3d 3d 4e 3f 36 65 33 3a 4e 75 6d 62 65 72 28 4e 29 2c 65 6c 65 6d 3a 65 2c 65 72 72 6f 72 43 6c 61 73 73 3a 6e 2c 69 73 50 6f 73 74 57 69 74 68 53 74 61 74 65 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 5b 62 6f 64 79 5d 22 29 7c 7c 65 2e 67 65 74 41 74 74 72 Data Ascii: edentials:g,delay:null===H\|\|void 0===H?1e4:Number(H),dependencyElem:L,destroyTargetOnFailure:null===O\|\|void 0===O?1:Number(O),importance:I,timeout:null===N\|\|void 0===N?6e3:Number(N),elem:e,errorClass:n,isPostWithState:e.getAttribute(v+"[body]")\|\|e.getAttr
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 65 72 2d 66 65 74 63 68 22 21 3d 3d 74 2e 73 65 6c 65 63 74 6f 72 29 26 26 28 69 3d 65 2c 21 30 29 7d 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 28 29 3b 76 61 72 20 61 3d 69 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2e 67 65 74 28 72 29 7c 7c 7b 7d 2c 6f 3d 61 2e 69 6e 73 74 61 6e 63 65 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6e 28 29 3b 76 61 72 20 73 3d 6f 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3b 69 66 28 73 29 72 65 74 75 72 6e 20 6e 28 29 3b 74 3c 35 26 26 30 3d 3d 3d 73 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 66 65 74 63 68 44 65 70 65 6e 64 65 6e 63 79 28 74 2b 2b 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 29 7d 29 7d 2c 31 30 30 2a 28 74 2b 31 29 29 2c 73 7c 7c Data Ascii: er-fetch"!==t.selector)&&(i=e,!0)}),!i)return n();var a=i._state.elementInstances.get(r)\|\|{},o=a.instance;if(!o)return n();var s=o._state.status;if(s)return n();t<5&&0===s&&setTimeout(function(){e.fetchDependency(t++).then(function(){n()})},100*(t+1)),s\|\|
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 74 61 74 75 73 29 7b 76 61 72 20 50 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 2c 49 3d 7b 7d 3b 72 65 74 75 72 6e 20 75 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 4c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 61 72 67 65 74 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 79 26 26 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 62 6f 75 6e 64 61 72 79 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 50 26 26 28 49 2e 72 65 74 72 69 65 73 3d 50 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3d 30 2c 74 68 69 73 2e 66 65 74 63 68 44 65 70 65 6e 64 65 6e 63 Data Ascii: tatus){var P=this._state.retries,I={};return u.classList.add("wafer-fetch-trigger-inprogress"),L.classList.add("wafer-fetch-target-inprogress"),y&&y.classList.add("wafer-fetch-boundary-inprogress"),P&&(I.retries=P),this._state.status=0,this.fetchDependenc
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 6b 22 3d 3d 3d 45 7c 7c 76 7d 29 3b 76 61 72 20 6a 3d 76 6f 69 64 20 30 2c 50 3d 76 6f 69 64 20 30 2c 49 3d 74 2e 68 74 6d 6c 2c 78 3d 76 6f 69 64 20 30 3d 3d 3d 49 3f 74 2e 6d 61 72 6b 75 70 3a 49 3b 69 66 28 70 29 7b 76 61 72 20 4e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 4e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 78 3b 76 61 72 20 46 3d 4e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 70 29 3b 78 3d 46 26 26 46 2e 69 6e 6e 65 72 48 54 4d 4c 7c 7c 78 7d 69 66 28 76 29 7b 76 61 72 20 4d 3d 4c 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 52 3d 4c 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 4c 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 54 4d 4c 28 22 62 65 66 6f 72 65 62 65 67 69 6e 22 2c Data Ascii: k"===E\|\|v});var j=void 0,P=void 0,I=t.html,x=void 0===I?t.markup:I;if(p){var N=document.createElement("div");N.innerHTML=x;var F=N.querySelector(p);x=F&&F.innerHTML\|\|x}if(v){var M=L.parentNode,R=L.previousElementSibling;L.insertAdjacentHTML("beforebegin",
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 74 72 79 43 6f 75 6e 74 2c 6c 3d 2b 2b 65 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 3b 72 65 74 75 72 6e 20 64 2e 65 6d 69 74 45 72 72 6f 72 28 7b 6e 61 6d 65 3a 22 57 61 66 65 72 46 65 74 63 68 22 2c 65 6c 65 6d 3a 75 2c 6d 65 74 61 3a 7b 6d 65 73 73 61 67 65 3a 6e 2c 72 65 74 72 79 43 6f 75 6e 74 3a 6c 2c 74 61 72 67 65 74 45 6c 65 6d 3a 4c 2c 75 72 6c 3a 53 7d 2c 73 74 61 63 6b 3a 74 2e 73 74 61 63 6b 7c 7c 74 2e 6d 65 73 73 61 67 65 7d 29 2c 75 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 79 26 26 28 79 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 62 6f 75 6e 64 61 72 79 2d 69 6e 70 72 6f 67 Data Ascii: tryCount,l=++e._state.retries;return d.emitError({name:"WaferFetch",elem:u,meta:{message:n,retryCount:l,targetElem:L,url:S},stack:t.stack\|\|t.message}),u.classList.remove("wafer-fetch-trigger-inprogress"),y&&(y.classList.remove("wafer-fetch-boundary-inprog
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 75 6e 64 61 72 79 28 29 29 2c 22 73 74 61 74 65 43 68 61 6e 67 65 22 3d 3d 3d 61 29 7b 69 26 26 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 3d 30 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 72 65 74 72 79 43 6f 75 6e 74 3b 69 66 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 76 61 72 20 73 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 64 65 6c 61 79 3b 72 65 74 75 72 6e 20 76 6f 69 64 28 73 3f 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 66 65 74 63 68 28 29 7d 2c 73 2c 74 68 69 73 29 3a 74 68 69 73 2e 66 65 74 63 68 28 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 Data Ascii: undary()),"stateChange"===a){i&&(this._state.retries=0);var o=this._util.retryCount;if(this._state.retries===o)return;var s=this._util.delay;return void(s?setTimeout(function(){e.fetch()},s,this):this.fetch())}}},{key:"destroy",value:function(){var e=this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49821	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:32 UTC	528	OUT	GET /aaq/wf/wf-bind-1.1.3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	866	IN	HTTP/1.1 200 OK x-amz-id-2: bZC0JyztENn76BEguURZCmW3Q+HXqG4bmABM885yIgovp/CjbycG3wjoFM7zSoTy4iUt17Vgu6p/v1nd7jNV/A== x-amz-request-id: J1NJM3M8CRXSCVHG Date: Fri, 09 Feb 2024 18:37:24 GMT Last-Modified: Tue, 11 Jan 2022 10:14:03 GMT ETag: "4fb1358c9d3cc812325612307c785b9b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 9KeCoaeonKvzetim7_sq8D5.FiF8Jo57 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4174 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2004550 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 69 6e 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 69 6e 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 Data Ascii: pe=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var a=Object.assign\|\|function(e){for(va
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 73 74 61 74 65 41 74 74 72 3b 74 68 69 73 2e 75 70 64 61 74 65 41 74 74 72 69 62 75 74 65 28 74 29 7d 7d 5d 29 2c 74 7d 28 69 29 3b 74 2e 64 65 66 61 75 6c 74 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 6f 28 72 28 22 2e 2f 73 72 63 2f 62 61 73 65 2e 6a 73 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 Data Ascii: 0&&void 0!==arguments[0]?arguments[0]:{},t=e.stateAttr;this.updateAttribute(t)}}]),t}(i);t.default=s,e.exports=t.default},"./src/controller.js":function(e,t,r){"use strict";function n(){return i=o(r("./src/base.js"))}function o(e){return e&&e.__esModule?e
2024-03-03 23:26:33 UTC	274	IN	Data Raw: 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6f 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 65 77 28 28 6f 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 6e 28 72 28 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 29 29 7d 28 29 29 2e 64 65 66 61 75 6c 74 29 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 2d 62 69 6e 64 22 7d 29 2c 65 2e 65 78 70 6f Data Ascii: ntry.js":function(e,t,r){"use strict";function n(e){return e&&e.__esModule?e:{default:e}}Object.defineProperty(t,"__esModule",{value:!0});var o;t.default=new((o\|\|function(){return o=n(r("./src/controller.js"))}()).default)({selector:".wafer-bind"}),e.expo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49823	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	521	OUT	GET /ss/analytics3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: XApJafJs6AaUT/Xbs6kAo2Hv+GWx8AdzOHJgPoYXkgWrN/df86B0LGQ89tfk6YuSe/vLFX9gvg4= x-amz-request-id: 14D2QT4FT9J8HKZ8 Date: Sun, 03 Mar 2024 23:18:42 GMT Last-Modified: Tue, 20 Feb 2024 21:14:57 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=600 x-amz-version-id: Ak3kpM.dokEtoyTliG_PTc.IB24eWQKm Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 51013 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "fb768eb931769915b1a5abfa1373aff8" Age: 472 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:33 UTC	779	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 65 28 64 29 7b 76 61 72 20 66 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function fe(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 2e 22 29 2c 6c 3d 74 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 72 65 74 75 72 6e 22 2e 22 2b 74 2e 73 6c 69 63 65 28 65 29 2e 6a 6f 69 6e 28 22 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 76 61 72 20 65 3d 63 28 73 29 2c 74 3d 22 72 78 78 22 2c 6e 3d 6d 5b 74 5d 2c 69 3d 28 6e 7c 7c 28 69 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2d 31 34 33 38 33 38 37 32 65 35 2c 6e 3d 70 61 72 73 65 49 6e 74 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 75 62 73 74 72 69 6e 67 28 32 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 22 2e 22 2b 69 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 22 26 76 3d 31 22 29 2c 74 29 2c 6f 3d 6e 2c 72 3d 33 31 35 33 36 65 33 2c 61 3d 6e 65 77 20 44 61 Data Ascii: ."),l=t.length;function c(e){return"."+t.slice(e).join(".")}function u(){var e=c(s),t="rxx",n=m[t],i=(n\|\|(i=(new Date).getTime()-14383872e5,n=parseInt(Math.random().toString().substring(2)).toString(36)+"."+i.toString(36)+"&v=1"),t),o=n,r=31536e3,a=new Da
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 2e 73 65 74 28 61 2e 6b 65 79 7c 7c 6e 2c 69 29 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 79 71 6c 69 64 3d 65 2c 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 73 70 61 63 65 69 64 50 72 65 66 69 78 3d 6e 7d 28 59 41 48 4f 4f 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 59 41 48 4f 4f 26 26 59 41 48 4f 4f 3f 59 41 48 4f 4f 3a 7b 7d 29 2e 69 31 33 6e 3d 59 41 48 4f 4f 2e 69 31 33 6e 7c 7c 7b 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 68 61 73 54 41 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 33 22 3d 3d 3d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 65 3d 65 2e 73 70 6c 69 74 28 22 3a 22 29 3b 69 66 28 22 31 22 3d 3d 3d 65 5b 30 5d 29 72 65 74 75 72 6e Data Ascii: .set(a.key\|\|n,i)))}}}function e(e,t,n){this.yqlid=e,this.eventName=t,this.spaceidPrefix=n}(YAHOO="undefined"!=typeof YAHOO&&YAHOO?YAHOO:{}).i13n=YAHOO.i13n\|\|{},YAHOO.i13n.hasTAS=function(){return"3"===(function(e){if(e){e=e.split(":");if("1"===e[0])return
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 73 2e 63 6f 75 6e 74 3d 30 2c 65 26 26 74 68 69 73 2e 61 62 73 6f 72 62 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 74 68 69 73 2e 6d 61 70 3d 7b 7d 2c 74 68 69 73 2e 63 6f 75 6e 74 3d 30 7d 76 6f 69 64 20 30 3d 3d 3d 28 63 6f 6e 73 6f 6c 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 76 6f 69 64 20 30 21 3d 3d 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 3f 63 6f 6e 73 6f 6c 65 3a 7b 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 29 2e 65 72 72 6f 72 26 26 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 3d 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2c 76 6f 69 64 20 30 3d 3d 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 28 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 3d 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2c 65 2e 70 72 6f 74 6f 74 Data Ascii: s.count=0,e&&this.absorb(e)}function g(){this.map={},this.count=0}void 0===(console="undefined"!=typeof console&&void 0!==console.log?console:{log:function(){}}).error&&(console.error=console.log),void 0===console.warn&&(console.warn=console.log),e.protot
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 3d 3d 61 26 26 21 74 7c 7c 6e 2e 73 65 74 28 61 2c 73 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 21 31 29 3b 76 61 72 20 6e 3d 6e 65 77 20 67 2c 69 3d 79 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 2c 79 2e 64 61 74 61 5f 61 63 74 69 6f 6e 5f 6f 75 74 63 6f 6d 65 29 3b 72 65 74 75 72 6e 20 69 26 26 6e 2e 73 65 74 28 22 6f 75 74 63 6d 22 2c 69 29 2c 6e 2e 61 62 73 6f 72 62 28 55 28 65 2c 74 29 2e 67 65 74 41 6c 6c 28 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 28 6e 3d 65 29 2e 6e 63 69 64 3f 61 2e 73 65 74 28 22 6e 63 69 64 22 2c 6e 2e 6e 63 69 64 29 3a 28 6e 3d 6e 65 77 20 55 52 4c 53 65 Data Ascii: ==a&&!t\|\|n.set(a,s)}return n}function b(e,t){if(!e)return null;null===t&&(t=!1);var n=new g,i=y.getAttribute(e,y.data_action_outcome);return i&&n.set("outcm",i),n.absorb(U(e,t).getAll()),n}function N(e,t){var n;(n=e).ncid?a.set("ncid",n.ncid):(n=new URLSe
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 3a 65 2e 6c 74 5f 61 74 74 72 7c 7c 22 74 65 78 74 22 2c 63 6c 69 65 6e 74 5f 6f 6e 6c 79 3a 76 6f 69 64 20 30 3d 3d 3d 65 2e 63 6c 69 65 6e 74 5f 6f 6e 6c 79 7c 7c 21 21 65 2e 63 6c 69 65 6e 74 5f 6f 6e 6c 79 2c 74 65 78 74 5f 6c 69 6e 6b 5f 6c 65 6e 3a 65 2e 74 65 78 74 5f 6c 69 6e 6b 5f 6c 65 6e 7c 7c 2d 31 2c 74 65 73 74 5f 69 64 3a 74 2c 79 71 6c 5f 68 6f 73 74 3a 65 2e 79 71 6c 5f 68 6f 73 74 7c 7c 72 2c 79 71 6c 5f 70 61 74 68 3a 65 2e 79 71 6c 5f 70 61 74 68 7c 7c 22 2f 76 32 2f 70 75 62 6c 69 63 2f 79 71 6c 22 2c 67 65 6f 5f 68 6f 73 74 3a 65 2e 67 65 6f 5f 68 6f 73 74 7c 7c 6f 2c 61 6e 6f 6e 79 6d 69 7a 65 64 3a 21 30 3d 3d 3d 65 2e 61 6e 6f 6e 79 6d 69 7a 65 64 2c 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 3a 65 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f Data Ascii: :e.lt_attr\|\|"text",client_only:void 0===e.client_only\|\|!!e.client_only,text_link_len:e.text_link_len\|\|-1,test_id:t,yql_host:e.yql_host\|\|r,yql_path:e.yql_path\|\|"/v2/public/yql",geo_host:e.geo_host\|\|o,anonymized:!0===e.anonymized,click_timeout:e.click_timeo
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 6b 69 65 3a 21 30 3d 3d 3d 65 2e 67 65 6e 5f 62 63 6f 6f 6b 69 65 2c 62 63 6f 6f 6b 69 65 5f 6f 76 65 72 72 69 64 65 3a 65 2e 62 63 6f 6f 6b 69 65 5f 6f 76 65 72 72 69 64 65 7c 7c 6e 75 6c 6c 2c 73 6b 69 70 5f 61 74 74 72 3a 65 2e 73 6b 69 70 5f 61 74 74 72 7c 7c 22 64 61 74 61 2d 72 61 70 69 64 2d 73 6b 69 70 22 2c 70 61 72 73 65 5f 64 6f 6d 3a 21 30 3d 3d 3d 65 2e 70 61 72 73 65 5f 64 6f 6d 2c 70 61 67 65 76 69 65 77 5f 6f 6e 5f 69 6e 69 74 3a 21 31 21 3d 3d 65 2e 70 61 67 65 76 69 65 77 5f 6f 6e 5f 69 6e 69 74 2c 70 65 72 66 5f 6e 61 76 69 67 61 74 69 6f 6e 74 69 6d 65 3a 65 2e 70 65 72 66 5f 6e 61 76 69 67 61 74 69 6f 6e 74 69 6d 65 7c 7c 30 2c 70 65 72 66 5f 63 6f 6d 6d 6f 6e 74 69 6d 65 3a 65 2e 70 65 72 66 5f 63 6f 6d 6d 6f 6e 74 69 6d 65 7c 7c 6e Data Ascii: kie:!0===e.gen_bcookie,bcookie_override:e.bcookie_override\|\|null,skip_attr:e.skip_attr\|\|"data-rapid-skip",parse_dom:!0===e.parse_dom,pageview_on_init:!1!==e.pageview_on_init,perf_navigationtime:e.perf_navigationtime\|\|0,perf_commontime:e.perf_commontime\|\|n
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 2c 73 2c 57 2c 41 3d 48 28 69 29 2c 45 3d 28 68 2e 63 6f 6e 66 3d 41 2c 6f 3d 41 2e 67 65 6f 5f 68 6f 73 74 7c 7c 59 41 48 4f 4f 2e 69 31 33 6e 2e 62 65 61 63 6f 6e 5f 73 65 72 76 65 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 6c 2c 6e 3d 28 66 3d 6e 65 77 20 66 65 28 74 29 2c 74 2e 73 65 74 28 22 5f 70 6c 22 2c 31 29 2c 74 2e 73 65 74 28 22 41 5f 76 22 2c 41 2e 76 65 72 73 69 6f 6e 29 2c 74 2e 73 65 74 28 22 41 5f 63 6e 22 2c 41 2e 63 6f 6d 62 6f 4e 61 6d 65 29 2c 41 2e 67 65 74 52 65 66 65 72 72 65 72 28 29 29 3b 69 66 28 6e 26 26 21 31 21 3d 3d 65 26 26 74 2e 73 65 74 28 22 5f 52 22 2c 6e 29 2c 41 2e 74 65 73 74 5f 69 64 26 26 74 2e 73 65 74 28 22 74 65 73 74 22 2c 41 2e 74 65 73 74 5f 69 64 29 2c 41 2e 63 75 73 74 6f Data Ascii: ,s,W,A=H(i),E=(h.conf=A,o=A.geo_host\|\|YAHOO.i13n.beacon_server,s=function(e){var t=new l,n=(f=new fe(t),t.set("_pl",1),t.set("A_v",A.version),t.set("A_cn",A.comboName),A.getReferrer());if(n&&!1!==e&&t.set("_R",n),A.test_id&&t.set("test",A.test_id),A.custo
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 3f 22 2c 65 5d 2e 6a 6f 69 6e 28 22 22 29 29 7d 2c 73 65 6e 64 47 65 6f 50 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 28 64 28 22 62 22 29 29 7d 2c 73 65 6e 64 52 61 70 69 64 4e 6f 44 65 6c 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 74 26 26 43 26 26 43 2e 73 74 61 72 74 5f 64 77 65 6c 6c 28 29 26 26 28 6e 2e 65 74 61 67 3d 22 64 77 65 6c 6c 2c 73 74 61 72 74 22 2c 6e 2e 75 73 65 72 67 65 6e 66 3d 31 2c 6e 2e 41 5f 70 72 65 74 73 3d 52 3f 52 2e 74 73 3a 6e 75 6c 6c 2c 6e 2e 41 5f 70 72 65 6d 73 3d 52 3f 52 2e 6d 73 3a 6e 75 6c 6c 29 2c 21 41 2e 79 71 6c 5f 65 6e 61 62 6c 65 64 7c 7c 6f 3f 28 6f 3d 6e 75 6c 6c 2c 63 28 64 28 74 3f 22 62 22 3a 22 70 22 2c 6f 3d 6e 3f 6e 65 77 20 6c 28 6e 29 3a 6f 29 29 29 3a 75 28 65 2c 74 2c 6e 2c Data Ascii: ?",e].join(""))},sendGeoPV:function(){c(d("b"))},sendRapidNoDelay:function(e,t,n,i,o){t&&C&&C.start_dwell()&&(n.etag="dwell,start",n.usergenf=1,n.A_prets=R?R.ts:null,n.A_prems=R?R.ms:null),!A.yql_enabled\|\|o?(o=null,c(d(t?"b":"p",o=n?new l(n):o))):u(e,t,n,
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 6e 2c 69 2c 6f 2c 74 3d 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 29 3f 74 28 29 3a 28 6e 3d 74 2c 69 3d 6e 65 77 20 49 6d 61 67 65 2c 6f 3d 6e 75 6c 6c 2c 69 2e 6f 6e 6c 6f 61 64 3d 69 2e 6f 6e 61 62 6f 72 74 3d 69 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 6e 2e 63 61 6c 6c 28 6e 75 6c 6c 29 7d 2c 69 2e 73 72 63 3d 65 2c 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 Data Ascii: n,i,o,t=t&&"function"==typeof t?t:function(){};navigator&&navigator.sendBeacon&&navigator.sendBeacon(e)?t():(n=t,i=new Image,o=null,i.onload=i.onabort=i.onerror=function(){clearTimeout(o),n.call(null)},i.src=e,n&&"function"==typeof n&&(o=setTimeout(functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49824	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	531	OUT	GET /os/yaft/yaft-0.3.29.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	860	IN	HTTP/1.1 200 OK x-amz-id-2: dVhLCUHEVpHyd3qj4hw8PAwYrAOMue9VLsMA7obxzZy7MeOs2MNq/9PEOP2zfBRzibsVE7ddGQs= x-amz-request-id: 5DQVB5YZRMRMFD00 Date: Tue, 16 Jan 2024 16:19:00 GMT Last-Modified: Mon, 04 May 2020 20:25:06 GMT ETag: "96f195b010cdeb89cf3f75ec3b994243" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 x-amz-version-id: null Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 17142 Referrer-Policy: no-referrer-when-downgrade Age: 4086454 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 66 75 6e 63 74 69 6f 6e 28 70 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 70 2e 59 41 46 54 29 7b 76 61 72 20 76 2c 54 2c 6e 2c 6f 2c 61 3d 21 31 2c 53 3d 21 31 2c 69 3d 21 31 2c 68 3d 21 31 2c 77 3d 21 30 2c 41 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 72 3d 21 31 2c 65 3d 66 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 46 3d 7b 75 73 65 50 72 65 66 69 78 52 65 67 65 78 3a 21 30 2c 75 73 65 4e 6f 72 6d 61 6c 69 7a 65 43 6f 76 65 72 61 67 65 3a 21 30 2c 63 61 6e 53 68 6f 77 56 69 73 75 61 6c 52 65 70 6f 72 74 3a 21 30 2c 63 61 6e 53 68 6f 77 50 65 72 66 42 61 72 3a 21 31 2c 75 73 65 4e 61 74 69 76 65 Data Ascii: "undefined"!=typeof window&&function(p,f){"use strict";if(void 0===p.YAFT){var v,T,n,o,a=!1,S=!1,i=!1,h=!1,w=!0,A=(new Date).getTime(),r=!1,e=f.documentElement,F={usePrefixRegex:!0,useNormalizeCoverage:!0,canShowVisualReport:!0,canShowPerfBar:!1,useNative
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 6d 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 21 53 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 2c 6f 2c 61 2c 69 2c 73 3b 59 41 46 54 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 29 26 26 28 54 7c 7c 28 54 3d 44 28 29 29 2c 28 6e 3d 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 59 41 46 54 2e 67 65 74 4d 6f 64 75 6c 65 53 65 6c 65 63 74 6f 72 28 65 2c 21 31 29 29 29 26 26 28 6f 3d 59 41 46 54 2e 67 65 74 4d 6f 64 75 6c 65 4e 61 6d 65 28 6e 29 2c 6e 2e 6d 6f 64 4e 61 6d 65 3d 6f 2c 2d 31 3d 3d 3d 46 2e 6d 6f 64 75 6c 65 73 45 78 63 6c 75 64 65 2e 69 6e 64 65 78 4f 66 28 6f 29 26 26 28 79 5b 6f 5d 3d 6e 2c 69 3d 7b 6d 6f 64 53 74 61 72 74 3a 74 2c 6d 6f 64 45 6e 64 3a 72 7d 2c 73 3d 28 61 3d 6e 29 2e 6d 6f 64 4e 61 6d 65 2c 64 Data Ascii: ming:function(e,t,r){if(!S)return!1;var n,o,a,i,s;YAFT.isInitialized()&&(T\|\|(T=D()),(n=f.querySelector(YAFT.getModuleSelector(e,!1)))&&(o=YAFT.getModuleName(n),n.modName=o,-1===F.modulesExclude.indexOf(o)&&(y[o]=n,i={modStart:t,modEnd:r},s=(a=n).modName,d
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 59 41 46 54 5f 52 45 50 4f 52 54 2e 72 65 6d 6f 76 65 52 65 70 6f 72 74 26 26 28 70 2e 59 41 46 54 5f 52 45 50 4f 52 54 2e 72 65 6d 6f 76 65 45 78 74 72 61 73 28 29 2c 70 2e 59 41 46 54 5f 52 45 50 4f 52 54 2e 72 65 6d 6f 76 65 52 65 70 6f 72 74 28 29 29 2c 75 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 75 29 2c 6c 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6c 29 3b 74 72 79 7b 76 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 3f 76 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 3a 76 2e 77 65 62 6b 69 74 43 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 26 26 76 2e 77 65 62 6b 69 74 43 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 62 3d 76 2e 6e 6f 77 28 Data Ascii: YAFT_REPORT.removeReport&&(p.YAFT_REPORT.removeExtras(),p.YAFT_REPORT.removeReport()),u&&clearTimeout(u),l&&clearTimeout(l);try{v.clearResourceTimings?v.clearResourceTimings():v.webkitClearResourceTimings&&v.webkitClearResourceTimings()}catch(e){}b=v.now(
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 29 7b 69 66 28 21 69 29 72 65 74 75 72 6e 21 31 3b 63 3d 21 31 2c 6f 26 26 70 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6f 29 2c 6e 3d 65 2c 67 2e 6c 65 6e 67 74 68 3d 30 2c 63 3d 21 30 2c 6f 3d 70 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 74 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 63 3d 21 31 2c 69 3f 28 6f 26 26 70 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6f 29 2c 6e 21 3d 3d 65 3f 28 74 26 26 74 28 22 46 50 53 20 73 74 6f 70 20 61 63 74 69 6f 6e 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 73 74 61 72 74 20 61 63 74 69 6f 6e 22 29 2c 21 31 29 3a 28 28 72 3d 57 28 29 29 2e 61 63 74 Data Ascii: ){if(!i)return!1;c=!1,o&&p.cancelAnimationFrame(o),n=e,g.length=0,c=!0,o=p.requestAnimationFrame(t)},stop:function(e,t){var r;return c=!1,i?(o&&p.cancelAnimationFrame(o),n!==e?(t&&t("FPS stop action cannot be different than start action"),!1):((r=W()).act
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 6e 74 54 69 6d 65 22 69 6e 28 72 3d 70 2e 63 68 72 6f 6d 65 2e 6c 6f 61 64 54 69 6d 65 73 28 29 29 26 26 30 3c 72 2e 66 69 72 73 74 50 61 69 6e 74 54 69 6d 65 26 26 28 6e 3d 72 2e 73 74 61 72 74 4c 6f 61 64 54 69 6d 65 2c 22 72 65 71 75 65 73 74 54 69 6d 65 22 69 6e 20 72 26 26 30 3c 72 2e 72 65 71 75 65 73 74 54 69 6d 65 26 26 28 6e 3d 72 2e 72 65 71 75 65 73 74 54 69 6d 65 29 2c 72 2e 66 69 72 73 74 50 61 69 6e 74 54 69 6d 65 3e 3d 6e 26 26 28 74 3d 31 65 33 2a 28 72 2e 66 69 72 73 74 50 61 69 6e 74 54 69 6d 65 2d 6e 29 29 29 29 2c 21 30 3d 3d 3d 46 2e 67 65 74 41 63 63 75 72 61 74 65 46 69 72 73 74 50 61 69 6e 74 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3c 30 7c 7c 31 32 65 34 3c 74 29 29 7b 74 3d 70 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 Data Ascii: ntTime"in(r=p.chrome.loadTimes())&&0<r.firstPaintTime&&(n=r.startLoadTime,"requestTime"in r&&0<r.requestTime&&(n=r.requestTime),r.firstPaintTime>=n&&(t=1e3*(r.firstPaintTime-n)))),!0===F.getAccurateFirstPaint&&(void 0===t\|\|t<0\|\|12e4<t)){t=p.performance.ti
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 72 2e 70 75 73 68 28 46 2e 77 68 69 74 65 4c 69 73 74 65 64 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 73 5b 61 5d 2b 22 5b 69 64 22 2b 6e 2b 27 3d 22 27 2b 65 2b 27 22 5d 27 29 3b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 6f 2b 22 5b 64 61 74 61 2d 79 61 66 74 2d 6d 6f 64 75 6c 65 22 2b 6e 2b 27 3d 22 27 2b 65 2b 27 22 5d 27 29 2c 72 2e 6a 6f 69 6e 28 22 2c 22 29 7d 2c 67 65 74 4d 6f 64 75 6c 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 46 2e 70 72 65 66 65 72 44 61 74 61 4d 6f 64 4e 61 6d 65 4f 76 65 72 49 64 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 79 61 66 74 2d 6d 6f 64 75 6c 65 22 29 7c 7c 65 2e 69 64 7c 7c 76 6f 69 64 20 30 3a 65 2e 69 64 7c 7c 65 Data Ascii: ength;a<i;a++)r.push(F.whiteListedContainerElements[a]+"[id"+n+'="'+e+'"]');return r.push(o+"[data-yaft-module"+n+'="'+e+'"]'),r.join(",")},getModuleName:function(e){return F.preferDataModNameOverId?e.getAttribute("data-yaft-module")\|\|e.id\|\|void 0:e.id\|\|e
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 72 74 3a 2d 31 2c 72 65 71 75 65 73 74 53 74 61 72 74 3a 6e 2e 72 65 71 75 65 73 74 53 74 61 72 74 2d 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 72 65 71 75 65 73 74 44 75 72 61 74 69 6f 6e 3a 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 6e 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 72 65 73 70 6f 6e 73 65 44 75 72 61 74 69 6f 6e 3a 6e 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2d 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 7d 29 29 2c 73 3d 76 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 72 65 73 6f 75 72 63 65 22 29 2c 65 3d 30 3b 65 3c 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 22 64 6f 63 75 Data Ascii: rt:-1,requestStart:n.requestStart-n.navigationStart,requestDuration:n.responseStart-n.requestStart,responseStart:n.responseStart-n.navigationStart,responseDuration:n.responseEnd-n.responseStart})),s=v.getEntriesByType("resource"),e=0;e<s.length;e+=1)"docu
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 71 75 65 73 74 53 74 61 72 74 2b 74 2c 72 65 71 75 65 73 74 44 75 72 61 74 69 6f 6e 3a 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 65 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2b 74 2c 72 65 73 70 6f 6e 73 65 44 75 72 61 74 69 6f 6e 3a 30 3d 3d 3d 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3f 30 3a 65 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2d 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 72 65 74 75 72 6e 7b 77 69 6e 3a 70 2c 64 6f 63 3a 66 2c 64 6f 63 45 6c 65 6d 3a 65 2c 76 69 65 77 70 6f 72 74 57 69 64 74 68 3a 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 3c 70 2e 69 6e 6e 65 72 57 69 64 74 68 3f 70 2e 69 6e 6e 65 72 57 69 64 Data Ascii: questStart+t,requestDuration:e.responseStart-e.requestStart,responseStart:e.responseStart+t,responseDuration:0===e.responseStart?0:e.responseEnd-e.responseStart}}function D(){return{win:p,doc:f,docElem:e,viewportWidth:e.clientWidth<p.innerWidth?p.innerWid
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 74 3a 74 68 69 73 2e 76 69 65 77 70 6f 72 74 57 69 64 74 68 3a 61 2e 6c 65 66 74 3c 30 26 26 30 3c 61 2e 72 69 67 68 74 3f 61 2e 72 69 67 68 74 3a 61 2e 77 69 64 74 68 29 2a 28 72 3d 61 2e 62 6f 74 74 6f 6d 3c 30 3f 30 3a 61 2e 62 6f 74 74 6f 6d 3e 74 68 69 73 2e 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 3f 30 3c 3d 61 2e 74 6f 70 3f 74 68 69 73 2e 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 2d 61 2e 74 6f 70 3a 74 68 69 73 2e 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 3a 61 2e 74 6f 70 3c 30 26 26 30 3c 61 2e 62 6f 74 74 6f 6d 3f 61 2e 62 6f 74 74 6f 6d 3a 61 2e 68 65 69 67 68 74 29 29 2f 74 68 69 73 2e 67 65 74 56 69 65 77 70 6f 72 74 41 72 65 61 28 29 29 3c 31 26 26 28 6e 3d 4d 61 74 68 2e 63 65 69 6c 28 6e 29 29 2c 7b 78 3a 74 2c 79 3a 72 2c 65 6c 43 6f Data Ascii: t:this.viewportWidth:a.left<0&&0<a.right?a.right:a.width)*(r=a.bottom<0?0:a.bottom>this.viewportHeight?0<=a.top?this.viewportHeight-a.top:this.viewportHeight:a.top<0&&0<a.bottom?a.bottom:a.height))/this.getViewportArea())<1&&(n=Math.ceil(n)),{x:t,y:r,elCo
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 69 76 65 53 74 61 72 74 52 65 6e 64 65 72 3f 43 7c 7c 59 41 46 54 2e 67 65 74 53 74 61 72 74 52 65 6e 64 65 72 54 69 6d 65 28 29 3a 53 3f 76 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 2d 41 3a 30 2c 66 3d 6c 3f 67 3a 6d 2c 70 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 46 2e 77 68 69 74 65 4c 69 73 74 65 64 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 73 2e 6a 6f 69 6e 28 29 29 2c 68 3d 70 2e 6c 65 6e 67 74 68 3b 69 66 28 74 29 73 3d 21 30 2c 6d 3d 74 2e 6d 6f 64 53 74 61 72 74 3f 74 2e 6d 6f 64 53 74 61 72 74 3a 6d 2c 66 3d 74 2e 6d 6f 64 45 6e 64 3f 74 2e 6d 6f 64 45 6e 64 3a 66 2c 62 26 26 28 62 3c 6d 3f 6d 2d 3d 62 3a 6d 3d 30 2c 62 3c 66 3f 66 2d 3d 62 3a 66 3d 30 29 3b 65 Data Ascii: iveStartRender?C\|\|YAFT.getStartRenderTime():S?v.timing.domContentLoadedEventStart-A:0,f=l?g:m,p=e.querySelectorAll(F.whiteListedContainerElements.join()),h=p.length;if(t)s=!0,m=t.modStart?t.modStart:m,f=t.modEnd?t.modEnd:f,b&&(b<m?m-=b:m=0,b<f?f-=b:f=0);e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49818	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	579	OUT	GET /caas-assets-production/assets/v1/yahoo_sports_scores.235d7d2342a55c51.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	984	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1492043 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:33 GMT Etag: "235d7d2342a55c512bb28d2b6c89ff19" Last-Modified: Thu, 15 Feb 2024 16:48:09 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/793D) Vary: Accept-Encoding x-amz-id-2: mDVL5H+7zhkyMKgF3Fo7GRPR41UAKwQ4+iGb1Xu66fGdz0IcGzwMJya7c+4wZecTJR5gww8gzIM= x-amz-replication-status: COMPLETED x-amz-request-id: 08CNTFN69EKHXJ64 x-amz-server-side-encryption: AES256 x-amz-version-id: 54YcKy3_ypq6kEOGzFGC_HoU0eG87nZP X-Cache: HIT Content-Length: 37932 Connection: close
2024-03-03 23:26:33 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 79 61 68 6f 6f 5f 73 70 6f 72 74 73 5f 73 63 6f 72 65 73 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f Data Ascii: /! For license information please see yahoo_sports_scores.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?expo
2024-03-03 23:26:33 UTC	1	IN	Data Raw: 6d Data Ascii: m
2024-03-03 23:26:33 UTC	16383	IN	Data Raw: 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 5f 79 73 73 5f 76 73 5f 67 61 6d 65 5f 62 5f 63 5f 22 2e 63 6f 6e 63 61 74 28 65 29 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 5f 79 73 73 5f 76 73 5f 67 61 6d 65 5f 62 5f 63 5f 22 2e 63 6f 6e 63 61 74 28 65 29 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 29 3a 6f 3d 3d 3d 43 26 26 5a 28 65 29 26 26 28 69 3d 61 28 29 28 74 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 5f 79 73 73 5f 68 5f 67 61 6d 65 5f 73 74 61 74 75 73 5f 22 2e 63 6f 6e 63 61 74 28 65 29 29 2e 69 6e 6e 65 72 54 65 78 74 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 2d 20 22 29 2e 63 6f 6e 63 61 74 28 72 29 Data Ascii: ent.getElementById("m_yss_vs_game_b_c_".concat(e)).innerHTML="",document.getElementById("m_yss_vs_game_b_c_".concat(e)).appendChild(i)):o===C&&Z(e)&&(i=a()(t),document.getElementById("m_yss_h_game_status_".concat(e)).innerText="".concat(n," - ").concat(r)
2024-03-03 23:26:33 UTC	5165	IN	Data Raw: 29 7b 6e 2e 72 61 70 69 64 42 65 61 63 6f 6e 28 65 2c 6c 29 2c 6e 2e 6d 6f 76 65 53 6c 69 64 65 72 52 69 67 68 74 28 29 7d 29 29 2c 76 28 70 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 73 63 6f 72 65 22 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 72 61 70 69 64 42 65 61 63 6f 6e 28 65 2c 74 29 7d 29 29 7d 29 29 2c 74 68 69 73 2e 67 6c 69 64 65 2e 6d 6f 75 6e 74 28 7b 73 65 74 43 75 73 74 6f 6d 53 6c 69 64 65 57 69 64 74 68 3a 74 68 69 73 2e 73 65 74 43 75 73 74 6f 6d 53 6c 69 64 65 57 69 64 74 68 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 53 63 72 6f 6c 6c 43 68 61 6e 67 65 48 69 67 68 6c Data Ascii: ){n.rapidBeacon(e,l),n.moveSliderRight()})),v(p,e.querySelectorAll(".score")).forEach((function(t){t.addEventListener("click",(function(){n.rapidBeacon(e,t)}))})),this.glide.mount({setCustomSlideWidth:this.setCustomSlideWidth})}},{key:"onScrollChangeHighl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49817	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	566	OUT	GET /caas-assets-production/assets/v1/stream.0842230e9f6170e2.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1171967 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:33 GMT Etag: "0842230e9f6170e23710bd314f8ca9da" Last-Modified: Mon, 19 Feb 2024 09:40:48 GMT Server: ECAcc (nya/793E) Vary: Accept-Encoding x-amz-id-2: dzsZpvd2bC6wHtFLYJVl5L1gMSllzAcFPFgeLjSwFgQVvyoKsQfuzNHW1AEZ+JXfAGBUIG9ygHg= x-amz-replication-status: COMPLETED x-amz-request-id: JVVZ0WQHWMAA2VFQ x-amz-server-side-encryption: AES256 x-amz-version-id: 4zVpIrgIECfPBD3b.vqLKm19xqF4X_A. X-Cache: HIT Content-Length: 17202 Connection: close
2024-03-03 23:26:33 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var
2024-03-03 23:26:33 UTC	819	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 5b 6e 5d 7d 29 7d 2c 72 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: ct.defineProperty(t,n,{enumerable:!0,get:e[n]})},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.define

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49819	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	566	OUT	GET /caas-assets-production/assets/v1/readmo.8fd7554b79635ecb.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 7183169 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:33 GMT Etag: "8fd7554b79635ecb8ff7d857d1dbe51c" Last-Modified: Mon, 11 Dec 2023 19:57:17 GMT Server: ECAcc (nya/7892) Vary: Accept-Encoding x-amz-id-2: VeR8I9UbgxcpdPiJFaa+RH9/kH72MTm+SUuq6SbELC+4cX7t6rwkQXZj5zT2tZCKcRD+K86K9EY= x-amz-replication-status: COMPLETED x-amz-request-id: 6TDTA65567MPTYXW x-amz-server-side-encryption: AES256 x-amz-version-id: 0Zh.CrA7j3L3oF98be3hmYQa_YBCUGC9 X-Cache: HIT Content-Length: 3956 Connection: close
2024-03-03 23:26:33 UTC	3956	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49820	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	574	OUT	GET /caas-assets-production/assets/v1/finance_banner.a077410e98ae7689.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	983	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1492072 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:33 GMT Etag: "a077410e98ae768976c06f12883e53d6" Last-Modified: Thu, 15 Feb 2024 16:48:04 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/79A4) Vary: Accept-Encoding x-amz-id-2: FQj/DAUQu+rYL+qnbFtIsZRdtVEpe+uQg3z9ZBdSEFSide503IsmPT7Z4IjcKhjhzv5lcjwQsv4= x-amz-replication-status: COMPLETED x-amz-request-id: 6K9ZCXTKG6P8157Z x-amz-server-side-encryption: AES256 x-amz-version-id: yFmzzw4_h1ygT7rpANdDdp2peUuQfke7 X-Cache: HIT Content-Length: 7218 Connection: close
2024-03-03 23:26:33 UTC	7218	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49822	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	577	OUT	GET /caas-assets-production/assets/v1/y_finance_markets.daaf37e1adc7caf0.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1492072 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:33 GMT Etag: "daaf37e1adc7caf089362917df288896" Last-Modified: Thu, 15 Feb 2024 16:48:08 GMT Server: ECAcc (nya/797D) Vary: Accept-Encoding x-amz-id-2: Fc/Uzln3UL+WLyAQLon4YGXvZFj64xvlloXTy0a98Xpu7mFJHOwexf0gkziuLsT5rTGuT4xGaNU= x-amz-replication-status: COMPLETED x-amz-request-id: 6K9G4VKW89Q724XC x-amz-server-side-encryption: AES256 x-amz-version-id: ctkYEOUYjAgmGPY6jB3snd9BEw.1rbNX X-Cache: HIT Content-Length: 9864 Connection: close
2024-03-03 23:26:33 UTC	9864	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49825	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	383	OUT	GET /cv/apiv2/aolfp/images/weather/large/26-cloudy.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: Qg/laI8jzTy3tltOhCUytp4JhYLgJtlYSczXDBOb0m+vXUPbjkK6zYJxV2ujaoTaduTRn4TtaQc= x-amz-request-id: G9BX89GTWKM9KGCH Date: Fri, 01 Mar 2024 15:19:41 GMT Last-Modified: Fri, 17 Mar 2023 06:48:19 GMT ETag: "9845f4f8fca19653ddc63008de59b3ec" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 2323 Referrer-Policy: no-referrer-when-downgrade Age: 202013 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 31 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 32 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 30 2e 38 20 32 36 43 34 37 2e 32 20 32 36 2e 34 20 33 36 20 33 37 2e 32 20 33 34 2e 34 20 35 30 2e 34 43 33 30 20 34 39 2e 36 20 32 35 2e 32 20 34 39 2e 36 20 32 30 20 35 32 2e 38 43 31 34 2e 38 20 35 36 20 31 31 2e 32 20 36 31 2e 32 20 31 30 20 36 37 2e 32 43 39 2e 36 20 37 30 2e 38 20 31 30 20 37 34 20 31 31 2e 32 20 37 37 2e 32 43 31 32 2e 34 20 38 30 20 31 35 2e 32 20 38 32 20 31 38 2e 34 20 38 32 48 36 32 43 37 37 2e 36 20 Data Ascii: <svg width="128" height="128" viewBox="0 0 128 128" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M60.8 26C47.2 26.4 36 37.2 34.4 50.4C30 49.6 25.2 49.6 20 52.8C14.8 56 11.2 61.2 10 67.2C9.6 70.8 10 74 11.2 77.2C12.4 80 15.2 82 18.4 82H62C77.6
2024-03-03 23:26:33 UTC	1023	IN	Data Raw: 20 31 32 32 20 35 36 2e 34 20 31 32 32 20 37 34 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 32 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 31 36 39 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 32 20 37 34 43 31 32 32 20 39 31 2e 36 20 31 30 37 2e 32 20 31 30 36 20 38 38 2e 38 20 31 30 36 48 34 36 2e 34 43 33 35 2e 32 20 31 30 36 20 32 36 20 39 37 2e 32 20 32 36 20 38 36 2e 34 43 32 36 20 37 35 2e 36 20 33 35 2e 32 20 36 36 2e 38 20 34 36 2e 34 20 36 36 2e 38 43 35 30 20 36 36 2e 38 20 35 33 2e 32 20 36 37 2e 36 20 35 36 20 36 39 2e 32 43 35 38 2e 34 20 35 34 20 37 32 20 34 32 20 38 38 2e 38 20 34 32 43 31 30 37 2e 32 20 34 32 20 31 32 32 20 35 36 2e 34 20 31 32 32 20 37 34 5a 22 20 66 69 6c 6c 3d 22 23 37 44 43 42 46 46 22 20 66 69 6c 6c 2d 6f Data Ascii: 122 56.4 122 74Z" fill="url(#paint2_linear_104_169)"/><path d="M122 74C122 91.6 107.2 106 88.8 106H46.4C35.2 106 26 97.2 26 86.4C26 75.6 35.2 66.8 46.4 66.8C50 66.8 53.2 67.6 56 69.2C58.4 54 72 42 88.8 42C107.2 42 122 56.4 122 74Z" fill="#7DCBFF" fill-o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49826	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	400	OUT	GET /caas-assets-production/assets/v1/images/icons/elections-2024.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	619	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 453273 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Sun, 03 Mar 2024 23:26:33 GMT Etag: "93fe207c1b9a8c0b94bd6672c011a260" Last-Modified: Mon, 29 Jan 2024 15:56:05 GMT Server: ECAcc (nya/78AE) x-amz-id-2: iVdi98X9B9J+OGFplEloOjmM0V+s3pJlpp0lvuz6+2t94K+U271Sfvqw77eEHdTWJhdBVssIgt4= x-amz-replication-status: COMPLETED x-amz-request-id: 0E448CZACN1T0KBM x-amz-server-side-encryption: AES256 x-amz-version-id: Ms9nYqJanFgZvuhAPEDD6x_pMezWGxUs X-Cache: HIT Content-Length: 2346 Connection: close
2024-03-03 23:26:33 UTC	2346	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 31 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 31 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 34 36 32 20 38 2e 33 30 32 43 31 2e 33 36 37 33 33 20 37 2e 35 39 32 36 37 20 32 2e 31 30 39 33 33 20 36 2e 39 38 31 33 33 20 32 2e 36 38 38 20 36 2e 34 36 38 43 33 2e 32 36 36 36 37 20 35 2e 39 35 34 36 37 20 33 2e 37 35 32 20 35 2e 34 32 37 33 33 20 34 2e 31 34 34 20 34 2e 38 38 36 43 34 2e 35 33 36 20 34 2e 33 33 35 33 33 20 34 2e 37 33 32 20 33 2e 38 31 32 36 37 20 34 2e 37 33 32 20 33 2e 33 31 38 43 34 2e 37 33 32 20 33 2e 30 Data Ascii: <svg width="33" height="11" viewBox="0 0 33 11" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M0.462 8.302C1.36733 7.59267 2.10933 6.98133 2.688 6.468C3.26667 5.95467 3.752 5.42733 4.144 4.886C4.536 4.33533 4.732 3.81267 4.732 3.318C4.732 3.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49827	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 512582 Cache-Control: public, max-age=2592000 Cache-Tag: 397222119743688046708885623724902591450,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100030-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 153 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:33 GMT Edge-Cache-Tag: 397222119743688046708885623724902591450,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "79aab87c4d862190541fa781b46dd8ae" Expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 01 Feb 2024 07:23:26 GMT Server: ECAcc (nya/79B7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1480,owidth=400,oheight=400,obytes=36183,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100030-IAD X-Timer: S1708995811.075717,VS0,VE153 Content-Length: 1480 Connection: close
2024-03-03 23:26:33 UTC	1480	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 79 00 01 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 08 06 01 03 04 07 10 00 02 01 03 03 04 03 01 01 00 00 00 00 00 00 00 01 02 03 04 05 06 00 11 61 07 12 31 41 13 21 22 14 32 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 07 00 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T ya1A!"2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49828	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-06%2F77d38700-d9ed-11eb-be27-f7edbce29062&client=76f99bdb8f78cd44cc0b&signature=f681a4e420fd5eb2c85085401f6fad97b8f5c7d1 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	1480	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1201157 Cache-Control: public, max-age=2592000 Cache-Tag: 236711002658362934809277748201890113384,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21930-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 99 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:33 GMT Edge-Cache-Tag: 236711002658362934809277748201890113384,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "45c2d91c62d658d2a623b6a15cf1d645" Expiration: expiry-date="Wed, 24 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 25 Jan 2024 17:27:06 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/1C4E) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1029,owidth=400,oheight=400,obytes=51453,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21930-LGA X-Timer: S1708307236.275957,VS0,VE99 Content-Length: 1029 Connection: close
2024-03-03 23:26:33 UTC	1029	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 0a 0a 0a 0a 0b 0a 0c 0d 0d 0c 10 11 0f 11 10 18 16 14 14 16 18 24 1a 1c 1a 1c 1a 24 36 22 28 22 22 28 22 36 30 3a 2f 2c 2f 3a 30 56 44 3c 3c 44 56 64 54 4f 54 64 79 6c 6c 79 98 91 98 c7 c7 ff ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 78 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 06 09 01 07 04 05 08 10 00 02 02 01 03 03 04 03 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 11 00 12 13 08 22 31 61 21 41 42 14 15 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&""&0-0>>T$$6"(""("60:/,/:0VD<<DVdTOTdylly x"1a!AB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49829	35.170.143.77	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	751	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.aol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-03 23:26:33 UTC	206	IN	HTTP/1.1 200 OK Connection: close Server: guce Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Date: Sun, 03 Mar 2024 23:26:33 GMT
2024-03-03 23:26:33 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 39 68 6a 71 6a 73 6c 69 75 61 31 70 34 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"9hjqjsliua1p4","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49830	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	572	OUT	GET /caas-assets-production/assets/v1/trivia_games.f80a4703a2826569.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	983	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1152794 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:33 GMT Etag: "f80a4703a28265698c7256c1fa3acd5d" Last-Modified: Mon, 19 Feb 2024 15:03:15 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/1C2D) Vary: Accept-Encoding x-amz-id-2: 4nZNAnlEFwMXg4U5PFSnXslYN5GSH7WacFI81ZNshB3dQvJccbmrXXZ+FnFCjbo7oYwlcQGqkJQ= x-amz-replication-status: COMPLETED x-amz-request-id: 07BVR2607E59N4B9 x-amz-server-side-encryption: AES256 x-amz-version-id: YwLoMkJk36lHa_Lr9bJjzJpSiAQgt9Yy X-Cache: HIT Content-Length: 3989 Connection: close
2024-03-03 23:26:33 UTC	3989	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49832	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	518	OUT	GET /oa/consent.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	764	IN	HTTP/1.1 200 OK x-amz-id-2: BzVa1OMSgKo6npjUMGtRWMmLnPoT07UT2gpV9dnmdN+50Q1pLSQJ0ea4uO7KfwTc4cWwtq1IdF0= x-amz-request-id: 18GF8KC9F8HFFZWK Date: Sun, 03 Mar 2024 23:22:25 GMT Last-Modified: Thu, 22 Feb 2024 10:50:20 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 89477 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "bb48eff52a09bfa5a348f06d43ac8972" Age: 249 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:33 UTC	832	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6e 73 65 6e 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 36 38 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 2c 73 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 54 79 70 65 29 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3b 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 74 2e 61 6d 64 4f 29 69 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6f 3d 61 Data Ascii: /! For license information please see consent.js.LICENSE.txt /!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 73 20 63 68 61 72 61 63 74 65 72 73 20 6f 75 74 73 69 64 65 20 6f 66 20 74 68 65 20 4c 61 74 69 6e 31 20 72 61 6e 67 65 2e 22 29 3b 6f 3d 6f 3c 3c 38 7c 69 7d 72 65 74 75 72 6e 20 63 7d 2c 61 74 6f 62 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 3d 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 5d 2b 24 2f 2c 22 22 29 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 25 34 3d 3d 31 29 74 68 72 6f 77 20 6e 65 77 20 6e 28 22 27 61 74 6f 62 27 20 66 61 69 6c 65 64 3a 20 54 68 65 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 64 65 63 6f 64 65 64 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 6c 79 20 65 6e 63 6f 64 65 64 2e 22 29 3b 66 6f 72 28 76 61 72 20 69 2c 73 2c 61 3d 30 2c 72 3d 30 2c 63 3d 22 22 3b 73 3d 6f 2e 63 68 61 72 41 74 28 72 2b 2b 29 3b Data Ascii: s characters outside of the Latin1 range.");o=o<<8\|i}return c},atob:function(t){var o=String(t).replace(/[=]+$/,"");if(o.length%4==1)throw new n("'atob' failed: The string to be decoded is not correctly encoded.");for(var i,s,a=0,r=0,c="";s=o.charAt(r++);
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 28 30 2c 6c 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 6e 29 7b 69 66 28 6e 29 74 72 79 7b 69 66 28 33 3d 3d 3d 6e 2e 6f 75 74 63 6f 6d 65 7c 7c 34 3d 3d 3d 6e 2e 6f 75 74 63 6f 6d 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 6e 29 3b 65 26 26 28 28 30 2c 69 2e 6c 6f 67 44 65 63 69 73 69 6f 6e 29 28 65 2c 6e 2c 61 2e 4c 6f 67 45 76 65 6e 74 54 79 70 65 2e 65 72 72 6f 72 2c 7b 65 74 61 67 3a 22 66 61 69 6c 65 64 22 7d 29 2c 28 30 2c 75 2e 77 61 72 6e 29 28 22 45 72 72 6f 72 20 64 75 72 69 6e 67 20 64 65 63 69 73 69 6f 6e 3a 20 22 2e 63 6f 6e 63 61 74 28 65 2e 6d 65 73 73 61 67 65 3f 65 2e Data Ascii: catch(e){return void(0,l.dispatchTaskCompletedEvent)("",!1)}}function f(e,n){if(n)try{if(3===n.outcome\|\|4===n.outcome)return void p(n);e&&((0,i.logDecision)(e,n,a.LogEventType.error,{etag:"failed"}),(0,u.warn)("Error during decision: ".concat(e.message?e.
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 6f 6b 65 6e 4b 65 79 3d 22 56 4d 5f 41 47 45 4e 54 41 55 54 48 5f 54 4f 4b 45 4e 22 2c 6e 2e 6c 6f 67 44 65 63 69 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 73 29 7b 76 61 72 20 61 3d 6f 28 7b 7d 2c 69 29 3b 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 26 26 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 62 65 61 63 6f 6e 26 26 28 65 26 26 65 2e 6d 65 73 73 61 67 65 26 26 28 61 2e 6d 65 73 73 61 67 65 3d 65 2e 6d 65 73 73 61 67 65 29 2c 6e 2e 69 6e 6c 69 6e 65 55 72 69 26 26 28 61 2e 5f 77 3d 6e 2e 69 6e 6c 69 6e 65 55 72 69 29 2c 28 30 2c 6c 2e 6c 6f 67 45 76 65 6e 74 29 28 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 72 2e 4c 6f 67 45 76 65 6e 74 54 79 70 65 2e 62 61 63 6b 67 72 6f 75 6e 64 50 6f 73 74 2c 6f 28 Data Ascii: okenKey="VM_AGENTAUTH_TOKEN",n.logDecision=function(e,n,t,i,s){var a=o({},i);n.normalizedOptions&&n.normalizedOptions.beacon&&(e&&e.message&&(a.message=e.message),n.inlineUri&&(a._w=n.inlineUri),(0,l.logEvent)(void 0!==t?t:r.LogEventType.backgroundPost,o(
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 72 20 61 2c 72 2c 63 2c 6c 3d 6f 28 7b 7d 2c 74 29 2c 70 3d 28 6e 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2c 6e 2e 72 65 6d 6f 74 65 52 65 73 75 6c 74 29 2c 66 3d 6e 2e 69 6e 6c 69 6e 65 55 72 69 2c 6d 3d 6e 2e 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 55 72 69 3b 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 26 26 28 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 62 65 61 63 6f 6e 26 26 28 65 26 26 65 2e 6d 65 73 73 61 67 65 26 26 28 6c 2e 6d 65 73 73 61 67 65 3d 65 2e 6d 65 73 73 61 67 65 29 2c 70 26 26 76 6f 69 64 20 30 21 3d 3d 70 2e 73 74 61 74 75 73 43 6f 64 65 26 26 28 6c 2e 67 6d 5f 68 63 3d 70 2e 73 74 61 74 75 73 43 6f 64 65 29 2c 66 3f 6c 2e 5f 77 3d 66 3a 6d 26 26 28 6c 2e 5f 77 3d 6d 29 2c 76 6f 69 64 20 30 21 3d 3d 69 Data Ascii: r a,r,c,l=o({},t),p=(n.cookieResult,n.remoteResult),f=n.inlineUri,m=n.unsafeRejectedUri;n.normalizedOptions&&(n.normalizedOptions.beacon&&(e&&e.message&&(l.message=e.message),p&&void 0!==p.statusCode&&(l.gm_hc=p.statusCode),f?l._w=f:m&&(l._w=m),void 0!==i
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 70 74 69 6f 6e 73 2e 75 69 4f 70 74 69 6f 6e 73 2c 22 63 6f 6e 73 65 6e 74 6a 73 22 2c 22 5f 79 62 22 2c 21 30 29 3b 69 66 28 6f 29 7b 76 61 72 20 69 3b 6f 2e 65 78 65 63 75 74 65 49 6e 6c 69 6e 65 43 6f 6e 73 65 6e 74 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6d 65 73 73 61 67 65 54 79 70 65 29 7b 63 61 73 65 20 75 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 66 72 61 6d 65 52 65 61 64 79 3a 6f 2e 67 65 74 43 6f 6e 74 65 78 74 44 61 74 61 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 75 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 64 6f 6e 65 3a 76 61 72 20 73 3d 43 28 65 2c 32 29 3b 73 26 26 6f 2e 73 65 74 46 72 61 6d 65 53 65 73 73 69 6f 6e 28 73 29 2c 6f 2e 68 69 64 65 46 72 61 6d 65 28 29 2c 79 28 65 2c 22 63 6a 73 42 61 6e 6e 65 72 43 6c Data Ascii: ptions.uiOptions,"consentjs","_yb",!0);if(o){var i;o.executeInlineConsent((function(n){switch(n.messageType){case u.MessageType.frameReady:o.getContextData();break;case u.MessageType.done:var s=C(e,2);s&&o.setFrameSession(s),o.hideFrame(),y(e,"cjsBannerCl
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 3d 65 29 3a 28 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 69 73 53 74 69 63 6b 79 42 61 6e 6e 65 72 3d 21 31 2c 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 3d 6e 75 6c 6c 2c 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 6e 75 6c 6c 29 2c 6e 2e 69 6e 6c 69 6e 65 55 72 69 2b 3d 22 26 73 74 79 6c 65 3d 22 2e 63 6f 6e 63 61 74 28 74 29 2c 45 28 6e 29 7d 29 29 3b 28 30 2c 66 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 2c 65 3f 28 68 28 65 2c 6e 2c 7b 65 74 61 67 3a 22 66 61 69 6c 65 64 22 7d 29 2c 28 30 2c 70 2e 77 Data Ascii: =e):(n.normalizedOptions.isStickyBanner=!1,n.normalizedOptions.uiOptions.containerSelector=null,n.normalizedOptions.uiOptions.container=null),n.inlineUri+="&style=".concat(t),E(n)}));(0,f.dispatchTaskCompletedEvent)("",!1),e?(h(e,n,{etag:"failed"}),(0,p.w
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 61 63 74 69 6f 6e 3a 30 2c 63 6f 6f 6b 69 65 73 3a 5b 5d 2c 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 43 6f 6f 6b 69 65 73 3a 5b 5d 7d 2c 28 30 2c 6c 2e 77 61 72 6e 29 28 22 43 6f 6e 73 65 6e 74 20 63 68 65 63 6b 20 66 61 69 6c 75 72 65 2e 20 49 73 20 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 6f 6e 6c 69 6e 65 3f 22 29 29 2c 6f 28 65 2c 74 29 7d 28 65 2c 6e 2c 6f 2c 73 29 3b 65 6c 73 65 7b 73 77 69 74 63 68 28 69 2e 61 63 74 69 6f 6e 29 7b 63 61 73 65 20 33 3a 76 61 72 20 63 3d 69 2e 74 72 61 63 6b 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 2c 75 3d 69 2e 75 6e 73 61 66 65 43 6f 6e 73 65 6e 74 49 6e 6c 69 6e 65 55 72 69 2c 64 3d 28 30 2c 72 2e 69 73 49 6e 6c 69 6e 65 43 6f 6e 73 65 6e 74 53 75 70 70 6f 72 74 65 64 29 28 21 31 29 2c 66 3d 28 30 2c 70 2e 69 Data Ascii: action:0,cookies:[],unsafeRejectedCookies:[]},(0,l.warn)("Consent check failure. Is ".concat(n," online?")),o(e,t)}(e,n,o,s);else{switch(i.action){case 3:var c=i.trackUserInteraction,u=i.unsafeConsentInlineUri,d=(0,r.isInlineConsentSupported)(!1),f=(0,p.i
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 65 74 65 72 6d 69 6e 61 74 69 6f 6e 2e 61 63 74 69 6f 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 3d 22 68 74 74 70 73 3a 2f 2f 22 2e 63 6f 6e 63 61 74 28 65 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 29 2c 69 3d 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 65 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 29 3b 67 2e 63 6f 6f 6b 69 65 3d 69 2e 63 6f 6f 6b 69 65 50 61 69 72 3b 76 61 72 20 61 3d 7b 73 74 79 6c 65 3a 65 2e 69 73 53 74 69 63 6b 79 42 61 6e 6e 65 72 3f 22 69 6e 6c 69 6e 65 22 3a 22 6f 76 65 72 6c 61 79 22 2c 63 6f 6e 73 65 6e 74 42 61 73 65 55 52 49 3a 6f 2c 65 78 70 65 72 69 6d 65 6e 74 3a 65 2e 65 78 70 65 72 69 6d 65 6e 74 2c 67 63 72 75 6d 62 3a 69 2e 67 63 72 75 6d 62 2c 69 73 50 72 6f 64 75 63 74 Data Ascii: etermination.action)return void function(e,n,t){var o="https://".concat(e.consentHost),i=(0,s.default)(e.consentHost);g.cookie=i.cookiePair;var a={style:e.isStickyBanner?"inline":"overlay",consentBaseURI:o,experiment:e.experiment,gcrumb:i.gcrumb,isProduct
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 52 54 59 5f 43 4f 4e 53 45 4e 54 22 2c 34 30 39 36 3a 22 41 4c 4c 4f 57 5f 48 55 4d 41 4e 53 5f 54 4f 5f 52 45 41 44 5f 45 4d 41 49 4c 53 22 2c 38 31 39 32 3a 22 53 45 4c 4c 5f 50 45 52 53 4f 4e 41 4c 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 22 2c 31 36 33 38 34 3a 22 47 45 4e 45 52 41 4c 5f 41 4e 41 4c 59 53 49 53 5f 43 4f 4e 53 45 4e 54 22 2c 33 32 37 36 38 3a 22 54 48 49 52 44 5f 50 41 52 54 59 5f 43 4f 4e 54 45 4e 54 5f 45 4d 42 45 44 22 7d 2c 72 3d 5b 22 4e 4f 54 5f 43 4f 4e 53 45 4e 54 45 44 22 2c 22 43 4f 4e 53 45 4e 54 45 44 22 2c 22 44 45 43 4c 41 52 45 44 5f 4e 4f 4e 5f 45 55 22 5d 2c 63 3d 7b 54 4f 53 3a 32 2c 55 53 45 52 5f 54 59 50 45 3a 32 2c 43 4f 4e 53 45 4e 54 5f 56 45 52 53 49 4f 4e 3a 32 2c 43 4f 4e 53 45 4e 54 45 44 3a 32 2c 56 41 4c 49 44 Data Ascii: RTY_CONSENT",4096:"ALLOW_HUMANS_TO_READ_EMAILS",8192:"SELL_PERSONAL_INFORMATION",16384:"GENERAL_ANALYSIS_CONSENT",32768:"THIRD_PARTY_CONTENT_EMBED"},r=["NOT_CONSENTED","CONSENTED","DECLARED_NON_EU"],c={TOS:2,USER_TYPE:2,CONSENT_VERSION:2,CONSENTED:2,VALID

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49831	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	614	OUT	GET /cv/apiv2/aolfp/images/weather/small/26-cloudy.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: tudfyXiQlqFqP3HnxI2QaY8Kii9fhL2Tcv9/umDY5nzEeGRaQ6km6nM74lUJejfTnOM6NkE5RIU= x-amz-request-id: EA459XMKSGKVDR3W Date: Sat, 02 Mar 2024 13:57:57 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "597a5ba07cfbe0837ee1cc1067799195" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 2829 Referrer-Policy: no-referrer-when-downgrade Age: 120517 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 31 2e 34 39 33 39 20 38 2e 30 31 33 36 31 43 31 36 2e 32 39 30 34 20 38 2e 31 36 36 36 35 20 31 32 2e 30 30 35 32 20 31 32 2e 32 39 38 38 20 31 31 2e 33 39 33 20 31 37 2e 33 34 39 33 43 39 2e 37 30 39 35 37 20 31 37 2e 30 34 33 32 20 37 2e 38 37 33 30 34 20 31 37 2e 30 34 33 32 20 35 2e 38 38 33 34 38 20 31 38 2e 32 36 37 35 43 33 2e 38 39 33 39 31 20 31 39 2e 34 39 31 39 20 32 2e 35 31 36 35 32 20 32 31 2e 34 38 31 34 20 32 2e 30 35 37 33 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M21.4939 8.01361C16.2904 8.16665 12.0052 12.2988 11.393 17.3493C9.70957 17.0432 7.87304 17.0432 5.88348 18.2675C3.89391 19.4919 2.51652 21.4814 2.0573
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 74 31 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 35 32 36 29 22 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6d 75 6c 74 69 70 6c 79 22 2f 3e 0a 3c 2f 67 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 35 2e 36 31 37 34 20 32 39 2e 31 33 30 34 43 34 35 2e 36 31 37 34 20 33 35 2e 38 36 34 34 20 33 39 2e 39 35 34 38 20 34 31 2e 33 37 33 39 20 33 32 2e 39 31 34 38 20 34 31 2e 33 37 33 39 48 31 36 2e 36 39 32 32 43 31 32 2e 34 30 37 20 34 31 2e 33 37 33 39 20 38 2e 38 38 36 39 36 20 33 38 2e 30 30 37 20 38 2e 38 38 36 39 36 20 33 33 2e 38 37 34 38 43 38 2e 38 38 36 39 36 20 32 39 2e 37 34 32 36 20 31 32 2e 34 30 37 20 32 36 2e 33 37 35 37 20 31 36 2e 36 39 32 32 20 32 36 2e 33 37 35 37 43 31 38 2e 30 36 39 36 20 32 36 2e 33 37 35 37 20 31 39 2e 32 39 Data Ascii: t1_linear_104_526)" style="mix-blend-mode:multiply"/></g><path d="M45.6174 29.1304C45.6174 35.8644 39.9548 41.3739 32.9148 41.3739H16.6922C12.407 41.3739 8.88696 38.007 8.88696 33.8748C8.88696 29.7426 12.407 26.3757 16.6922 26.3757C18.0696 26.3757 19.29
2024-03-03 23:26:33 UTC	229	IN	Data Raw: 35 30 2e 36 31 33 37 22 20 79 31 3d 22 34 31 2e 33 37 33 39 22 20 78 32 3d 22 35 30 2e 36 31 33 37 22 20 79 32 3d 22 31 37 2e 32 31 37 39 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 32 31 30 34 33 36 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 43 37 43 44 44 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 35 45 42 45 46 22 2f 3e 0a 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 50.6137" y1="41.3739" x2="50.6137" y2="17.2179" gradientUnits="userSpaceOnUse"><stop stop-color="#B5BDC8"/><stop offset="0.210436" stop-color="#C7CDD2"/><stop offset="1" stop-color="#E5EBEF"/></linearGradient></defs></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49834	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	618	OUT	GET /cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: qPWFS+o0wCBtLyM1gvB0iUO9kzc57Tw6LQxiYRZFnuIPPVJ4q5k1YITKcbQdd21bjMy5m0aQt4Y= x-amz-request-id: JFKBE2Z3V7JPAKZZ Date: Fri, 19 Jan 2024 22:54:25 GMT Last-Modified: Wed, 25 Oct 2023 12:50:39 GMT ETag: "0f121237872ccb64cf52b3c4a2405745" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 5778 Referrer-Policy: no-referrer-when-downgrade Age: 3803530 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 2d 30 2e 31 2c 30 2e 35 2d 30 2e 31 2c 30 2e 37 63 30 2c 30 2e 32 2c 30 2c 30 2e 34 2c 30 2e 31 2c 30 2e 37 63 30 2c 30 2e 32 2c 30 2e 31 2c 30 2e 34 2c 30 2e 32 2c 30 2e 36 63 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 33 2c 30 2e 34 2c 30 2e 34 0a 09 43 33 30 2e 39 2c 38 2e 39 2c 33 31 2e 32 2c 39 2c 33 31 2e 34 2c 39 63 30 2e 34 2c 30 2c 30 2e 37 2d 30 2e 31 2c 30 2e 39 2d 30 2e 33 63 30 2e 32 2d 30 2e 32 2c 30 2e 33 2d 30 2e 35 2c 30 2e 34 2d 30 2e 39 68 31 2e 36 63 2d 30 2e 31 2c 30 2e 38 2d 30 2e 34 2c 31 2e 34 2d 30 2e 39 2c 31 2e 38 63 2d 30 2e 35 2c 30 2e 34 2d 31 2e 32 2c 30 2e 36 2d 32 2c 30 2e 36 0a 09 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 31 2d 31 2e 32 2d 30 2e 32 63 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 34 2d 31 2d 30 2e 36 63 2d Data Ascii: -0.1,0.5-0.1,0.7c0,0.2,0,0.4,0.1,0.7c0,0.2,0.1,0.4,0.2,0.6c0.1,0.2,0.2,0.3,0.4,0.4C30.9,8.9,31.2,9,31.4,9c0.4,0,0.7-0.1,0.9-0.3c0.2-0.2,0.3-0.5,0.4-0.9h1.6c-0.1,0.8-0.4,1.4-0.9,1.8c-0.5,0.4-1.2,0.6-2,0.6c-0.5,0-0.9-0.1-1.2-0.2c-0.4-0.2-0.7-0.4-1-0.6c-
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 2d 30 2e 36 2c 30 2e 31 2d 30 2e 38 2c 30 2e 32 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 35 2c 30 2e 34 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 33 2c 30 2e 36 0a 09 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 31 2c 30 2e 35 2d 30 2e 31 2c 30 2e 38 76 32 2e 37 68 2d 31 2e 37 76 2d 36 4c 38 32 2e 37 2c 34 2e 31 4c 38 32 2e 37 2c 34 2e 31 7a 20 4d 37 38 2e 35 2c 35 2e 36 63 2d 30 2e 32 2d 30 2e 32 2d 30 2e 35 2d 30 2e 33 2d 30 2e 39 2d 30 2e 33 63 2d 30 2e 33 2c 30 2d 30 2e 35 2c 30 2d 30 2e 37 2c 30 2e 31 0a 09 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 32 2d 30 2e 34 2c 30 2e 33 63 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 33 2d 30 2e 32 2c 30 2e 34 63 30 2c 30 2e 31 2d 30 2e 31 2c 30 2e 33 2d 30 2e 31 2c 30 2e 34 68 Data Ascii: -0.6,0.1-0.8,0.2c-0.2,0.1-0.4,0.2-0.5,0.4c-0.1,0.2-0.2,0.4-0.3,0.6c-0.1,0.2-0.1,0.5-0.1,0.8v2.7h-1.7v-6L82.7,4.1L82.7,4.1z M78.5,5.6c-0.2-0.2-0.5-0.3-0.9-0.3c-0.3,0-0.5,0-0.7,0.1c-0.2,0.1-0.3,0.2-0.4,0.3c-0.1,0.1-0.2,0.3-0.2,0.4c0,0.1-0.1,0.3-0.1,0.4h
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 2e 31 7a 20 4d 36 31 2e 31 2c 37 2e 33 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 34 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 33 2c 30 2d 30 2e 34 2c 30 2e 31 0a 09 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 32 63 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 31 2d 30 2e 32 2c 30 2e 33 43 35 39 2e 31 2c 38 2e 31 2c 35 39 2c 38 2e 32 2c 35 39 2c 38 2e 34 63 30 2c 30 2e 31 2c 30 2c 30 2e 33 2c 30 2e 31 2c 30 2e 34 0a 09 63 30 2e 31 2c 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 32 63 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 31 2c 30 2e 33 2c 30 2e 31 63 30 2e 31 2c 30 2c 30 2e 33 2c Data Ascii: .1z M61.1,7.3c-0.1,0-0.2,0.1-0.3,0.1c-0.1,0-0.2,0-0.4,0.1c-0.1,0-0.3,0-0.4,0.1c-0.1,0-0.2,0.1-0.4,0.1c-0.1,0-0.2,0.1-0.3,0.2c-0.1,0.1-0.2,0.1-0.2,0.3C59.1,8.1,59,8.2,59,8.4c0,0.1,0,0.3,0.1,0.4c0.1,0.1,0.1,0.2,0.2,0.2c0.1,0.1,0.2,0.1,0.3,0.1c0.1,0,0.3,
2024-03-03 23:26:33 UTC	578	IN	Data Raw: 35 2e 36 20 4d 35 32 2e 39 2c 38 2e 37 43 35 33 2e 32 2c 39 2c 35 33 2e 35 2c 39 2e 31 2c 35 34 2c 39 2e 31 0a 09 63 30 2e 33 2c 30 2c 30 2e 36 2d 30 2e 31 2c 30 2e 39 2d 30 2e 32 63 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 33 2c 30 2e 34 2d 30 2e 35 68 31 2e 35 63 2d 30 2e 32 2c 30 2e 37 2d 30 2e 36 2c 31 2e 32 2d 31 2e 31 2c 31 2e 35 63 2d 30 2e 35 2c 30 2e 33 2d 31 2e 31 2c 30 2e 35 2d 31 2e 38 2c 30 2e 35 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 31 2d 31 2e 33 2d 30 2e 32 0a 09 63 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 34 2d 31 2d 30 2e 36 63 2d 30 2e 33 2d 30 2e 33 2d 30 2e 35 2d 30 2e 36 2d 30 2e 36 2d 31 63 2d 30 2e 31 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 2d 30 2e 32 2d 31 2e 33 63 30 2d 30 2e 35 2c 30 2e 31 2d 30 2e 39 2c 30 2e 32 2d 31 2e Data Ascii: 5.6 M52.9,8.7C53.2,9,53.5,9.1,54,9.1c0.3,0,0.6-0.1,0.9-0.2c0.2-0.2,0.4-0.3,0.4-0.5h1.5c-0.2,0.7-0.6,1.2-1.1,1.5c-0.5,0.3-1.1,0.5-1.8,0.5c-0.5,0-0.9-0.1-1.3-0.2c-0.4-0.2-0.7-0.4-1-0.6c-0.3-0.3-0.5-0.6-0.6-1c-0.1-0.4-0.2-0.8-0.2-1.3c0-0.5,0.1-0.9,0.2-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49839	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	594	OUT	GET /cv/apiv2/adbuilder/gemini.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: doRjKqI7F/4el8zsecFbk+HoLOys7fmaPxwEDwJ2YGC6FGaI9cqBXIl22NKa3fgmLinG6I00v9I= x-amz-request-id: J3ZWZKQCANN5TKAM Date: Wed, 21 Feb 2024 06:47:33 GMT Last-Modified: Sat, 02 Mar 2019 01:45:46 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=2592000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 3328 Referrer-Policy: no-referrer-when-downgrade Etag: "99f89d94ebcff9a04ef4c4174c7bc13a" Age: 1010341 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c ba 49 44 41 54 78 01 ed 9d 0f 6c 55 57 1d c7 e9 2b b4 05 14 0a 71 09 a9 53 08 82 1b 93 b1 c1 60 65 73 42 eb d4 0d 88 d9 82 06 17 21 40 5b 68 67 dc a6 4e 63 30 73 6e 09 c3 69 44 e7 8c 9a 94 42 91 02 71 41 83 31 0a 1b e2 06 85 39 fe 0d 37 e6 74 8c ff 42 05 06 5b 0b 6c 5d ff 40 1f 7e 7e b5 ef ed be c7 bb f7 dc 73 df 79 f7 4f e5 24 b7 f7 de 73 7e e7 f7 e7 fb 3b ff cf b9 af 79 7d 22 18 6a 6b 6b af 47 ed 25 79 79 79 93 2f 5f be dc c9 73 23 d7 f7 6a 6a 6a 4e 45 cd 9c bc a8 29 5c 57 57 f7 99 78 3c be 09 bd fb 5b 75 c7 19 cd b1 58 ac 74 c1 82 05 87 ac f1 61 7f 8e 85 5d 41 ab 7e eb d6 ad cb a7 c4 d7 13 97 02 be d0 10 3f Data Ascii: PNGIHDR``w8sRGBIDATxlUW+qS`esB!@[hgNc0sniDBqA197tB[l]@~~syO$s~;y}"jkkG%yyy/_s#jjjNE)\WWx<[uXta]A~?
2024-03-03 23:26:33 UTC	1300	IN	Data Raw: d6 a9 6a 19 fd b4 e9 e8 65 9a d6 37 07 a0 b8 ea 68 79 b7 6d 00 fe 1a 27 0c 38 5f 55 95 93 55 54 d3 00 66 cb cf 37 07 00 6c 09 25 4f a5 ef 11 16 b8 6e cf 66 75 51 25 20 6c e9 be f5 01 80 3f 50 65 3c 4e fa ce ff 13 f8 82 87 6f 0e 50 81 2f e9 85 85 85 db dc d0 f5 26 9a 30 39 20 ce c6 4a a0 1d 62 10 8e 0d 93 03 44 97 09 41 80 10 a4 4c df 1c 40 fb ae 5c ec 82 66 31 7d 45 20 0b 84 41 39 c1 37 07 60 a0 f2 2b 76 c0 2f 63 e7 a9 5e 76 be 82 02 c4 6f b9 c9 61 28 5b 8a fd 18 7f 8f 05 84 4f a1 44 bf 84 22 2c 54 c5 29 99 07 d9 ea 7b 25 9b 49 0b 3c 8e c1 3b c1 d6 f6 0e cd 7c 26 6d 33 d0 67 3b 79 64 22 e6 b8 b9 92 81 91 9c 4e 7b 1b b5 cf 90 77 5f 10 1b 2e b2 c9 74 f2 e4 c9 9b b0 45 e6 3e c9 0d 24 de 2f f1 be 1f 2c f7 25 96 bf bb ab 3b a5 4e 7e 73 61 15 97 ed 37 b6 18 73 Data Ascii: je7hym'8_UUTf7l%OnfuQ% l?Pe<NoP/&09 JbDAL@\f1}E A97`+v/c^voa([OD",T){%I<;\|&m3g;yd"N{w_.tE>$/,%;N~sa7s
2024-03-03 23:26:33 UTC	728	IN	Data Raw: 99 77 d1 b9 36 9a 90 93 e0 c1 ef 54 7f 8c 5a b7 1a 79 53 13 71 72 47 d6 33 d8 f7 35 ec 3b 67 8d d7 7d ce 6a 14 b4 66 cd 1a 29 ed b2 97 2a 1b e0 49 f0 45 09 de 27 b1 27 bb 5e 16 dd e4 dd 54 60 e2 b4 95 12 78 0b 00 6c 84 67 0b f7 66 ee 1b b8 df 62 1a 7c 6c 88 01 fe 6f d3 c1 17 5b 88 bb 8f 0d f7 2d 14 c0 8f c8 bb d7 90 02 9a 0e 93 b5 6b d7 0e 61 e5 51 4a a2 fc 8a 94 6d 00 98 39 00 b3 d6 96 20 c4 09 9c 9c bb 9b 53 16 cf 2a 54 94 26 ef 73 f4 3b 9e 56 54 3d d5 00 14 1b 0a f8 5b 55 e0 f7 28 7e b3 c2 80 d0 26 d3 a7 c9 f1 16 55 b8 81 42 b6 6d d5 aa 55 9e 66 fa 9e 1c 40 a9 a8 03 fc 71 2a cd 7a d2 3d 95 0c 97 bc 73 4a 86 8d 32 9c 55 06 e8 46 f1 81 a1 f4 13 da 2d 8a b6 03 64 b4 83 46 f2 73 95 ca 40 c9 e8 44 29 69 ab 23 19 e8 6b 9e 47 f1 f7 5c 2a 5f 4e cb 50 ee 92 36 Data Ascii: w6TZySqrG35;g}jf)IE''^T`xlgfb\|lo[-kaQJm9 ST&s;VT=[U(~&UBmUf@qz=sJ2UF-dFs@D)i#kG\_NP6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49833	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1925057 Cache-Control: public, max-age=2592000 Cache-Tag: 397222119743688046708885623724902591450,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100114-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 27 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:33 GMT Edge-Cache-Tag: 397222119743688046708885623724902591450,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "df9a2fde7d1d68b13d038c4ab499201b" Expiration: expiry-date="Tue, 06 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 07 Feb 2024 11:56:45 GMT Server: ECAcc (nya/79B7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=277,owidth=400,oheight=400,obytes=36183,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100114-IAD X-Timer: S1707583336.147276,VS0,VE27 Content-Length: 277 Connection: close
2024-03-03 23:26:33 UTC	277	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 42 50 4c 54 45 47 70 4c 00 9b ff 00 9b ff 94 d5 ff 00 9b ff 00 9b ff 00 9b ff 01 9b ff 00 9b ff 01 9b ff 74 c9 ff 61 c2 ff a6 dd ff 41 b5 ff b3 e2 ff 35 b0 ff c5 e8 ff 6b c6 ff 2b ad ff 57 be ff 85 cf ff 1a a6 ff 83 fb 6a 47 00 00 00 0a 74 52 4e 53 00 c5 ff ff db fb 9a 0a 9e 33 fd e8 dd 8d 00 00 00 78 49 44 41 54 18 d3 65 cf 37 12 c3 30 10 03 40 08 c7 78 cc 41 ff ff aa 0b 79 3c b6 b9 25 1a 00 00 80 e8 8c b5 c6 45 3c 7c e0 5b f0 00 e0 2f 7e 5c 1e 40 e0 97 00 44 fe 88 70 94 a6 35 ad fc 04 0e 86 b9 a8 48 ed 37 49 d2 c0 b2 c8 dc 2b b5 46 92 b4 b0 4c 75 e5 3d a4 24 dd a9 59 18 32 6b c9 32 73 ed a5 d3 c0 91 7a 8b 26 29 3a e6 a0 3b 6b 8f 61 e7 f4 e3 dc df Data Ascii: PNGIHDR(-SBPLTEGpLtaA5k+WjGtRNS3xIDATe70@xAy<%E<\|[/~\@Dp5H7I+FLu=$Y2k2sz&):;ka

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49835	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2279201 Cache-Control: public, max-age=2592000 Cache-Tag: 457935326151757118911061591064955503832,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21955-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:33 GMT Edge-Cache-Tag: 457935326151757118911061591064955503832,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "12b179dfac257ba3cf6eadbc3d4f5057" Expiration: expiry-date="Wed, 17 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 18 Jan 2024 14:48:07 GMT Server: ECAcc (nya/7952) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=457,owidth=400,oheight=400,obytes=158455,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21955-LGA X-Timer: S1707229192.086253,VS0,VE1 Content-Length: 457 Connection: close
2024-03-03 23:26:33 UTC	457	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 a5 50 4c 54 45 47 70 4c 22 27 27 3f 47 50 33 3b 44 27 31 37 2f 35 3d 21 29 30 22 2a 30 14 19 1c 15 1b 20 32 3a 43 32 3a 43 17 1c 1d 2d 37 3f 39 3b 42 49 50 55 1b 21 29 28 31 38 14 19 1a 14 18 1a 2d 36 3f 31 38 40 a4 a4 a4 aa a9 a9 e8 e8 e9 d0 d1 d1 e3 e3 e2 8e 90 92 ac ad af 72 76 78 69 6c 71 ba ba bb 9d 9e 9e c9 c9 c9 c2 c2 c2 b4 b5 b6 1f 25 2e 23 2a 31 db dc dc 96 9a 9b d6 d6 d6 52 57 5b 2f 35 39 5b 5e 62 b1 b3 b3 a6 aa ad a0 a2 a1 df e0 e0 82 85 8a 80 83 86 60 63 63 63 66 67 85 89 8f d3 d4 d4 c3 c5 c7 71 1e b7 d1 00 00 00 16 74 52 4e 53 00 f9 f9 d9 98 f9 d9 09 99 31 97 31 c1 c1 fe fe 97 31 d9 d9 9a 9a 88 5b 29 0d 00 00 00 bd 49 44 41 54 18 19 2d Data Ascii: PNGIHDR(-SPLTEGpL"''?GP3;D'17/5=!)0"0 2:C2:C-7?9;BIPU!)(18-6?18@rvxilq%.#1RW[/59[^b`cccfgqtRNS111[)IDAT-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49836	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-03%2Fc6f4ca70-8d7a-11eb-ba4d-ac4cbcde9ebe&client=76f99bdb8f78cd44cc0b&signature=cf2e2debdb6c1969bcf75b99825fbbfedfac7f4b HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 12964 Cache-Control: public, max-age=2592000 Cache-Tag: 348394455909970221298307516704224167312,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000140-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: aa67b6d562bebd33c0cf08e35195552a cld_latency: 194 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:33 GMT Edge-Cache-Tag: 348394455909970221298307516704224167312,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "491574b00cd8fb418215debdb2dca2c9" Last-Modified: Sun, 03 Mar 2024 19:50:32 GMT Server: ECAcc (nya/792C) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=535,owidth=400,oheight=401,obytes=176359,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: aa67b6d562bebd33c0cf08e35195552a X-Served-By: cache-iad-kiad7000140-IAD X-Timer: S1709495432.801196,VS0,VE194 Content-Length: 535 Connection: close
2024-03-03 23:26:33 UTC	535	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 d5 50 4c 54 45 47 70 4c 46 60 a3 3a 56 9c d4 75 7d 37 54 9c c3 35 42 be cc e1 e9 b9 bb c7 47 53 80 92 c0 c4 38 45 c7 43 4f dd ba c2 4b 64 a5 c6 58 65 4c 65 a6 c7 4a 56 ff ff ff c8 4e 5a 81 92 be 41 5b 9e fa fa fb a5 b2 d1 5c 73 ad 5e 74 ac dd e1 ec 77 8a ba 7d 90 bc f7 f8 fa c5 53 61 d1 d7 e7 b0 bb d6 c1 2d 3a 8b 9b c5 23 42 92 a6 b2 d1 f5 f7 fa be 22 30 59 70 ac a1 ae cf 95 a4 ca 29 47 94 9b a9 cc 31 4e 98 c9 d1 e2 71 85 b7 dd e2 ed bf 27 35 da 8c 94 4f 68 a7 6b 80 b5 dd 94 9b 61 77 b0 79 8b bc 37 54 9b 48 62 a3 f0 f3 f7 fc fe fe 23 42 91 e3 a9 ae cc 6c 78 d7 82 89 7f 90 be 84 95 c1 bc c5 db 40 5b a0 ea ed f4 ba c4 db e6 b9 be ce 67 72 c4 53 61 0a Data Ascii: PNGIHDR(-SPLTEGpLF`:Vu}7T5BGS8ECOKdXeLeJVNZA[\s^tw}Sa-:#B"0Yp)G1Nq'5Ohkawy7THb#Blx@[grSa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49837	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:33 UTC	1488	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1526040 Cache-Control: public, max-age=2592000 Cache-Tag: 437559623224935281181735502381789763861,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000140-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 76 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:33 GMT Edge-Cache-Tag: 437559623224935281181735502381789763861,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "4e60d49658a9f45adeb0f4a371574f52" Expiration: expiry-date="Sun, 21 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 22 Jan 2024 13:39:49 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7896) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=354,owidth=400,oheight=400,obytes=38740,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000140-IAD X-Timer: S1707982353.206804,VS0,VE76 Content-Length: 354 Connection: close
2024-03-03 23:26:33 UTC	354	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 69 50 4c 54 45 47 70 4c ff ff ff ff 48 51 ff 00 16 ff ff ff ff ff ff ff 09 1c ff ff ff ff ff ff ff ff ff ff 00 16 ff 00 16 ff ff ff 00 00 00 ff 0a 1d d6 d6 d6 16 16 16 4f 4f 4f 85 85 85 1e 1e 1e ba ba ba 3a 3a 3a a8 a8 a8 77 77 77 65 65 65 90 90 90 9c 9c 9c c6 c6 c6 6b 6b 6b fa fa fa ee ee ee 31 31 31 58 58 58 2e 2e 2e 0c 0c 0c ff 13 d3 39 00 00 00 0c 74 52 4e 53 00 c1 09 31 f9 d9 99 99 09 31 d9 f9 ae d3 ab 93 00 00 00 9c 49 44 41 54 18 19 55 c1 89 92 c2 20 14 04 c0 89 42 1e e8 cc 02 b9 13 ef fd ff 8f 5c 2c 2d cb ed c6 53 34 ef 9c b7 88 97 60 7c b3 80 2a 34 fc 68 02 00 e3 90 73 62 ca 39 df 56 03 22 b9 48 1d 93 fa 7b d6 16 61 bc e4 5e 0f 26 15 0e ba Data Ascii: PNGIHDR(-SiPLTEGpLHQOOO:::wwweeekkk111XXX...9tRNS11IDATU B\,-S4`\|*4hsb9V"H{a^&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49838	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:33 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	1486	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 409715 Cache-Control: public, max-age=2592000 Cache-Tag: 455011173027560281408501159700854956092,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100098-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 76 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 455011173027560281408501159700854956092,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "f80320b7587d5726fc9c575ce8380237" Expiration: expiry-date="Fri, 26 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Jan 2024 16:58:27 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/78E0) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=304,owidth=400,oheight=400,obytes=12220,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100088-IAD X-Timer: S1706506679.249298,VS0,VE1 Content-Length: 304 Connection: close
2024-03-03 23:26:34 UTC	304	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 54 50 4c 54 45 47 70 4c cc 00 00 cc 00 00 f3 c1 c1 cc 00 00 cc 00 00 cc 00 00 cc 00 00 cc 00 00 cc 00 00 f1 ba ba e0 62 62 f2 bd bd f4 c8 c8 f1 b4 b4 d8 38 38 e2 69 69 ec 9f 9f f5 ce ce d5 2b 2b d1 18 18 db 4b 4b e8 89 89 e4 77 77 fe f9 f9 dd 56 56 fb e9 e9 e5 7f 7f 6b 48 0f c6 00 00 00 0a 74 52 4e 53 00 c2 ff ff da fa fe 99 09 31 f4 aa 51 5d 00 00 00 81 49 44 41 54 18 d3 65 8f 59 0e 84 20 0c 40 b1 05 2a a5 6c 8a ce 76 ff 7b 4e d5 64 62 86 f7 d7 d7 dd 18 25 90 75 ce 52 30 17 33 79 38 f1 34 9f f1 04 3f a6 c3 10 dc 20 ed f7 77 e1 83 16 14 e6 28 19 1e a9 6c 39 92 b1 3d b1 7c 90 2b 37 7e 61 b4 c6 55 a9 b0 e2 5b 16 64 c4 e8 54 60 54 81 f2 94 bc 1c c2 76 Data Ascii: PNGIHDR(-STPLTEGpLbb88ii++KKwwVVkHtRNS1Q]IDATeY @*lv{Ndb%uR03y84? w(l9=\|+7~aU[dT`Tv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49849	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	517	OUT	GET /cx/vzm/cs.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	791	IN	HTTP/1.1 200 OK x-amz-id-2: ULBO/cyQQInxz7179S8fEveelAe7g7iPje9QDZ1xNMUuGdLP8nux4xkZT+qfVrslw1uF+xPWPedubvO0QGydHTribd8Bg8gh x-amz-request-id: WYRVEMH0D8YECCHN Date: Sun, 03 Mar 2024 23:17:33 GMT Last-Modified: Thu, 29 Feb 2024 21:24:23 GMT x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=600 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1330 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "c555d6b72fc77a32a9ab83ec40a460f1" Age: 542 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 77 69 6e 64 6f 77 2c 74 3d 63 2e 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 2c 65 2c 72 29 7b 69 66 28 21 74 7c 7c 21 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 63 5b 74 5d 29 72 65 74 75 72 6e 20 72 28 29 3b 74 72 79 7b 63 5b 74 5d 28 6e 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 63 2c 74 29 7b 72 28 63 2c 74 29 7d 29 29 7d 63 61 74 63 68 28 63 29 7b 72 28 29 7d 7d 63 2e 43 4f 4d 53 43 4f 52 45 3d 7b 5f 76 65 72 73 69 6f 6e 3a 22 31 2e 35 2e 31 22 2c 62 65 61 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 22 5f 5f 75 73 70 61 70 69 22 2c 22 67 65 74 44 6f 4e 6f 74 53 65 6c 6c 22 2c 31 2c 28 66 75 6e 63 74 69 6f Data Ascii: !function(){"use strict";var c=window,t=c.document;function n(t,n,e,r){if(!t\|\|!n\|\|"function"!=typeof c[t])return r();try{c[t](n,e,(function(c,t){r(c,t)}))}catch(c){r()}}c.COMSCORE={_version:"1.5.1",beacon:function(e){n("__uspapi","getDoNotSell",1,(functio
2024-03-03 23:26:34 UTC	30	IN	Data Raw: 74 28 29 29 7d 7d 2c 63 2e 43 4f 4d 53 43 4f 52 45 2e 70 75 72 67 65 28 29 7d 28 29 3b 0a Data Ascii: t())}},c.COMSCORE.purge()}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49842	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	554	OUT	GET /aaq/wf/wf-autocomplete-1.31.8-6d742e966c.chunk.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	830	IN	HTTP/1.1 200 OK x-amz-id-2: VfKAple9YUibd65SRK9b3q8YgGhvcueR5kFm81B7uLviPi4fdd4dsJJZg63tZj0Xx0EBUdDtwFA= x-amz-request-id: AKASYF8J5MW3K83H Date: Thu, 29 Feb 2024 18:44:52 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "d1360a16026c224f7dd9d13ac565d5ad" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ssdoOsvvjWEangqcrVpxW.UjX1059Ev3 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8064 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 276103 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 77 65 62 70 61 63 6b 4a 73 6f 6e 70 77 61 66 65 72 5f 77 61 66 65 72 73 5f 77 61 66 65 72 5f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 28 5b 30 5d 2c 7b 22 2e 2f 73 72 63 2f 74 79 70 65 73 20 72 65 63 75 72 73 69 76 65 20 5e 5c 5c 2e 5c 5c 2f 2e 2a 24 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 73 28 72 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 69 66 28 21 28 74 2b 31 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 2e 22 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 69 3d 7b 22 2e 2f 61 6f 6c 2d 6c 6f 63 61 74 69 6f 6e 22 3a 22 2e 2f 73 72 63 2f 74 79 70 65 Data Ascii: webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.*$":function(e,t,s){function a(e){return s(r(e))}function r(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/type
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 6c 5d 7d 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 63 69 74 79 2c 61 3d 65 2e 63 6f 75 6e 74 72 79 2c 69 3d 65 2e 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6f 3d 65 2e 66 75 6c 6c 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6c 3d 65 2e 6e 2c 75 3d 65 2e 71 75 61 6c 69 66 69 65 64 4e 61 6d 65 2c 63 3d 65 2e 73 74 61 74 65 63 6f 64 65 2c 64 3d 65 2e 77 6f 65 69 64 2c 70 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 2c 66 3d 6f 7c 7c 69 Data Ascii: l]}return o.forEach(function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t=e.city,a=e.country,i=e.display_name,o=e.full_display_name,l=e.n,u=e.qualifiedName,c=e.statecode,d=e.woeid,p=arguments[1],m=document.createElement("li"),f=o\|\|i
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 3d 69 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 6c 2b 22 2d 22 2b 6d 29 3b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 67 2e 73 65 74 41 74 74 72 Data Ascii: =i.toUpperCase()){var b=document.createElement("li");b.setAttribute("tabindex",0),b.setAttribute("role","option"),b.setAttribute("id","wf-autocomplete-result-"+l+"-"+m);var g=document.createElement("a");g.classList.add("wafer-autocomplete-item"),g.setAttr
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 46 72 61 67 6d 65 6e 74 28 29 2c 63 3d 30 3b 63 3c 69 2e 6c 65 6e 67 74 68 26 26 63 3c 35 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 69 5b 63 5d 2c 70 3d 64 2e 74 69 74 6c 65 2c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 6f 2b 22 2d 22 2b 63 29 3b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 Data Ascii: Fragment(),c=0;c<i.length&&c<5;c++){var d=i[c],p=d.title,m=document.createElement("li");m.setAttribute("tabindex",0),m.setAttribute("role","option"),m.setAttribute("id","wf-autocomplete-result-"+o+"-"+c);var f=document.createElement("a");f.classList.add("
2024-03-03 23:26:34 UTC	22	IN	Data Raw: 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 63 2e 73 65 74 41 74 74 72 Data Ascii: plete-item"),c.setAttr
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 69 2b 22 2d 22 2b 6c 29 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 7d 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2c 6e 7d 7d 2c 22 2e 2f 73 72 63 2f 74 79 70 65 73 2f 73 70 6f 72 74 73 2d 74 65 61 6d 73 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2c 72 3d 61 2e 67 65 74 54 65 6d 70 6c 61 74 65 Data Ascii: ibute("id","wf-autocomplete-result-"+i+"-"+l),o.appendChild(c)}}return n.innerHTML="",n.appendChild(o),n}},"./src/types/sports-teams.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=window.wafer.utils,r=a.getTemplate
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 4c 4f 47 4f 5f 55 52 4c 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 62 2e 75 72 6c 29 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4e 41 4d 45 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 68 29 2c 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 79 29 7d 72 65 74 75 72 6e 20 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 29 2c 6f 7d 7d 2c 22 2e 2f 73 72 63 2f 74 79 70 65 73 2f 77 65 61 74 68 65 72 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 74 2e 67 65 74 4c 69 73 74 4d 61 72 6b 75 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 Data Ascii: LOGO_URL_PLACEHOLDER",b.url).replace("TEAM_NAME_PLACEHOLDER",h),l.appendChild(y)}return o.innerHTML="",o.appendChild(l),o}},"./src/types/weather.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0});t.getListMarkup=function(){v
2024-03-03 23:26:34 UTC	242	IN	Data Raw: 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 65 74 61 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 2c 66 2e 69 6e 6e 65 72 48 54 4d 4c 3d 76 2c 73 26 26 28 73 2e 69 73 53 61 76 65 64 4c 6f 63 61 74 69 6f 6e 28 68 29 26 26 28 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 73 61 76 65 64 2d 69 74 65 6d 22 29 2c 72 26 26 28 66 2e 69 6e 6e 65 72 48 54 4d 4c 2b 3d 72 2e 69 6e 6e 65 72 48 54 4d 4c 29 29 2c 6f 26 26 73 2e 61 64 64 4c 6f 63 61 74 69 6f 6e 28 65 29 29 2c 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 29 7d 29 2c 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 29 2c 6e 7d 7d 7d 29 3b Data Ascii: etAttribute("data-meta",JSON.stringify(e)),f.innerHTML=v,s&&(s.isSavedLocation(h)&&(f.classList.add("wafer-autocomplete-saved-item"),r&&(f.innerHTML+=r.innerHTML)),o&&s.addLocation(e)),l.appendChild(f)}),n.innerHTML="",n.appendChild(l),n}}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49845	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	527	OUT	GET /rx/ev/prod/evplayer.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: Ol9DnH1qF8G8/w3UnQBNuDwkFdTCZSmfcVbtNtub7uq6SYDbqsEt73HA2jFvNlFXV09ykuixkc4= x-amz-request-id: 5TJSCH0P8J1HNXQM Date: Sun, 03 Mar 2024 23:18:33 GMT Last-Modified: Thu, 29 Feb 2024 17:23:07 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: 7X3_HJrj_cH9xzzQzbEaKH7j3e5Qns67 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 241645 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "e88130b4694e228ea7f1ebcba7d6efd4" Age: 482 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 65 76 70 6c 61 79 65 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 31 35 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 65 3d 30 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 3c 69 3b 65 2b 2b 29 74 2b 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 6c 65 6e 67 74 68 3b 76 61 72 20 73 3d 41 72 72 61 79 28 74 29 2c 6e 3d 30 3b 66 6f 72 28 65 3d 30 3b 65 3c 69 3b 65 2b 2b Data Ascii: /! For license information please see evplayer.js.LICENSE.txt /(()=>{var t={1556:function(t,e){"use strict";var i=this&&this.__spreadArrays\|\|function(){for(var t=0,e=0,i=arguments.length;e<i;e++)t+=arguments[e].length;var s=Array(t),n=0;for(e=0;e<i;e++
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 5b 6f 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 65 2e 61 70 70 6c 79 28 69 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 72 2c 30 29 29 2c 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 7d 29 2c 74 68 69 73 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 62 6c 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 65 5b 69 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 69 66 28 74 68 69 73 2e 69 29 7b 69 66 28 74 20 Data Ascii: {for(var r=[],o=0;o<arguments.length;o++)r[o]=arguments[o];e.apply(i,Array.prototype.slice.call(r,0)),s.removeEventListener(t,n)}),this);return n},t.prototype.publish=function(t){for(var e=[],i=1;i<arguments.length;i++)e[i-1]=arguments[i];if(this.i){if(t
2024-03-03 23:26:34 UTC	406	IN	Data Raw: 29 26 26 6f 28 29 7d 7d 7d 2c 38 33 31 34 3a 28 74 2c 65 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 21 3d 3d 69 2e 67 26 26 69 2e 67 2e 77 69 6e 64 6f 77 3f 69 2e 67 2e 77 69 6e 64 6f 77 3a 7b 7d 2c 6e 3d 73 2e 6e 61 76 69 67 61 74 6f 72 3f 73 2e 6e 61 76 69 67 61 74 6f 72 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 3a 7b 7d 2c 72 3d 6e 2e 75 73 65 72 41 67 65 6e 74 3f 6e 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 3c 5b 41 2d 5a 61 2d 7a 5d 2b 2e 2a 3f 28 5c 2f 3e 7c 3e 2e Data Ascii: )&&o()}}},8314:(t,e,i)=>{"use strict";var s="undefined"!=typeof window?window:void 0!==i.g&&i.g.window?i.g.window:{},n=s.navigator?s.navigator:"undefined"!=typeof navigator?navigator:{},r=n.userAgent?n.userAgent.toLowerCase().replace(/<[A-Za-z]+.*?(\/>\|>.
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 65 2e 62 72 61 6e 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 29 72 65 74 75 72 6e 21 30 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 4e 61 4e 7d 72 65 74 75 72 6e 20 65 3f 70 61 72 73 65 46 6c 6f 61 74 28 65 2e 76 65 72 73 69 6f 6e 29 3a 4e 61 4e 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 6f 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3b 74 72 79 7b 65 3d 6f 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 20 65 3e 3d 30 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 Data Ascii: e.brand.toLowerCase().indexOf(t)>=0)return!0}))}catch(t){return NaN}return e?parseFloat(e.version):NaN},u=function(t){if(!o)return!1;var e;try{e=o.platform.toLowerCase().indexOf(t.toLowerCase())}catch(t){return!1}return e>=0},h=function(t){if(null===t)ret
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 28 72 29 2c 65 2e 61 6d 61 7a 6f 6e 3d 65 2e 61 6e 64 72 6f 69 64 26 26 2f 61 6d 61 7a 6f 6e 77 65 62 61 70 70 70 6c 61 74 66 6f 72 6d 2f 2e 74 65 73 74 28 72 29 26 26 2f 61 66 74 2f 2e 74 65 73 74 28 72 29 2c 65 2e 6c 67 3d 2f 77 65 62 30 73 2f 2e 74 65 73 74 28 72 29 2c 65 2e 74 69 7a 65 6e 3d 2f 74 69 7a 65 6e 2f 2e 74 65 73 74 28 72 29 2c 65 2e 6f 72 73 61 79 3d 2f 73 6d 61 72 74 74 76 2f 2e 74 65 73 74 28 72 29 26 26 21 65 2e 74 69 7a 65 6e 26 26 21 65 2e 6c 67 26 26 21 65 2e 70 68 69 6c 69 70 73 2c 65 2e 73 61 6d 73 75 6e 67 3d 65 2e 6f 72 73 61 79 7c 7c 65 2e 74 69 7a 65 6e 2c 65 2e 73 6f 6e 79 3d 2f 73 6f 6e 79 7c 62 72 61 76 69 61 2f 2e 74 65 73 74 28 72 29 2c 65 2e 70 6c 61 79 73 74 61 74 69 6f 6e 3d 2f 28 70 6c 61 79 73 74 61 74 69 6f 6e 29 2f Data Ascii: (r),e.amazon=e.android&&/amazonwebappplatform/.test(r)&&/aft/.test(r),e.lg=/web0s/.test(r),e.tizen=/tizen/.test(r),e.orsay=/smarttv/.test(r)&&!e.tizen&&!e.lg&&!e.philips,e.samsung=e.orsay\|\|e.tizen,e.sony=/sony\|bravia/.test(r),e.playstation=/(playstation)/
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 2f 2e 74 65 73 74 28 72 29 3f 65 2e 63 6c 61 73 73 3d 22 54 43 44 37 22 3a 2f 74 63 64 61 39 2f 2e 74 65 73 74 28 72 29 26 26 28 65 2e 63 6c 61 73 73 3d 22 54 43 44 41 39 22 29 3b 65 6c 73 65 20 69 66 28 65 2e 61 6d 61 7a 6f 6e 29 65 2e 6f 73 3d 22 61 6d 61 7a 6f 6e 22 2c 2f 61 66 74 62 2f 2e 74 65 73 74 28 72 29 3f 65 2e 63 6c 61 73 73 3d 22 41 46 54 42 22 3a 2f 61 66 74 73 2f 2e 74 65 73 74 28 72 29 3f 65 2e 63 6c 61 73 73 3d 22 41 46 54 53 22 3a 2f 61 66 74 6d 2f 2e 74 65 73 74 28 72 29 3f 65 2e 63 6c 61 73 73 3d 22 41 46 54 4d 22 3a 2f 61 66 74 6e 2f 2e 74 65 73 74 28 72 29 3f 65 2e 63 6c 61 73 73 3d 22 41 46 54 4e 22 3a 2f 61 66 74 72 73 2f 2e 74 65 73 74 28 72 29 3f 65 2e 63 6c 61 73 73 3d 22 41 46 54 52 53 22 3a 2f 61 66 74 74 2f 2e 74 65 73 74 28 Data Ascii: /.test(r)?e.class="TCD7":/tcda9/.test(r)&&(e.class="TCDA9");else if(e.amazon)e.os="amazon",/aftb/.test(r)?e.class="AFTB":/afts/.test(r)?e.class="AFTS":/aftm/.test(r)?e.class="AFTM":/aftn/.test(r)?e.class="AFTN":/aftrs/.test(r)?e.class="AFTRS":/aftt/.test(
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 64 72 6f 69 64 22 3a 2f 77 69 6e 64 6f 77 73 7c 77 69 6e 33 32 2f 2e 74 65 73 74 28 72 29 3f 28 65 2e 6f 73 3d 22 77 69 6e 64 6f 77 73 22 2c 65 2e 77 69 6e 58 50 3d 2f 28 77 69 6e 64 6f 77 73 20 6e 74 20 35 5c 2e 5b 31 2d 33 5d 29 2f 2e 74 65 73 74 28 72 29 2c 65 2e 63 6c 61 73 73 3d 65 2e 77 69 6e 58 50 3f 22 58 50 22 3a 65 2e 63 6c 61 73 73 2c 65 2e 77 69 6e 56 69 73 74 61 3d 2f 28 77 69 6e 64 6f 77 73 20 6e 74 20 36 5c 2e 30 29 2f 2e 74 65 73 74 28 72 29 2c 65 2e 63 6c 61 73 73 3d 65 2e 77 69 6e 56 69 73 74 61 3f 22 56 49 53 54 41 22 3a 65 2e 63 6c 61 73 73 2c 65 2e 77 69 6e 37 3d 2f 28 77 69 6e 64 6f 77 73 20 6e 74 20 36 5c 2e 31 29 2f 2e 74 65 73 74 28 72 29 2c 65 2e 63 6c 61 73 73 3d 65 2e 77 69 6e 37 3f 22 37 22 3a 65 2e 63 6c 61 73 73 2c 65 2e 77 Data Ascii: droid":/windows\|win32/.test(r)?(e.os="windows",e.winXP=/(windows nt 5\.[1-3])/.test(r),e.class=e.winXP?"XP":e.class,e.winVista=/(windows nt 6\.0)/.test(r),e.class=e.winVista?"VISTA":e.class,e.win7=/(windows nt 6\.1)/.test(r),e.class=e.win7?"7":e.class,e.w
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 3a 22 32 31 30 22 2c 45 5f 53 41 50 49 5f 49 4e 56 41 4c 49 44 5f 41 55 54 48 5f 4b 45 59 5f 56 45 52 53 49 4f 4e 3a 22 32 31 31 22 2c 45 5f 53 41 50 49 5f 47 45 4f 5f 50 4f 53 49 54 49 4f 4e 5f 52 45 51 55 49 52 45 44 3a 22 32 31 32 22 2c 45 5f 53 41 50 49 5f 52 45 53 54 52 49 43 54 45 44 5f 4e 45 54 57 4f 52 4b 5f 54 59 50 45 3a 22 32 31 34 22 2c 45 5f 53 41 50 49 5f 55 4e 53 55 50 50 4f 52 54 45 44 5f 4c 49 56 45 5f 4f 4e 5f 48 54 4d 4c 3a 22 33 30 35 22 2c 45 5f 44 52 4d 5f 55 4e 53 55 50 50 4f 52 54 45 44 5f 4f 53 3a 22 34 30 31 22 2c 45 5f 44 52 4d 5f 55 4e 53 55 50 50 4f 52 54 45 44 5f 42 52 4f 57 53 45 52 3a 22 34 30 32 22 2c 45 5f 44 52 4d 5f 46 4f 52 42 49 44 44 45 4e 5f 4c 49 43 45 4e 53 45 3a 22 34 30 33 22 2c 45 5f 50 4c 41 59 45 52 5f 41 4e Data Ascii: :"210",E_SAPI_INVALID_AUTH_KEY_VERSION:"211",E_SAPI_GEO_POSITION_REQUIRED:"212",E_SAPI_RESTRICTED_NETWORK_TYPE:"214",E_SAPI_UNSUPPORTED_LIVE_ON_HTML:"305",E_DRM_UNSUPPORTED_OS:"401",E_DRM_UNSUPPORTED_BROWSER:"402",E_DRM_FORBIDDEN_LICENSE:"403",E_PLAYER_AN
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 49 4c 45 44 3a 22 31 30 22 2c 45 5f 4b 45 59 5f 53 45 53 53 49 4f 4e 5f 46 41 49 4c 45 44 3a 22 31 31 22 2c 45 5f 4b 45 59 5f 45 52 52 4f 52 3a 22 31 32 22 2c 45 5f 4c 49 43 45 4e 53 45 5f 52 45 51 55 45 53 54 3a 22 31 33 22 2c 45 5f 46 4f 52 42 49 44 44 45 4e 5f 4c 49 43 45 4e 53 45 3a 22 31 34 22 7d 2c 65 2e 53 41 50 49 5f 43 4f 44 45 53 3d 7b 45 5f 49 4e 43 4f 4d 50 41 54 49 42 4c 45 5f 46 4f 52 4d 41 54 3a 22 31 30 30 22 2c 45 5f 4e 4f 5f 53 54 52 45 41 4d 53 3a 22 31 30 33 22 2c 45 5f 55 4e 41 55 54 48 4f 52 49 5a 45 44 5f 55 53 45 52 3a 22 32 30 35 22 2c 45 5f 52 45 53 54 52 49 43 54 45 44 5f 54 4f 5f 49 4e 54 45 52 4e 41 4c 3a 22 32 30 36 22 2c 45 5f 44 52 4d 5f 52 45 53 54 52 49 43 54 45 44 3a 22 32 30 37 22 2c 45 5f 55 4e 53 55 50 50 4f 52 54 45 Data Ascii: ILED:"10",E_KEY_SESSION_FAILED:"11",E_KEY_ERROR:"12",E_LICENSE_REQUEST:"13",E_FORBIDDEN_LICENSE:"14"},e.SAPI_CODES={E_INCOMPATIBLE_FORMAT:"100",E_NO_STREAMS:"103",E_UNAUTHORIZED_USER:"205",E_RESTRICTED_TO_INTERNAL:"206",E_DRM_RESTRICTED:"207",E_UNSUPPORTE
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 2c 75 3d 69 2e 63 6f 6e 74 65 78 74 2c 68 3d 69 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 4a 73 6f 6e 2c 6c 3d 69 2e 77 69 74 68 43 6f 6f 6b 69 65 2c 63 3d 69 2e 74 69 6d 65 6f 75 74 7c 7c 33 65 33 2c 64 3d 6f 2e 64 65 66 61 75 6c 74 2e 6f 6e 63 65 28 69 2e 73 75 63 63 65 73 73 48 61 6e 64 6c 65 72 29 2c 76 3d 6f 2e 64 65 66 61 75 6c 74 2e 6f 6e 63 65 28 69 2e 66 61 69 6c 75 72 65 48 61 6e 64 6c 65 72 29 2c 66 3d 21 31 2c 70 3d 6e 75 6c 6c 2c 6d 3d 7b 75 72 6c 3a 74 2c 63 6f 72 73 3a 73 2e 75 73 65 72 41 67 65 6e 74 2e 69 65 26 26 73 2e 75 73 65 72 41 67 65 6e 74 2e 69 65 3c 31 30 7c 7c 6c 2c 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 6c 2c 74 69 6d 65 6f 75 74 3a 63 2c 72 65 73 70 6f 6e 73 65 54 79 70 65 3a 69 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 2c Data Ascii: ,u=i.context,h=i.responseTypeJson,l=i.withCookie,c=i.timeout\|\|3e3,d=o.default.once(i.successHandler),v=o.default.once(i.failureHandler),f=!1,p=null,m={url:t,cors:s.userAgent.ie&&s.userAgent.ie<10\|\|l,withCredentials:l,timeout:c,responseType:i.responseType,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49850	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	530	OUT	GET /kj/js/dispatcherWidget.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	778	IN	HTTP/1.1 200 OK x-amz-id-2: WK/artqQTKAgD2TFa40KM8qDNTpGkkrrc85hjp6CX56J7ltHbwye1xfWSrUUuvdkADNuVcJA2ZZban+Ds4qMPA== x-amz-request-id: MDZ26B0ZR874B0BD Date: Sun, 03 Mar 2024 22:28:48 GMT Last-Modified: Fri, 02 Feb 2024 16:36:29 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 32281 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "2bcd33abcf1d9b53e39084bef961e404" Age: 3467 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 5f 5f 65 78 74 65 6e 64 73 20 3d 20 28 74 68 69 73 20 26 26 20 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 29 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 7b 20 5f 5f 70 72 6f 74 6f 5f 5f 3a 20 5b 5d 20 7d 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 20 26 26 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 20 64 2e 5f 5f 70 Data Ascii: (function () { var __extends = (this && this.__extends) \|\| (function () { var extendStatics = function (d, b) { extendStatics = Object.setPrototypeOf \|\| ({ __proto__: [] } instanceof Array && function (d, b) { d.__p
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 44 49 53 50 41 54 43 48 45 52 5f 41 4f 4c 5f 48 4f 53 54 20 3d 20 27 68 74 74 70 73 3a 2f 2f 6d 65 6d 62 65 72 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2e 61 6f 6c 2e 63 6f 6d 27 3b 0a 20 20 20 20 76 61 72 20 44 49 53 50 41 54 43 48 45 52 5f 59 41 48 4f 4f 5f 48 4f 53 54 20 3d 20 27 68 74 74 70 73 3a 2f 2f 64 69 73 70 61 74 63 68 65 72 2e 79 61 68 6f 6f 2e 63 6f 6d 27 3b 0a 20 20 20 20 76 61 72 20 4e 4f 53 43 52 4f 4c 4c 5f 43 4c 41 53 53 4e 41 4d 45 20 3d 20 27 5f 64 69 73 70 61 74 63 68 65 72 57 69 64 67 65 74 5f 6e 6f 73 63 72 6f 6c 6c 27 3b 0a 20 20 20 20 76 61 72 20 53 54 59 4c 45 5f 54 41 47 5f 43 4f 4e 54 45 4e 54 20 3d 20 22 2e 22 2e 63 6f 6e 63 61 74 28 4e 4f 53 43 52 4f 4c 4c 5f 43 4c 41 53 53 4e 41 4d 45 2c 20 22 20 7b 6f 76 65 72 66 6c 6f 77 3a Data Ascii: DISPATCHER_AOL_HOST = 'https://membernotifications.aol.com'; var DISPATCHER_YAHOO_HOST = 'https://dispatcher.yahoo.com'; var NOSCROLL_CLASSNAME = '_dispatcherWidget_noscroll'; var STYLE_TAG_CONTENT = ".".concat(NOSCROLL_CLASSNAME, " {overflow:
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 34 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 31 20 2b 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 20 2a 20 30 78 31 30 30 30 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 34 28 29 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 73 34 28 29 20 2b 20 Data Ascii: { var s4 = function () { return Math.floor((1 + Math.random()) * 0x10000) .toString(16) .substring(1); }; return s4() + s4() + '-' + s4() + '-' + s4() + '-' + s4() + '-' + s4() + s4() +
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 62 75 74 65 28 27 73 63 72 6f 6c 6c 69 6e 67 27 2c 20 27 6e 6f 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 69 6d 65 6e 73 69 6f 6e 28 69 66 72 61 6d 65 45 6c 6d 2c 20 63 6f 6e 74 65 78 74 2e 68 65 69 67 68 74 2c 20 22 68 65 69 67 68 74 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 73 65 74 44 69 6d 65 6e 73 69 6f 6e 28 69 66 72 61 6d 65 45 6c 6d 2c 20 63 6f 6e 74 65 78 74 2e 77 69 64 74 68 2c 20 22 77 69 64 74 68 22 29 20 26 26 20 63 6f 6e 74 65 78 74 2e 72 65 73 70 6f 6e 73 69 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 69 6d 65 6e 73 69 6f 6e 28 69 66 72 61 6d 65 45 6c 6d 2c 20 22 31 30 30 25 22 2c 20 22 77 69 64 74 68 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 Data Ascii: bute('scrolling', 'no'); setDimension(iframeElm, context.height, "height"); if (!setDimension(iframeElm, context.width, "width") && context.responsive) { setDimension(iframeElm, "100%", "width"); }
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 61 6e 64 62 6f 78 27 2c 20 27 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 2d 74 6f 2d 65 73 63 61 70 65 2d 73 61 6e 64 62 6f 78 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 61 6c 6c 6f 77 66 75 6c 6c 73 63 72 65 65 6e 27 2c 20 27 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 66 72 61 6d 65 45 6c 6d 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 Data Ascii: n'); iframeElm.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox'); iframeElm.setAttribute('allowfullscreen', ''); return iframeElm; }; Presenter.protot
2024-03-03 23:26:34 UTC	1061	IN	Data Raw: 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 6f 6e 48 69 64 65 28 63 6f 6e 74 65 78 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6e 53 68 6f 77 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 6e 53 68 6f 77 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 74 65 78 74 2e 73 68 6f 77 4f 6e 45 6c 65 6d 65 6e 74 43 6c 61 73 73 20 26 26 20 63 6f 6e 74 65 78 74 2e 73 68 6f 77 4f 6e 45 6c 65 6d 65 6e 74 43 6c 61 73 73 2e 65 6c 65 6d 65 Data Ascii: } else { this.onHide(context); } }; Presenter.prototype.canShow = function (context) { var canShow = true; if (context.showOnElementClass && context.showOnElementClass.eleme
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 66 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 6c 79 20 68 69 64 64 65 6e 20 6f 72 20 75 6e 73 69 7a 65 64 2c 20 74 68 65 72 65 20 63 61 6e 20 62 65 20 69 73 73 75 65 73 20 77 69 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 6e 69 74 69 61 6c 20 68 65 69 67 68 74 73 20 69 6e 20 6f 6c 64 65 72 20 62 72 6f 77 73 65 72 73 2e 20 49 66 20 6e 6f 74 20 61 6c 72 65 61 64 79 20 73 65 74 2c 20 73 65 74 20 69 74 20 74 6f 20 31 20 61 6e 64 20 6c 65 74 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 74 20 72 65 73 69 7a 65 20 66 72 6f 6d 20 74 68 65 72 65 2e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: { // If the content was previously hidden or unsized, there can be issues with // initial heights in older browsers. If not already set, set it to 1 and let // it resize from there.
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 43 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 2c 20 69 66 72 61 6d 65 55 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 66 72 61 6d 65 45 6c 6d 20 3d 20 5f 73 75 70 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 43 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 2e 63 61 6c 6c 28 74 68 69 73 2c 20 63 6f 6e 74 65 78 74 2c 20 69 66 72 61 6d 65 55 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 68 69 64 65 28 69 66 72 61 6d 65 45 6c 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 66 72 61 6d 65 45 6c 6d 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 41 75 74 6f 48 69 64 Data Ascii: prototype.buildContentContainer = function (context, iframeUrl) { var iframeElm = _super.prototype.buildContentContainer.call(this, context, iframeUrl); this.hide(iframeElm); return iframeElm; }; AutoHid
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 69 67 68 74 3a 20 61 75 74 6f 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 74 74 6f 6d 20 30 2e 33 73 3b 20 7a 2d 69 6e 64 65 78 3a 20 35 30 30 3b 20 22 2e 63 6f 6e 63 61 74 28 69 66 72 61 6d 65 45 6c 6d 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 68 69 64 65 46 6f 72 48 65 69 67 68 74 28 69 66 72 61 6d 65 45 6c 6d 2c 20 69 66 72 61 6d 65 45 6c 6d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 68 69 64 65 28 69 66 72 61 6d 65 45 6c 6d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 66 72 61 6d 65 45 6c 6d 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 53 74 69 63 Data Ascii: ight: auto; transition: bottom 0.3s; z-index: 500; ".concat(iframeElm.style.cssText); this.hideForHeight(iframeElm, iframeElm.style.height); Presenter.prototype.hide(iframeElm); return iframeElm; }; Stic
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 43 6c 6f 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 68 69 64 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 74 65 78 74 2e 69 66 72 61 6d 65 49 64 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 53 74 69 63 6b 79 46 6f 6f 74 65 72 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 68 69 64 65 46 6f 72 48 65 69 67 68 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 6d 2c 20 68 65 69 67 68 74 2c 20 66 6f 72 63 65 48 69 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 66 6f 72 63 65 48 69 Data Ascii: senter.prototype.onClose = function (context) { Presenter.prototype.hide(document.getElementById(context.iframeId)); }; StickyFooterPresenter.prototype.hideForHeight = function (elm, height, forceHide) { if (forceHi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49855	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	383	OUT	GET /cv/apiv2/aolfp/images/weather/small/26-cloudy.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	794	IN	HTTP/1.1 200 OK x-amz-id-2: tudfyXiQlqFqP3HnxI2QaY8Kii9fhL2Tcv9/umDY5nzEeGRaQ6km6nM74lUJejfTnOM6NkE5RIU= x-amz-request-id: EA459XMKSGKVDR3W Date: Sat, 02 Mar 2024 13:57:57 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "597a5ba07cfbe0837ee1cc1067799195" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 2829 Referrer-Policy: no-referrer-when-downgrade Age: 120518 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 31 2e 34 39 33 39 20 38 2e 30 31 33 36 31 43 31 36 2e 32 39 30 34 20 38 2e 31 36 36 36 35 20 31 32 2e 30 30 35 32 20 31 32 2e 32 39 38 38 20 31 31 2e 33 39 33 20 31 37 2e 33 34 39 33 43 39 2e 37 30 39 35 37 20 31 37 2e 30 34 33 32 20 37 2e 38 37 33 30 34 20 31 37 2e 30 34 33 32 20 35 2e 38 38 33 34 38 20 31 38 2e 32 36 37 35 43 33 2e 38 39 33 39 31 20 31 39 2e 34 39 31 39 20 32 2e 35 31 36 35 32 20 32 31 2e 34 38 31 34 20 32 2e 30 35 37 33 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M21.4939 8.01361C16.2904 8.16665 12.0052 12.2988 11.393 17.3493C9.70957 17.0432 7.87304 17.0432 5.88348 18.2675C3.89391 19.4919 2.51652 21.4814 2.0573
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 74 31 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 35 32 36 29 22 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6d 75 6c 74 69 70 6c 79 22 2f 3e 0a 3c 2f 67 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 35 2e 36 31 37 34 20 32 39 2e 31 33 30 34 43 34 35 2e 36 31 37 34 20 33 35 2e 38 36 34 34 20 33 39 2e 39 35 34 38 20 34 31 2e 33 37 33 39 20 33 32 2e 39 31 34 38 20 34 31 2e 33 37 33 39 48 31 36 2e 36 39 32 32 43 31 32 2e 34 30 37 20 34 31 2e 33 37 33 39 20 38 2e 38 38 36 39 36 20 33 38 2e 30 30 37 20 38 2e 38 38 36 39 36 20 33 33 2e 38 37 34 38 43 38 2e 38 38 36 39 36 20 32 39 2e 37 34 32 36 20 31 32 2e 34 30 37 20 32 36 2e 33 37 35 37 20 31 36 2e 36 39 32 32 20 32 36 2e 33 37 35 37 43 31 38 2e 30 36 39 36 20 32 36 2e 33 37 35 37 20 31 39 2e 32 39 Data Ascii: t1_linear_104_526)" style="mix-blend-mode:multiply"/></g><path d="M45.6174 29.1304C45.6174 35.8644 39.9548 41.3739 32.9148 41.3739H16.6922C12.407 41.3739 8.88696 38.007 8.88696 33.8748C8.88696 29.7426 12.407 26.3757 16.6922 26.3757C18.0696 26.3757 19.29
2024-03-03 23:26:34 UTC	229	IN	Data Raw: 35 30 2e 36 31 33 37 22 20 79 31 3d 22 34 31 2e 33 37 33 39 22 20 78 32 3d 22 35 30 2e 36 31 33 37 22 20 79 32 3d 22 31 37 2e 32 31 37 39 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 32 31 30 34 33 36 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 43 37 43 44 44 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 35 45 42 45 46 22 2f 3e 0a 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 3c 2f 64 65 66 73 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 50.6137" y1="41.3739" x2="50.6137" y2="17.2179" gradientUnits="userSpaceOnUse"><stop stop-color="#B5BDC8"/><stop offset="0.210436" stop-color="#C7CDD2"/><stop offset="1" stop-color="#E5EBEF"/></linearGradient></defs></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49843	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	535	OUT	GET /aaq/f10d509c/d3decajspqn3ue.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	822	IN	HTTP/1.1 200 OK x-amz-id-2: 8a5vcP745LbuMVr5usZMWh1q88wzTQX0pefSJZcbGtjwrQ/iNbNQM6GNOA34jRc/Je4ZcwWPqhY= x-amz-request-id: 5J8AVR4NYDTGND8Q Date: Sun, 03 Mar 2024 23:26:33 GMT Last-Modified: Fri, 01 Mar 2024 22:53:01 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: vTvjXdM3LAtN0eh2k0i5s4s7zkCJWDxV Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 154378 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "c3151870af568d8f2bd622af97194320" Age: 2 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 5b 27 42 4d 66 32 41 77 44 48 44 67 75 3d 27 2c 27 43 32 76 30 27 2c 27 77 65 31 6d 73 68 72 30 43 66 6a 4c 43 78 76 4c 43 33 71 3d 27 2c 27 43 4e 76 55 27 2c 27 79 78 62 50 76 78 6e 4c 43 4e 6e 4a 43 4d 4c 57 44 61 3d 3d 27 2c 27 44 78 6e 4c 43 4b 66 4a 44 67 4c 32 79 78 72 50 42 32 34 3d 27 2c 27 72 75 58 66 74 75 76 6f 76 66 39 6f 74 30 72 66 27 2c 27 44 32 76 49 41 32 4c 30 71 78 76 4b 41 77 39 65 7a 77 6e 56 7a 67 76 4b 71 4e 4c 30 7a 75 6e 56 44 77 35 30 27 2c 27 43 33 6c 72 47 71 3d 3d 27 2c 27 44 67 76 34 44 63 39 4f 44 67 31 53 27 2c 27 43 33 72 48 79 32 53 3d 27 2c 27 6c 63 62 55 42 59 31 4c 44 4d 66 53 6f 49 61 3d 27 2c 27 79 32 39 55 43 32 39 53 7a 71 3d 3d 27 2c 27 42 4d 39 4b Data Ascii: (new function(){var c=['BMf2AwDHDgu=','C2v0','we1mshr0CfjLCxvLC3q=','CNvU','yxbPvxnLCNnJCMLWDa==','DxnLCKfJDgL2yxrPB24=','ruXftuvovf9ot0rf','D2vIA2L0qxvKAw9ezwnVzgvKqNL0zunVDw50','C3lrGq==','Dgv4Dc9ODg1S','C3rHy2S=','lcbUBY1LDMfSoIa=','y29UC29Szq==','BM9K
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 62 48 7a 32 66 30 41 77 39 55 27 2c 27 69 63 38 47 7a 32 76 30 27 2c 27 43 32 4c 36 7a 71 3d 3d 27 2c 27 73 64 4c 6c 73 57 3d 3d 27 2c 27 79 77 58 53 42 33 43 54 7a 4d 39 59 42 78 6d 47 79 77 58 53 42 33 43 54 43 67 39 50 42 4e 72 4c 43 49 31 53 42 32 6e 52 69 67 66 53 42 67 39 33 6c 78 62 56 43 68 76 57 43 59 62 48 42 67 58 56 44 59 31 57 42 33 62 31 43 68 6d 54 44 67 38 54 7a 78 6e 4a 79 78 62 4c 6c 78 6e 48 42 4d 72 49 42 33 47 47 79 77 58 53 42 33 43 54 43 32 66 54 7a 73 31 56 43 4d 4c 4e 41 77 34 47 79 77 58 53 42 33 43 54 43 32 6e 59 41 78 62 30 43 59 62 48 42 67 58 56 44 59 31 30 42 33 61 54 42 4d 66 32 41 77 44 48 44 67 4c 56 42 49 31 49 45 73 31 31 43 32 76 59 6c 77 66 4a 44 67 4c 32 79 78 72 50 42 32 34 3d 27 2c 27 44 68 6a 50 42 71 3d 3d 27 2c Data Ascii: bHz2f0Aw9U','ic8Gz2v0','C2L6zq==','sdLlsW==','ywXSB3CTzM9YBxmGywXSB3CTCg9PBNrLCI1SB2nRigfSBg93lxbVChvWCYbHBgXVDY1WB3b1ChmTDg8TzxnJyxbLlxnHBMrIB3GGywXSB3CTC2fTzs1VCMLNAw4GywXSB3CTC2nYAxb0CYbHBgXVDY10B3aTBMf2AwDHDgLVBI1IEs11C2vYlwfJDgL2yxrPB24=','DhjPBq==',
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 38 3d 27 2c 27 42 67 76 55 7a 33 72 4f 27 2c 27 43 67 66 4e 7a 78 7a 50 7a 78 43 3d 27 2c 27 73 66 72 6e 74 65 72 56 79 33 76 54 7a 77 35 30 27 2c 27 43 32 66 55 7a 67 6a 56 45 64 30 49 27 2c 27 75 30 6e 73 73 76 62 75 27 2c 27 43 32 66 55 7a 67 6a 56 45 61 3d 3d 27 2c 27 79 78 62 57 42 68 4c 5a 43 4d 6e 4b 42 32 6d 3d 27 2c 27 44 77 35 53 42 32 66 4b 27 2c 27 7a 32 76 30 74 33 44 55 75 68 6a 56 43 67 76 59 44 68 4c 6f 79 77 31 4c 43 57 3d 3d 27 2c 27 71 4c 76 75 76 65 39 6f 27 2c 27 74 49 39 62 27 2c 27 70 73 48 43 7a 63 53 50 78 68 6d 4f 79 32 39 55 44 67 76 55 44 64 30 49 77 31 34 49 78 73 53 49 6b 71 3d 3d 27 2c 27 44 67 76 34 44 61 3d 3d 27 2c 27 6f 59 62 5a 79 33 6a 50 43 68 71 54 43 33 6a 4a 69 63 44 55 42 32 35 4a 7a 73 30 3d 27 2c 27 44 32 4c 4b Data Ascii: 8=','BgvUz3rO','CgfNzxzPzxC=','sfrnterVy3vTzw50','C2fUzgjVEd0I','u0nssvbu','C2fUzgjVEa==','yxbWBhLZCMnKB2m=','Dw5SB2fK','z2v0t3DUuhjVCgvYDhLoyw1LCW==','qLvuve9o','tI9b','psHCzcSPxhmOy29UDgvUDd0Iw14IxsSIkq==','Dgv4Da==','oYbZy3jPChqTC3jJicDUB25Jzs0=','D2LK
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 43 61 3d 3d 27 2c 27 79 78 62 50 75 32 6e 59 41 78 62 30 75 33 6a 4a 27 2c 27 7a 78 6a 59 42 33 6a 74 44 68 6a 50 42 4d 43 3d 27 2c 27 6c 63 62 4b 42 32 6d 36 69 61 3d 3d 27 2c 27 6a 4d 35 48 42 77 75 39 27 2c 27 43 4d 76 54 42 33 7a 4c 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 76 65 6a 70 72 66 4b 3d 27 2c 27 44 4d 66 53 44 77 76 5a 27 2c 27 75 31 7a 68 72 77 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 79 33 76 59 43 4d 76 55 44 66 6e 4a 43 4d 4c 57 44 61 3d 3d 27 2c 27 78 33 72 35 43 67 76 56 7a 49 47 3d 27 2c 27 41 77 35 5a 7a 78 6a 30 71 4d 76 4d 42 33 6a 4c 27 2c 27 7a 32 76 30 72 78 7a 4c 42 4e 72 5a 27 2c 27 69 64 34 47 7a 78 7a 48 42 61 3d 3d 27 2c 27 7a 78 7a 30 6c 77 7a 49 42 68 69 3d 27 2c 27 79 4d 4c 4b 27 2c 27 42 4d 39 55 7a 71 3d 3d 27 2c 27 Data Ascii: Ca==','yxbPu2nYAxb0u3jJ','zxjYB3jtDhjPBMC=','lcbKB2m6ia==','jM5HBwu9','CMvTB3zLqxr0CMLIDxrL','vejprfK=','DMfSDwvZ','u1zhrwXLBwvUDa==','y3vYCMvUDfnJCMLWDa==','x3r5CgvVzIG=','Aw5Zzxj0qMvMB3jL','z2v0rxzLBNrZ','id4GzxzHBa==','zxz0lwzIBhi=','yMLK','BM9Uzq==','
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 77 71 3d 27 2c 27 7a 78 7a 30 6c 77 76 59 43 47 3d 3d 27 2c 27 79 33 6a 4c 79 78 72 4c 76 68 6a 4c 7a 76 44 48 42 67 54 4c 43 47 3d 3d 27 2c 27 44 67 66 49 42 32 39 53 79 71 3d 3d 27 2c 27 43 33 6a 4a 6c 4d 6e 56 42 4e 72 4c 42 4e 71 3d 27 2c 27 41 67 4c 4b 7a 67 76 55 27 2c 27 43 68 6a 56 44 67 39 30 45 78 62 4c 27 2c 27 79 32 39 55 79 32 66 30 27 2c 27 43 4d 76 30 44 78 6a 55 69 63 61 4b 43 68 48 35 27 2c 27 43 4d 76 4d 43 4d 76 5a 41 63 62 42 27 2c 27 70 68 6e 4a 43 4d 4c 57 44 64 35 4b 42 32 6e 31 42 77 76 55 44 63 35 4a 44 78 6a 59 7a 77 35 30 75 32 6e 59 41 78 62 30 69 63 79 4d 69 67 72 56 79 33 76 54 7a 77 35 30 6c 4d 6e 31 43 4e 6a 4c 42 4e 72 74 79 33 6a 50 43 68 71 55 43 4d 76 54 42 33 7a 4c 6b 63 4b 37 27 2c 27 7a 78 6a 59 42 33 69 3d 27 2c 27 Data Ascii: wq=','zxz0lwvYCG==','y3jLyxrLvhjLzvDHBgTLCG==','DgfIB29Syq==','C3jJlMnVBNrLBNq=','AgLKzgvU','ChjVDg90ExbL','y29Uy2f0','CMv0DxjUicaKChH5','CMvMCMvZAcbB','phnJCMLWDd5KB2n1BwvUDc5JDxjYzw50u2nYAxb0icyMigrVy3vTzw50lMn1CNjLBNrty3jPChqUCMvTB3zLkcK7','zxjYB3i=','
2024-03-03 23:26:34 UTC	373	IN	Data Raw: 54 41 77 71 3d 27 2c 27 76 68 6a 50 7a 67 76 55 44 61 3d 3d 27 2c 27 41 4e 6e 56 42 47 3d 3d 27 2c 27 77 30 76 73 75 4c 39 67 78 71 3d 3d 27 2c 27 71 4d 66 55 42 4d 76 59 27 2c 27 79 5a 6a 5a 41 67 69 54 42 32 66 56 6c 4e 6e 5a 43 63 35 35 79 77 48 56 42 59 35 4a 42 32 30 56 79 77 72 54 79 78 47 56 79 4d 4c 4b 6c 33 62 48 43 4e 72 55 7a 78 6a 5a 6c 31 4c 71 71 4b 50 74 27 2c 27 79 77 6e 30 41 77 39 55 78 32 35 48 42 77 75 3d 27 2c 27 79 77 72 54 27 2c 27 7a 67 4c 59 27 2c 27 44 67 76 54 43 67 58 48 44 67 75 3d 27 2c 27 42 4d 39 4b 7a 76 72 35 43 67 75 3d 27 2c 27 43 4d 76 53 42 32 66 4b 27 2c 27 44 4d 66 59 69 68 44 59 41 78 72 4c 72 4d 34 47 70 73 62 33 41 77 35 4b 42 33 44 42 69 47 3d 3d 27 2c 27 41 77 71 39 27 2c 27 6a 4d 6a 48 70 71 3d 3d 27 2c 27 41 Data Ascii: TAwq=','vhjPzgvUDa==','ANnVBG==','w0vsuL9gxq==','qMfUBMvY','yZjZAgiTB2fVlNnZCc55ywHVBY5JB20VywrTyxGVyMLKl3bHCNrUzxjZl1LqqKPt','ywn0Aw9Ux25HBwu=','ywrT','zgLY','DgvTCgXHDgu=','BM9Kzvr5Cgu=','CMvSB2fK','DMfYihDYAxrLrM4Gpsb3Aw5KB3DBiG==','Awq9','jMjHpq==','A
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 43 32 48 56 44 77 58 4b 6c 77 6a 53 42 32 6e 52 27 2c 27 76 30 66 65 6c 71 3d 3d 27 2c 27 76 65 6a 6d 27 2c 27 79 78 62 57 6c 77 6a 48 42 4d 35 4c 43 47 3d 3d 27 2c 27 7a 78 7a 30 6c 77 58 56 7a 57 3d 3d 27 2c 27 43 32 76 30 75 4d 76 58 44 77 76 5a 44 65 48 4c 79 77 72 4c 43 47 3d 3d 27 2c 27 44 67 39 57 27 2c 27 76 32 4c 55 7a 67 39 33 6c 4d 58 56 79 32 66 30 41 77 39 55 27 2c 27 6b 67 7a 31 42 4d 6e 30 41 77 39 55 6b 68 44 50 42 4d 72 56 44 59 58 5a 7a 77 58 4d 6c 68 62 48 43 4d 76 55 44 63 58 30 42 33 61 53 7a 67 39 4a 44 77 31 4c 42 4e 71 53 42 67 39 4a 79 78 72 50 42 32 34 50 45 57 3d 3d 27 2c 27 6c 4d 39 55 27 2c 27 42 77 66 57 27 2c 27 78 32 75 53 69 67 76 32 79 77 57 4f 27 2c 27 79 4d 58 31 43 47 3d 3d 27 2c 27 72 32 39 30 79 32 48 48 27 2c 27 43 Data Ascii: C2HVDwXKlwjSB2nR','v0felq==','vejm','yxbWlwjHBM5LCG==','zxz0lwXVzW==','C2v0uMvXDwvZDeHLywrLCG==','Dg9W','v2LUzg93lMXVy2f0Aw9U','kgz1BMn0Aw9UkhDPBMrVDYXZzwXMlhbHCMvUDcX0B3aSzg9JDw1LBNqSBg9JyxrPB24PEW==','lM9U','BwfW','x2uSigv2ywWO','yMX1CG==','r290y2HH','C
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 27 2c 27 79 32 58 56 42 4d 75 3d 27 2c 27 42 77 76 30 79 76 54 4f 44 68 72 57 6c 77 76 58 44 77 4c 32 70 73 6a 64 42 32 35 30 7a 77 35 30 6c 76 6e 4c 79 33 76 59 41 78 72 35 6c 76 62 56 42 67 4c 4a 45 73 6a 44 27 2c 27 6a 4d 66 4b 42 32 31 48 41 77 35 5a 70 71 3d 3d 27 2c 27 71 31 72 6a 27 2c 27 43 78 76 4c 27 2c 27 72 77 58 4c 42 77 76 55 44 61 3d 3d 27 2c 27 69 4c 30 47 6a 49 79 47 44 32 4c 55 7a 67 39 33 77 59 69 3d 27 2c 27 79 4d 4c 4b 43 31 6a 4c 79 32 76 50 44 4d 76 4b 27 2c 27 43 4d 76 57 42 67 66 4a 7a 75 6e 4f 41 77 58 4b 6f 49 61 3d 27 2c 27 7a 67 66 30 79 78 6e 4c 44 61 3d 3d 27 2c 27 79 77 72 53 6c 71 3d 3d 27 2c 27 43 68 6a 56 44 67 39 4a 42 32 57 3d 27 2c 27 73 77 35 50 44 63 34 3d 27 2c 27 43 4d 76 5a 41 77 72 31 79 77 58 69 76 65 31 6d 27 Data Ascii: ','y2XVBMu=','Bwv0yvTODhrWlwvXDwL2psjdB250zw50lvnLy3vYAxr5lvbVBgLJEsjD','jMfKB21HAw5Zpq==','q1rj','CxvL','rwXLBwvUDa==','iL0GjIyGD2LUzg93wYi=','yMLKC1jLy2vPDMvK','CMvWBgfJzunOAwXKoIa=','zgf0yxnLDa==','ywrSlq==','ChjVDg9JB2W=','sw5PDc4=','CMvZAwr1ywXive1m'
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 44 67 48 50 43 59 57 47 6a 57 3d 3d 27 2c 27 41 32 76 35 43 57 3d 3d 27 2c 27 63 49 30 54 6c 71 4f 3d 27 2c 27 43 4d 76 48 7a 68 4c 74 44 67 66 30 7a 71 3d 3d 27 2c 27 76 32 76 49 72 30 58 73 7a 77 35 4b 7a 78 6a 50 42 4d 44 64 42 32 35 30 7a 78 48 30 27 2c 27 73 66 72 6e 74 65 4c 4d 43 4d 66 54 7a 75 76 53 7a 77 31 4c 42 4e 71 55 27 2c 27 44 32 58 4e 27 2c 27 6b 63 4c 37 46 71 3d 3d 27 2c 27 7a 67 76 4d 79 78 76 53 44 63 31 5a 43 4d 6d 3d 27 2c 27 79 33 76 59 43 4d 76 55 44 66 72 50 42 77 75 3d 27 2c 27 41 77 31 57 42 67 76 54 7a 77 35 30 79 78 72 50 42 32 34 3d 27 2c 27 42 67 39 4a 79 78 72 50 42 32 34 3d 27 2c 27 79 33 76 59 43 4d 76 55 44 65 35 56 7a 67 75 3d 27 2c 27 69 63 30 54 70 47 3d 3d 27 2c 27 71 31 6e 73 6d 71 3d 3d 27 2c 27 6c 4e 72 56 43 63 Data Ascii: DgHPCYWGjW==','A2v5CW==','cI0TlqO=','CMvHzhLtDgf0zq==','v2vIr0Xszw5KzxjPBMDdB250zxH0','sfrnteLMCMfTzuvSzw1LBNqU','D2XN','kcL7Fq==','zgvMyxvSDc1ZCMm=','y3vYCMvUDfrPBwu=','Aw1WBgvTzw50yxrPB24=','Bg9JyxrPB24=','y3vYCMvUDe5Vzgu=','ic0TpG==','q1nsmq==','lNrVCc
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 30 7a 77 71 47 27 2c 27 43 78 76 4c 43 4e 4c 74 7a 77 58 4c 79 33 72 56 43 47 3d 3d 27 2c 27 72 76 48 71 6c 76 72 70 27 2c 27 41 67 66 5a 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 78 31 39 57 43 4d 39 30 42 31 39 46 27 2c 27 42 33 44 55 7a 78 6a 65 42 32 6e 31 42 77 76 55 44 61 3d 3d 27 2c 27 43 4d 66 55 7a 67 39 54 27 2c 27 6a 66 44 6d 77 66 6a 54 71 77 71 3d 27 2c 27 75 4e 76 55 44 67 4c 54 7a 73 35 50 42 4d 50 4c 79 33 71 3d 27 2c 27 7a 78 7a 48 42 61 3d 3d 27 2c 27 43 32 76 55 7a 61 3d 3d 27 2c 27 42 33 62 48 79 32 4c 30 45 71 3d 3d 27 2c 27 69 63 38 47 27 2c 27 44 77 35 33 43 4d 66 57 27 2c 27 73 66 72 6e 74 65 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 43 4d 76 30 44 78 6a 55 69 68 44 50 42 4d 72 56 44 31 53 4e 27 2c 27 75 32 76 4a 44 78 6a 50 44 68 Data Ascii: 0zwqG','CxvLCNLtzwXLy3rVCG==','rvHqlvrp','AgfZqxr0CMLIDxrL','x19WCM90B19F','B3DUzxjeB2n1BwvUDa==','CMfUzg9T','jfDmwfjTqwq=','uNvUDgLTzs5PBMPLy3q=','zxzHBa==','C2vUza==','B3bHy2L0Eq==','ic8G','Dw53CMfW','sfrntevSzw1LBNq=','CMv0DxjUihDPBMrVD1SN','u2vJDxjPDh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49854	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	363	OUT	GET /cv/apiv2/adbuilder/gemini.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: doRjKqI7F/4el8zsecFbk+HoLOys7fmaPxwEDwJ2YGC6FGaI9cqBXIl22NKa3fgmLinG6I00v9I= x-amz-request-id: J3ZWZKQCANN5TKAM Date: Wed, 21 Feb 2024 06:47:33 GMT Last-Modified: Sat, 02 Mar 2019 01:45:46 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=2592000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 3328 Referrer-Policy: no-referrer-when-downgrade Etag: "99f89d94ebcff9a04ef4c4174c7bc13a" Age: 1010342 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c ba 49 44 41 54 78 01 ed 9d 0f 6c 55 57 1d c7 e9 2b b4 05 14 0a 71 09 a9 53 08 82 1b 93 b1 c1 60 65 73 42 eb d4 0d 88 d9 82 06 17 21 40 5b 68 67 dc a6 4e 63 30 73 6e 09 c3 69 44 e7 8c 9a 94 42 91 02 71 41 83 31 0a 1b e2 06 85 39 fe 0d 37 e6 74 8c ff 42 05 06 5b 0b 6c 5d ff 40 1f 7e 7e b5 ef ed be c7 bb f7 dc 73 df 79 f7 4f e5 24 b7 f7 de 73 7e e7 f7 e7 fb 3b ff cf b9 af 79 7d 22 18 6a 6b 6b af 47 ed 25 79 79 79 93 2f 5f be dc c9 73 23 d7 f7 6a 6a 6a 4e 45 cd 9c bc a8 29 5c 57 57 f7 99 78 3c be 09 bd fb 5b 75 c7 19 cd b1 58 ac 74 c1 82 05 87 ac f1 61 7f 8e 85 5d 41 ab 7e eb d6 ad cb a7 c4 d7 13 97 02 be d0 10 3f Data Ascii: PNGIHDR``w8sRGBIDATxlUW+qS`esB!@[hgNc0sniDBqA197tB[l]@~~syO$s~;y}"jkkG%yyy/_s#jjjNE)\WWx<[uXta]A~?
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: d6 a9 6a 19 fd b4 e9 e8 65 9a d6 37 07 a0 b8 ea 68 79 b7 6d 00 fe 1a 27 0c 38 5f 55 95 93 55 54 d3 00 66 cb cf 37 07 00 6c 09 25 4f a5 ef 11 16 b8 6e cf 66 75 51 25 20 6c e9 be f5 01 80 3f 50 65 3c 4e fa ce ff 13 f8 82 87 6f 0e 50 81 2f e9 85 85 85 db dc d0 f5 26 9a 30 39 20 ce c6 4a a0 1d 62 10 8e 0d 93 03 44 97 09 41 80 10 a4 4c df 1c 40 fb ae 5c ec 82 66 31 7d 45 20 0b 84 41 39 c1 37 07 60 a0 f2 2b 76 c0 2f 63 e7 a9 5e 76 be 82 02 c4 6f b9 c9 61 28 5b 8a fd 18 7f 8f 05 84 4f a1 44 bf 84 22 2c 54 c5 29 99 07 d9 ea 7b 25 9b 49 0b 3c 8e c1 3b c1 d6 f6 0e cd 7c 26 6d 33 d0 67 3b 79 64 22 e6 b8 b9 92 81 91 9c 4e 7b 1b b5 cf 90 77 5f 10 1b 2e b2 c9 74 f2 e4 c9 9b b0 45 e6 3e c9 0d 24 de 2f f1 be 1f 2c f7 25 96 bf bb ab 3b a5 4e 7e 73 61 15 97 ed 37 b6 18 73 Data Ascii: je7hym'8_UUTf7l%OnfuQ% l?Pe<NoP/&09 JbDAL@\f1}E A97`+v/c^voa([OD",T){%I<;\|&m3g;yd"N{w_.tE>$/,%;N~sa7s
2024-03-03 23:26:34 UTC	728	IN	Data Raw: 99 77 d1 b9 36 9a 90 93 e0 c1 ef 54 7f 8c 5a b7 1a 79 53 13 71 72 47 d6 33 d8 f7 35 ec 3b 67 8d d7 7d ce 6a 14 b4 66 cd 1a 29 ed b2 97 2a 1b e0 49 f0 45 09 de 27 b1 27 bb 5e 16 dd e4 dd 54 60 e2 b4 95 12 78 0b 00 6c 84 67 0b f7 66 ee 1b b8 df 62 1a 7c 6c 88 01 fe 6f d3 c1 17 5b 88 bb 8f 0d f7 2d 14 c0 8f c8 bb d7 90 02 9a 0e 93 b5 6b d7 0e 61 e5 51 4a a2 fc 8a 94 6d 00 98 39 00 b3 d6 96 20 c4 09 9c 9c bb 9b 53 16 cf 2a 54 94 26 ef 73 f4 3b 9e 56 54 3d d5 00 14 1b 0a f8 5b 55 e0 f7 28 7e b3 c2 80 d0 26 d3 a7 c9 f1 16 55 b8 81 42 b6 6d d5 aa 55 9e 66 fa 9e 1c 40 a9 a8 03 fc 71 2a cd 7a d2 3d 95 0c 97 bc 73 4a 86 8d 32 9c 55 06 e8 46 f1 81 a1 f4 13 da 2d 8a b6 03 64 b4 83 46 f2 73 95 ca 40 c9 e8 44 29 69 ab 23 19 e8 6b 9e 47 f1 f7 5c 2a 5f 4e cb 50 ee 92 36 Data Ascii: w6TZySqrG35;g}jf)IE''^T`xlgfb\|lo[-kaQJm9 ST&s;VT=[U(~&UBmUf@qz=sJ2UF-dFs@D)i#kG\_NP6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49844	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	387	OUT	GET /cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: qPWFS+o0wCBtLyM1gvB0iUO9kzc57Tw6LQxiYRZFnuIPPVJ4q5k1YITKcbQdd21bjMy5m0aQt4Y= x-amz-request-id: JFKBE2Z3V7JPAKZZ Date: Fri, 19 Jan 2024 22:54:25 GMT Last-Modified: Wed, 25 Oct 2023 12:50:39 GMT ETag: "0f121237872ccb64cf52b3c4a2405745" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 5778 Referrer-Policy: no-referrer-when-downgrade Age: 3803531 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 2d 30 2e 31 2c 30 2e 35 2d 30 2e 31 2c 30 2e 37 63 30 2c 30 2e 32 2c 30 2c 30 2e 34 2c 30 2e 31 2c 30 2e 37 63 30 2c 30 2e 32 2c 30 2e 31 2c 30 2e 34 2c 30 2e 32 2c 30 2e 36 63 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 33 2c 30 2e 34 2c 30 2e 34 0a 09 43 33 30 2e 39 2c 38 2e 39 2c 33 31 2e 32 2c 39 2c 33 31 2e 34 2c 39 63 30 2e 34 2c 30 2c 30 2e 37 2d 30 2e 31 2c 30 2e 39 2d 30 2e 33 63 30 2e 32 2d 30 2e 32 2c 30 2e 33 2d 30 2e 35 2c 30 2e 34 2d 30 2e 39 68 31 2e 36 63 2d 30 2e 31 2c 30 2e 38 2d 30 2e 34 2c 31 2e 34 2d 30 2e 39 2c 31 2e 38 63 2d 30 2e 35 2c 30 2e 34 2d 31 2e 32 2c 30 2e 36 2d 32 2c 30 2e 36 0a 09 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 31 2d 31 2e 32 2d 30 2e 32 63 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 34 2d 31 2d 30 2e 36 63 2d Data Ascii: -0.1,0.5-0.1,0.7c0,0.2,0,0.4,0.1,0.7c0,0.2,0.1,0.4,0.2,0.6c0.1,0.2,0.2,0.3,0.4,0.4C30.9,8.9,31.2,9,31.4,9c0.4,0,0.7-0.1,0.9-0.3c0.2-0.2,0.3-0.5,0.4-0.9h1.6c-0.1,0.8-0.4,1.4-0.9,1.8c-0.5,0.4-1.2,0.6-2,0.6c-0.5,0-0.9-0.1-1.2-0.2c-0.4-0.2-0.7-0.4-1-0.6c-
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 2d 30 2e 36 2c 30 2e 31 2d 30 2e 38 2c 30 2e 32 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 35 2c 30 2e 34 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 33 2c 30 2e 36 0a 09 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 31 2c 30 2e 35 2d 30 2e 31 2c 30 2e 38 76 32 2e 37 68 2d 31 2e 37 76 2d 36 4c 38 32 2e 37 2c 34 2e 31 4c 38 32 2e 37 2c 34 2e 31 7a 20 4d 37 38 2e 35 2c 35 2e 36 63 2d 30 2e 32 2d 30 2e 32 2d 30 2e 35 2d 30 2e 33 2d 30 2e 39 2d 30 2e 33 63 2d 30 2e 33 2c 30 2d 30 2e 35 2c 30 2d 30 2e 37 2c 30 2e 31 0a 09 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 32 2d 30 2e 34 2c 30 2e 33 63 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 33 2d 30 2e 32 2c 30 2e 34 63 30 2c 30 2e 31 2d 30 2e 31 2c 30 2e 33 2d 30 2e 31 2c 30 2e 34 68 Data Ascii: -0.6,0.1-0.8,0.2c-0.2,0.1-0.4,0.2-0.5,0.4c-0.1,0.2-0.2,0.4-0.3,0.6c-0.1,0.2-0.1,0.5-0.1,0.8v2.7h-1.7v-6L82.7,4.1L82.7,4.1z M78.5,5.6c-0.2-0.2-0.5-0.3-0.9-0.3c-0.3,0-0.5,0-0.7,0.1c-0.2,0.1-0.3,0.2-0.4,0.3c-0.1,0.1-0.2,0.3-0.2,0.4c0,0.1-0.1,0.3-0.1,0.4h
2024-03-03 23:26:34 UTC	1300	IN	Data Raw: 2e 31 7a 20 4d 36 31 2e 31 2c 37 2e 33 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 34 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 33 2c 30 2d 30 2e 34 2c 30 2e 31 0a 09 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 32 63 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 31 2d 30 2e 32 2c 30 2e 33 43 35 39 2e 31 2c 38 2e 31 2c 35 39 2c 38 2e 32 2c 35 39 2c 38 2e 34 63 30 2c 30 2e 31 2c 30 2c 30 2e 33 2c 30 2e 31 2c 30 2e 34 0a 09 63 30 2e 31 2c 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 32 63 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 31 2c 30 2e 33 2c 30 2e 31 63 30 2e 31 2c 30 2c 30 2e 33 2c Data Ascii: .1z M61.1,7.3c-0.1,0-0.2,0.1-0.3,0.1c-0.1,0-0.2,0-0.4,0.1c-0.1,0-0.3,0-0.4,0.1c-0.1,0-0.2,0.1-0.4,0.1c-0.1,0-0.2,0.1-0.3,0.2c-0.1,0.1-0.2,0.1-0.2,0.3C59.1,8.1,59,8.2,59,8.4c0,0.1,0,0.3,0.1,0.4c0.1,0.1,0.1,0.2,0.2,0.2c0.1,0.1,0.2,0.1,0.3,0.1c0.1,0,0.3,
2024-03-03 23:26:34 UTC	578	IN	Data Raw: 35 2e 36 20 4d 35 32 2e 39 2c 38 2e 37 43 35 33 2e 32 2c 39 2c 35 33 2e 35 2c 39 2e 31 2c 35 34 2c 39 2e 31 0a 09 63 30 2e 33 2c 30 2c 30 2e 36 2d 30 2e 31 2c 30 2e 39 2d 30 2e 32 63 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 33 2c 30 2e 34 2d 30 2e 35 68 31 2e 35 63 2d 30 2e 32 2c 30 2e 37 2d 30 2e 36 2c 31 2e 32 2d 31 2e 31 2c 31 2e 35 63 2d 30 2e 35 2c 30 2e 33 2d 31 2e 31 2c 30 2e 35 2d 31 2e 38 2c 30 2e 35 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 31 2d 31 2e 33 2d 30 2e 32 0a 09 63 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 34 2d 31 2d 30 2e 36 63 2d 30 2e 33 2d 30 2e 33 2d 30 2e 35 2d 30 2e 36 2d 30 2e 36 2d 31 63 2d 30 2e 31 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 2d 30 2e 32 2d 31 2e 33 63 30 2d 30 2e 35 2c 30 2e 31 2d 30 2e 39 2c 30 2e 32 2d 31 2e Data Ascii: 5.6 M52.9,8.7C53.2,9,53.5,9.1,54,9.1c0.3,0,0.6-0.1,0.9-0.2c0.2-0.2,0.4-0.3,0.4-0.5h1.5c-0.2,0.7-0.6,1.2-1.1,1.5c-0.5,0.3-1.1,0.5-1.8,0.5c-0.5,0-0.9-0.1-1.3-0.2c-0.4-0.2-0.7-0.4-1-0.6c-0.3-0.3-0.5-0.6-0.6-1c-0.1-0.4-0.2-0.8-0.2-1.3c0-0.5,0.1-0.9,0.2-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49841	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	567	OUT	GET /caas-assets-production/assets/v1/taboola.87313c9f56a825ef.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	634	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 911110 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:34 GMT Etag: "87313c9f56a825efff2e5fe5da4e802e" Last-Modified: Thu, 22 Feb 2024 10:13:25 GMT Server: ECAcc (nya/7992) Vary: Accept-Encoding x-amz-id-2: rJStCBrrYTeco01R680L1LVp0Ycr94GBgdj+gnUSHgthXbdmj7d3gINh90arLUG/zF04M1L4UXA= x-amz-replication-status: COMPLETED x-amz-request-id: 963GGMT00X0XPN3P x-amz-server-side-encryption: AES256 x-amz-version-id: Z1v8y545WoPxa7nfxgR7nSvY_dJebFP0 X-Cache: HIT Content-Length: 6339 Connection: close
2024-03-03 23:26:34 UTC	6339	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49846	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	567	OUT	GET /caas-assets-production/assets/v1/weather.0471daa01eb11e7b.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 194365 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:34 GMT Etag: "0471daa01eb11e7b69e87f2213120f5d" Last-Modified: Wed, 28 Feb 2024 11:21:08 GMT Server: ECAcc (nya/78EA) Vary: Accept-Encoding x-amz-id-2: ATk735AWdSPOGN1s8RL5TqSyr6bFSzVREwKR68kBTTDwMqjynqZkqttBJSMwzRHdd6cBMcWRUM4= x-amz-replication-status: COMPLETED x-amz-request-id: 7HRFXTVKXZWNK3SY x-amz-server-side-encryption: AES256 x-amz-version-id: HPyiZt0GfjXO_dXoE66HqibmLlA3MDm2 X-Cache: HIT Content-Length: 508579 Connection: close
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 4c 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 4c 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(L,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():L.CAAS_AOLCOM=e()}(self,(function(){return function(){var
2024-03-03 23:26:34 UTC	1	IN	Data Raw: 32 Data Ascii: 2
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 38 4c 32 32 35 2e 39 31 20 32 31 37 2e 38 37 4c 32 32 35 2e 39 34 20 32 31 37 2e 34 36 4c 32 32 35 2e 39 35 20 32 31 37 2e 30 34 4c 32 32 35 2e 39 35 20 31 30 38 2e 35 32 4c 32 30 33 2e 36 39 20 31 30 38 2e 35 32 4c 32 30 33 2e 38 31 20 31 30 38 2e 39 38 4c 32 30 33 2e 39 33 20 31 30 39 2e 34 34 4c 32 30 34 2e 30 35 20 31 30 39 2e 39 31 4c 32 30 34 2e 31 37 20 31 31 30 2e 33 37 4c 32 30 34 2e 32 39 20 31 31 30 2e 38 34 4c 32 30 34 2e 34 20 31 31 31 2e 33 31 4c 32 30 34 2e 35 31 20 31 31 31 2e 37 38 4c 32 30 34 2e 36 32 20 31 31 32 2e 32 36 4c 32 30 34 2e 37 32 20 31 31 32 2e 37 33 4c 32 30 34 2e 38 33 20 31 31 33 2e 32 31 4c 32 30 34 2e 39 33 20 31 31 33 2e 36 39 4c 32 30 35 2e 30 32 20 31 31 34 2e 31 37 4c 32 30 35 2e 31 32 20 31 31 34 2e 36 35 4c 32 30 Data Ascii: 8L225.91 217.87L225.94 217.46L225.95 217.04L225.95 108.52L203.69 108.52L203.81 108.98L203.93 109.44L204.05 109.91L204.17 110.37L204.29 110.84L204.4 111.31L204.51 111.78L204.62 112.26L204.72 112.73L204.83 113.21L204.93 113.69L205.02 114.17L205.12 114.65L20
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 2e 33 31 2c 31 2e 37 31 30 30 30 30 30 30 30 30 30 30 30 30 30 39 2c 31 34 35 2e 32 31 4c 31 30 2e 35 2c 31 34 37 2e 33 34 48 31 30 2e 35 5a 4d 39 2e 33 37 30 30 30 30 30 30 30 30 30 30 30 30 31 2c 31 35 36 43 39 2e 33 37 30 30 30 30 30 30 30 30 30 30 30 30 31 2c 31 35 35 2e 38 36 2c 31 31 2e 36 33 2c 31 34 37 2e 37 35 2c 31 31 2e 36 36 2c 31 34 37 2e 36 33 43 31 34 2e 39 39 2c 31 34 38 2e 36 33 2c 31 35 2e 30 36 2c 31 34 38 2e 34 37 2c 31 35 2e 36 36 2c 31 34 35 2e 31 43 31 35 2e 37 36 2c 31 34 35 2e 31 2c 32 33 2e 39 37 2c 31 34 36 2e 37 39 39 39 39 39 39 39 39 39 39 39 39 38 2c 32 34 2e 30 38 2c 31 34 36 2e 38 32 4c 39 2e 33 37 2c 31 35 36 5a 20 4d 31 37 39 2e 39 33 2c 31 34 32 2e 30 36 43 31 37 39 2e 30 37 2c 31 34 32 2e 36 31 2c 31 35 30 2e 38 36 2c Data Ascii: .31,1.7100000000000009,145.21L10.5,147.34H10.5ZM9.370000000000001,156C9.370000000000001,155.86,11.63,147.75,11.66,147.63C14.99,148.63,15.06,148.47,15.66,145.1C15.76,145.1,23.97,146.79999999999998,24.08,146.82L9.37,156Z M179.93,142.06C179.07,142.61,150.86,
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 34 2e 37 37 20 32 31 31 2e 31 37 4c 35 2e 32 38 20 32 31 30 2e 30 32 4c 35 2e 38 34 20 32 30 38 2e 39 4c 36 2e 34 33 20 32 30 37 2e 38 4c 37 2e 30 37 20 32 30 36 2e 37 33 4c 37 2e 37 35 20 32 30 35 2e 36 38 4c 38 2e 34 36 20 32 30 34 2e 36 37 4c 39 2e 32 32 20 32 30 33 2e 36 38 4c 31 30 2e 30 31 20 32 30 32 2e 37 32 4c 31 30 2e 38 33 20 32 30 31 2e 38 4c 31 31 2e 36 39 20 32 30 30 2e 39 4c 31 32 2e 35 38 20 32 30 30 2e 30 34 4c 31 33 2e 35 31 20 31 39 39 2e 32 32 4c 31 34 2e 34 37 20 31 39 38 2e 34 33 4c 31 35 2e 34 35 20 31 39 37 2e 36 38 4c 31 36 2e 34 37 20 31 39 36 2e 39 36 4c 31 37 2e 35 31 20 31 39 36 2e 32 38 4c 31 38 2e 35 38 20 31 39 35 2e 36 35 4c 31 39 2e 36 38 20 31 39 35 2e 30 35 4c 32 30 2e 38 20 31 39 34 2e 34 39 4c 32 31 2e 39 35 20 31 39 Data Ascii: 4.77 211.17L5.28 210.02L5.84 208.9L6.43 207.8L7.07 206.73L7.75 205.68L8.46 204.67L9.22 203.68L10.01 202.72L10.83 201.8L11.69 200.9L12.58 200.04L13.51 199.22L14.47 198.43L15.45 197.68L16.47 196.96L17.51 196.28L18.58 195.65L19.68 195.05L20.8 194.49L21.95 19
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 2e 39 33 2c 32 36 2e 30 36 2c 32 31 30 2e 39 38 2c 32 36 2e 30 31 2c 32 31 30 2e 39 38 43 32 36 2e 31 31 2c 32 31 30 2e 39 38 2c 32 36 2e 32 36 2c 32 31 30 2e 39 33 2c 32 36 2e 35 31 2c 32 31 30 2e 39 33 43 32 30 2e 32 31 2c 32 31 30 2e 39 33 2c 31 35 2e 31 31 2c 32 30 35 2e 38 38 2c 31 35 2e 31 31 2c 31 39 39 2e 37 33 43 31 35 2e 31 31 2c 32 30 30 2e 32 33 2c 31 35 2e 32 31 2c 31 39 39 2e 35 33 2c 31 35 2e 33 31 2c 31 39 39 2e 30 38 43 31 35 2e 35 31 2c 31 39 38 2e 30 33 2c 31 35 2e 37 36 2c 31 39 36 2e 35 38 2c 31 36 2e 31 31 2c 31 39 34 2e 37 33 43 31 36 2e 38 31 2c 31 39 31 2e 31 33 2c 31 37 2e 38 31 2c 31 38 36 2e 30 37 2c 31 39 2e 30 36 2c 31 37 39 2e 36 37 43 32 31 2e 33 31 2c 31 36 38 2e 33 37 2c 32 34 2e 34 31 2c 31 35 33 2e 30 36 2c 32 38 2e 31 Data Ascii: .93,26.06,210.98,26.01,210.98C26.11,210.98,26.26,210.93,26.51,210.93C20.21,210.93,15.11,205.88,15.11,199.73C15.11,200.23,15.21,199.53,15.31,199.08C15.51,198.03,15.76,196.58,16.11,194.73C16.81,191.13,17.81,186.07,19.06,179.67C21.31,168.37,24.41,153.06,28.1
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 34 2c 33 31 2e 33 39 4c 34 37 2e 33 32 2c 33 31 2e 30 37 4c 34 37 2e 36 31 2c 33 30 2e 37 36 4c 34 37 2e 39 31 2c 33 30 2e 34 35 4c 34 38 2e 32 31 2c 33 30 2e 31 34 4c 34 38 2e 35 31 2c 32 39 2e 38 34 4c 34 38 2e 38 32 2c 32 39 2e 35 34 4c 34 39 2e 31 33 2c 32 39 2e 32 35 4c 34 39 2e 34 35 2c 32 38 2e 39 36 4c 34 39 2e 37 37 2c 32 38 2e 36 37 4c 35 30 2e 30 39 2c 5c 6e 20 20 20 20 32 38 2e 33 39 4c 35 30 2e 34 32 2c 32 38 2e 31 32 4c 35 30 2e 37 36 2c 32 37 2e 38 35 4c 35 31 2e 30 39 2c 32 37 2e 35 38 4c 35 31 2e 34 34 2c 32 37 2e 33 32 4c 35 31 2e 37 39 2c 32 37 2e 30 37 4c 35 32 2e 31 34 2c 32 36 2e 38 32 4c 35 32 2e 35 2c 32 36 2e 35 37 4c 35 32 2e 38 36 2c 32 36 2e 33 33 4c 35 33 2e 32 32 2c 32 36 2e 30 39 4c 35 33 2e 36 2c 32 35 2e 38 36 4c 35 33 2e Data Ascii: 4,31.39L47.32,31.07L47.61,30.76L47.91,30.45L48.21,30.14L48.51,29.84L48.82,29.54L49.13,29.25L49.45,28.96L49.77,28.67L50.09,\n 28.39L50.42,28.12L50.76,27.85L51.09,27.58L51.44,27.32L51.79,27.07L52.14,26.82L52.5,26.57L52.86,26.33L53.22,26.09L53.6,25.86L53.
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 35 2c 31 35 31 4c 31 36 35 2e 32 31 2c 31 35 31 2e 30 37 4c 31 36 35 2e 34 31 2c 31 35 31 2e 31 35 4c 31 36 35 2e 36 31 2c 31 35 31 2e 32 33 4c 31 36 35 2e 38 2c 31 35 31 2e 33 33 4c 31 36 35 2e 39 39 2c 31 35 31 2e 34 33 4c 31 36 36 2e 31 37 2c 31 35 31 2e 35 35 4c 31 36 36 2e 33 35 2c 31 35 31 2e 36 37 4c 31 36 36 2e 35 32 2c 31 35 31 2e 37 39 4c 31 36 36 2e 36 39 2c 31 35 31 2e 39 33 4c 31 36 36 2e 38 35 2c 31 35 32 2e 30 37 4c 31 36 37 2c 31 35 32 2e 32 32 4c 31 36 37 2e 31 35 2c 31 35 32 2e 33 37 4c 31 36 37 2e 32 39 2c 31 35 32 2e 35 33 4c 31 36 37 2e 34 32 2c 31 35 32 2e 37 4c 31 36 37 2e 35 34 2c 31 35 32 2e 38 37 4c 31 36 37 2e 36 36 2c 31 35 33 2e 30 35 4c 31 36 37 2e 37 37 2c 31 35 33 2e 32 33 4c 31 36 37 2e 38 37 2c 31 35 33 2e 34 32 4c 31 36 Data Ascii: 5,151L165.21,151.07L165.41,151.15L165.61,151.23L165.8,151.33L165.99,151.43L166.17,151.55L166.35,151.67L166.52,151.79L166.69,151.93L166.85,152.07L167,152.22L167.15,152.37L167.29,152.53L167.42,152.7L167.54,152.87L167.66,153.05L167.77,153.23L167.87,153.42L16
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 37 37 2e 30 31 2c 36 36 2e 38 36 4c 37 36 2e 38 39 2c 36 36 2e 39 35 4c 37 36 2e 37 38 2c 36 37 2e 30 35 4c 37 36 2e 36 36 2c 36 37 2e 31 34 4c 37 36 2e 35 35 2c 36 37 2e 32 34 4c 37 36 2e 34 34 2c 36 37 2e 33 33 4c 37 36 2e 33 33 2c 36 37 2e 34 33 4c 37 36 2e 32 32 2c 36 37 2e 35 33 4c 37 36 2e 31 32 2c 36 37 2e 36 33 4c 37 36 2e 30 31 2c 5c 6e 20 20 20 20 36 37 2e 37 34 4c 37 35 2e 39 31 2c 36 37 2e 38 34 4c 37 35 2e 38 31 2c 36 37 2e 39 35 4c 37 35 2e 37 31 2c 36 38 2e 30 35 4c 37 35 2e 36 31 2c 36 38 2e 31 36 4c 37 35 2e 35 31 2c 36 38 2e 32 37 4c 37 35 2e 34 32 2c 36 38 2e 33 39 4c 37 35 2e 33 33 2c 36 38 2e 35 4c 37 35 2e 32 33 2c 36 38 2e 36 32 4c 37 35 2e 31 34 2c 36 38 2e 37 33 4c 37 35 2e 30 36 2c 36 38 2e 38 35 4c 37 34 2e 39 37 2c 36 38 2e 39 Data Ascii: 77.01,66.86L76.89,66.95L76.78,67.05L76.66,67.14L76.55,67.24L76.44,67.33L76.33,67.43L76.22,67.53L76.12,67.63L76.01,\n 67.74L75.91,67.84L75.81,67.95L75.71,68.05L75.61,68.16L75.51,68.27L75.42,68.39L75.33,68.5L75.23,68.62L75.14,68.73L75.06,68.85L74.97,68.9
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 31 35 37 2e 33 31 2c 31 30 33 2e 38 36 43 31 36 31 2e 39 2c 31 30 38 2e 37 34 2c 31 36 34 2e 34 34 2c 31 31 31 2e 34 35 2c 31 36 34 2e 39 35 2c 31 31 31 2e 39 39 43 31 36 38 2e 33 31 2c 31 31 33 2e 33 35 2c 31 37 30 2e 36 32 2c 31 31 33 2e 33 35 2c 31 37 31 2e 39 2c 31 31 31 2e 39 39 43 31 37 33 2e 38 32 2c 31 30 39 2e 39 35 2c 31 37 33 2e 38 32 2c 31 30 36 2e 36 34 2c 31 37 31 2e 39 2c 31 30 34 2e 36 5a 22 2c 73 70 6f 72 74 73 3a 22 4d 32 34 34 2e 38 32 2c 33 34 2e 32 33 43 32 34 32 2e 31 32 2c 31 38 2e 36 36 2c 32 33 30 2e 34 36 2c 36 2e 32 36 2c 32 31 35 2e 38 33 2c 33 2e 33 38 43 31 38 37 2e 33 34 2c 2d 32 2e 32 32 2c 31 35 38 2e 30 37 2c 2d 30 2e 38 34 2c 31 33 31 2e 31 37 2c 37 2e 33 36 43 31 30 33 2e 33 2c 31 35 2e 38 35 2c 37 37 2e 38 33 2c 33 31 Data Ascii: 157.31,103.86C161.9,108.74,164.44,111.45,164.95,111.99C168.31,113.35,170.62,113.35,171.9,111.99C173.82,109.95,173.82,106.64,171.9,104.6Z",sports:"M244.82,34.23C242.12,18.66,230.46,6.26,215.83,3.38C187.34,-2.22,158.07,-0.84,131.17,7.36C103.3,15.85,77.83,31

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49851	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-03%2Fc6f4ca70-8d7a-11eb-ba4d-ac4cbcde9ebe&client=76f99bdb8f78cd44cc0b&signature=cf2e2debdb6c1969bcf75b99825fbbfedfac7f4b HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 12965 Cache-Control: public, max-age=2592000 Cache-Tag: 348394455909970221298307516704224167312,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000140-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: aa67b6d562bebd33c0cf08e35195552a cld_latency: 194 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 348394455909970221298307516704224167312,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "491574b00cd8fb418215debdb2dca2c9" Last-Modified: Sun, 03 Mar 2024 19:50:32 GMT Server: ECAcc (nya/792C) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=535,owidth=400,oheight=401,obytes=176359,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: aa67b6d562bebd33c0cf08e35195552a X-Served-By: cache-iad-kiad7000140-IAD X-Timer: S1709495432.801196,VS0,VE194 Content-Length: 535 Connection: close
2024-03-03 23:26:34 UTC	535	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 d5 50 4c 54 45 47 70 4c 46 60 a3 3a 56 9c d4 75 7d 37 54 9c c3 35 42 be cc e1 e9 b9 bb c7 47 53 80 92 c0 c4 38 45 c7 43 4f dd ba c2 4b 64 a5 c6 58 65 4c 65 a6 c7 4a 56 ff ff ff c8 4e 5a 81 92 be 41 5b 9e fa fa fb a5 b2 d1 5c 73 ad 5e 74 ac dd e1 ec 77 8a ba 7d 90 bc f7 f8 fa c5 53 61 d1 d7 e7 b0 bb d6 c1 2d 3a 8b 9b c5 23 42 92 a6 b2 d1 f5 f7 fa be 22 30 59 70 ac a1 ae cf 95 a4 ca 29 47 94 9b a9 cc 31 4e 98 c9 d1 e2 71 85 b7 dd e2 ed bf 27 35 da 8c 94 4f 68 a7 6b 80 b5 dd 94 9b 61 77 b0 79 8b bc 37 54 9b 48 62 a3 f0 f3 f7 fc fe fe 23 42 91 e3 a9 ae cc 6c 78 d7 82 89 7f 90 be 84 95 c1 bc c5 db 40 5b a0 ea ed f4 ba c4 db e6 b9 be ce 67 72 c4 53 61 0a Data Ascii: PNGIHDR(-SPLTEGpLF`:Vu}7T5BGS8ECOKdXeLeJVNZA[\s^tw}Sa-:#B"0Yp)G1Nq'5Ohkawy7THb#Blx@[grSa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49852	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2279202 Cache-Control: public, max-age=2592000 Cache-Tag: 457935326151757118911061591064955503832,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21955-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 457935326151757118911061591064955503832,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "12b179dfac257ba3cf6eadbc3d4f5057" Expiration: expiry-date="Wed, 17 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 18 Jan 2024 14:48:07 GMT Server: ECAcc (nya/7952) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=457,owidth=400,oheight=400,obytes=158455,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21955-LGA X-Timer: S1707229192.086253,VS0,VE1 Content-Length: 457 Connection: close
2024-03-03 23:26:34 UTC	457	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 a5 50 4c 54 45 47 70 4c 22 27 27 3f 47 50 33 3b 44 27 31 37 2f 35 3d 21 29 30 22 2a 30 14 19 1c 15 1b 20 32 3a 43 32 3a 43 17 1c 1d 2d 37 3f 39 3b 42 49 50 55 1b 21 29 28 31 38 14 19 1a 14 18 1a 2d 36 3f 31 38 40 a4 a4 a4 aa a9 a9 e8 e8 e9 d0 d1 d1 e3 e3 e2 8e 90 92 ac ad af 72 76 78 69 6c 71 ba ba bb 9d 9e 9e c9 c9 c9 c2 c2 c2 b4 b5 b6 1f 25 2e 23 2a 31 db dc dc 96 9a 9b d6 d6 d6 52 57 5b 2f 35 39 5b 5e 62 b1 b3 b3 a6 aa ad a0 a2 a1 df e0 e0 82 85 8a 80 83 86 60 63 63 63 66 67 85 89 8f d3 d4 d4 c3 c5 c7 71 1e b7 d1 00 00 00 16 74 52 4e 53 00 f9 f9 d9 98 f9 d9 09 99 31 97 31 c1 c1 fe fe 97 31 d9 d9 9a 9a 88 5b 29 0d 00 00 00 bd 49 44 41 54 18 19 2d Data Ascii: PNGIHDR(-SPLTEGpL"''?GP3;D'17/5=!)0"0 2:C2:C-7?9;BIPU!)(18-6?18@rvxilq%.#1RW[/59[^b`cccfgqtRNS111[)IDAT-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49856	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	564	OUT	GET /caas-assets-production/assets/v1/news.655c91ed98665809.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 453274 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:34 GMT Etag: "655c91ed98665809647d735c9b2a9344" Last-Modified: Mon, 19 Feb 2024 09:40:48 GMT Server: ECAcc (nya/79B2) Vary: Accept-Encoding x-amz-id-2: 6d2czrTlP0M4ANqpsgmyHYB/frRlWwe2WO1vP2h8exZa8s6DbOB61lS2kOF515ka+qk5Qqw7+N8= x-amz-replication-status: COMPLETED x-amz-request-id: 0E41YFCQENEY3Y2E x-amz-server-side-encryption: AES256 x-amz-version-id: 3zM2sRmrgVkXIo3d0jbNuRt078CUmrXy X-Cache: HIT Content-Length: 29600 Connection: close
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var
2024-03-03 23:26:34 UTC	13217	IN	Data Raw: 77 42 6f 78 3a 22 30 20 30 20 32 35 36 20 32 35 36 22 7d 2c 72 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 20 38 31 2e 31 20 31 32 37 2e 39 20 4c 20 31 37 35 2e 35 20 33 34 2e 38 20 43 20 31 38 32 2e 38 20 32 37 2e 36 20 31 38 32 2e 39 20 31 35 2e 36 20 31 37 35 2e 35 20 38 2e 33 20 43 20 31 36 38 20 30 2e 39 20 31 35 36 20 30 2e 39 20 31 34 38 2e 36 20 38 2e 32 20 4c 20 32 37 2e 32 20 31 32 37 2e 39 20 4c 20 31 34 38 2e 36 20 32 34 37 2e 36 20 43 20 31 35 35 2e 39 20 32 35 34 2e 37 20 31 36 38 2e 31 20 32 35 34 2e 38 20 31 37 35 2e 35 20 32 34 37 2e 35 20 43 20 31 38 33 20 32 34 30 2e 31 20 31 38 33 20 32 32 38 2e 33 20 31 37 35 2e 36 20 32 32 31 20 4c 20 38 31 2e 31 20 31 32 37 2e 39 20 5a 22 7d 29 29 29 29 3a 6e 75 6c 6c 2c 73 3f 72 28 22 62 75 74 74 6f 6e Data Ascii: wBox:"0 0 256 256"},r("path",{d:"M 81.1 127.9 L 175.5 34.8 C 182.8 27.6 182.9 15.6 175.5 8.3 C 168 0.9 156 0.9 148.6 8.2 L 27.2 127.9 L 148.6 247.6 C 155.9 254.7 168.1 254.8 175.5 247.5 C 183 240.1 183 228.3 175.6 221 L 81.1 127.9 Z"})))):null,s?r("button

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49857	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1925058 Cache-Control: public, max-age=2592000 Cache-Tag: 397222119743688046708885623724902591450,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100114-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 27 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 397222119743688046708885623724902591450,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "df9a2fde7d1d68b13d038c4ab499201b" Expiration: expiry-date="Tue, 06 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 07 Feb 2024 11:56:45 GMT Server: ECAcc (nya/79B7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=277,owidth=400,oheight=400,obytes=36183,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100114-IAD X-Timer: S1707583336.147276,VS0,VE27 Content-Length: 277 Connection: close
2024-03-03 23:26:34 UTC	277	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 42 50 4c 54 45 47 70 4c 00 9b ff 00 9b ff 94 d5 ff 00 9b ff 00 9b ff 00 9b ff 01 9b ff 00 9b ff 01 9b ff 74 c9 ff 61 c2 ff a6 dd ff 41 b5 ff b3 e2 ff 35 b0 ff c5 e8 ff 6b c6 ff 2b ad ff 57 be ff 85 cf ff 1a a6 ff 83 fb 6a 47 00 00 00 0a 74 52 4e 53 00 c5 ff ff db fb 9a 0a 9e 33 fd e8 dd 8d 00 00 00 78 49 44 41 54 18 d3 65 cf 37 12 c3 30 10 03 40 08 c7 78 cc 41 ff ff aa 0b 79 3c b6 b9 25 1a 00 00 80 e8 8c b5 c6 45 3c 7c e0 5b f0 00 e0 2f 7e 5c 1e 40 e0 97 00 44 fe 88 70 94 a6 35 ad fc 04 0e 86 b9 a8 48 ed 37 49 d2 c0 b2 c8 dc 2b b5 46 92 b4 b0 4c 75 e5 3d a4 24 dd a9 59 18 32 6b c9 32 73 ed a5 d3 c0 91 7a 8b 26 29 3a e6 a0 3b 6b 8f 61 e7 f4 e3 dc df Data Ascii: PNGIHDR(-SBPLTEGpLtaA5k+WjGtRNS3xIDATe70@xAy<%E<\|[/~\@Dp5H7I+FLu=$Y2k2sz&):;ka

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49853	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	1488	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1526041 Cache-Control: public, max-age=2592000 Cache-Tag: 437559623224935281181735502381789763861,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000140-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 76 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 437559623224935281181735502381789763861,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "4e60d49658a9f45adeb0f4a371574f52" Expiration: expiry-date="Sun, 21 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 22 Jan 2024 13:39:49 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7896) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=354,owidth=400,oheight=400,obytes=38740,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000140-IAD X-Timer: S1707982353.206804,VS0,VE76 Content-Length: 354 Connection: close
2024-03-03 23:26:34 UTC	354	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 69 50 4c 54 45 47 70 4c ff ff ff ff 48 51 ff 00 16 ff ff ff ff ff ff ff 09 1c ff ff ff ff ff ff ff ff ff ff 00 16 ff 00 16 ff ff ff 00 00 00 ff 0a 1d d6 d6 d6 16 16 16 4f 4f 4f 85 85 85 1e 1e 1e ba ba ba 3a 3a 3a a8 a8 a8 77 77 77 65 65 65 90 90 90 9c 9c 9c c6 c6 c6 6b 6b 6b fa fa fa ee ee ee 31 31 31 58 58 58 2e 2e 2e 0c 0c 0c ff 13 d3 39 00 00 00 0c 74 52 4e 53 00 c1 09 31 f9 d9 99 99 09 31 d9 f9 ae d3 ab 93 00 00 00 9c 49 44 41 54 18 19 55 c1 89 92 c2 20 14 04 c0 89 42 1e e8 cc 02 b9 13 ef fd ff 8f 5c 2c 2d cb ed c6 53 34 ef 9c b7 88 97 60 7c b3 80 2a 34 fc 68 02 00 e3 90 73 62 ca 39 df 56 03 22 b9 48 1d 93 fa 7b d6 16 61 bc e4 5e 0f 26 15 0e ba Data Ascii: PNGIHDR(-SiPLTEGpLHQOOO:::wwweeekkk111XXX...9tRNS11IDATU B\,-S4`\|*4hsb9V"H{a^&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49847	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	570	OUT	GET /caas-assets-production/assets/v1/ad_blocker.6f82c6524c431d6f.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	983	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1492061 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:34 GMT Etag: "6f82c6524c431d6fd3876aedbd95f615" Last-Modified: Thu, 15 Feb 2024 16:48:03 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7892) Vary: Accept-Encoding x-amz-id-2: hm5cIEgyUgZwUhaamjAlHsPOITnecaVQXj9R8ATRDDq+qC8U6Y98gObZYSEQUjk0ZMQ6N54qHgc= x-amz-replication-status: COMPLETED x-amz-request-id: 4DDKER13TR19YYF0 x-amz-server-side-encryption: AES256 x-amz-version-id: 24x54baKlnmpyGmCiQXNMGq.KZpdquiy X-Cache: HIT Content-Length: 7473 Connection: close
2024-03-03 23:26:34 UTC	7473	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49858	23.40.179.72	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	626	OUT	GET /bidexchange.js?cid=8YHB8F956&version=12.1&dn=www.aol.com&ysection=main&yregion=US&ylang=en-US&ysite=aol&ydevice=desktop HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	955	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 589255 Content-Type: text/javascript; charset=utf-8 Set-Cookie: visitor-id=3525099948919525000V10; Expires=Fri, 30 Aug 2024 23:26:34 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=true x-mnet-h: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Link: <https://c2shb-oao.ssp.yahoo.com>;rel="preconnect",<https://prebid.media.net>;rel="preconnect",<https://m.hb.yahoo.net>;rel="preconnect",<https://hb.yahoo.net/ucreative.php?cv=1>;rel="prefetch";as=script,<https://rtb-cache.hb.yahoo.net>;rel="preconnect",<https://hb.yahoo.net/ss/nes/player.js>;rel="prefetch";as="script" ETag: "10477414570247323720" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Timing-Allow-Origin: * Cache-Control: max-age=1800 Expires: Sun, 03 Mar 2024 23:56:34 GMT Date: Sun, 03 Mar 2024 23:26:34 GMT Connection: close
2024-03-03 23:26:34 UTC	4	IN	Data Raw: 20 20 20 20 Data Ascii:
2024-03-03 23:26:34 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 37 36 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 74 2c 7b 51 45 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 6e 3d 69 28 38 33 38 36 29 3b 6e 2e 65 50 2e 67 65 74 43 6f 6e 66 69 67 28 22 61 62 70 57 68 74 6c 73 74 55 72 6c 73 52 67 78 22 29 3b 63 6f 6e 73 74 20 72 3d 6e 2e 65 50 2e 67 65 74 43 6f 6e 66 69 67 28 22 41 62 70 41 63 70 74 50 72 6d 22 29 7d 2c 35 33 36 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 69 28 38 35 39 29 2c 72 3d 69 28 33 32 37 37 29 3b 63 6f 6e 73 74 20 73 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 74 72 61 63 6b Data Ascii: try {(()=>{var e={4764:(e,t,i)=>{"use strict";i.d(t,{QE:()=>r});var n=i(8386);n.eP.getConfig("abpWhtlstUrlsRgx");const r=n.eP.getConfig("AbpAcptPrm")},5364:(e,t,i)=>{"use strict";var n=i(859),r=i(3277);const s=new class{constructor(){this.track
2024-03-03 23:26:34 UTC	16384	IN	Data Raw: 64 3a 33 7d 29 7d 7d 67 65 74 4d 65 74 61 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e 78 5a 29 28 74 68 69 73 2e 74 61 72 67 65 74 56 69 65 77 54 69 6d 65 72 4d 61 70 2c 65 2c 33 29 7d 73 65 74 20 66 69 72 65 43 61 6c 6c 62 61 63 6b 46 6f 72 45 6c 65 6d 65 6e 74 28 65 29 7b 74 68 69 73 2e 67 65 6e 65 72 69 63 43 61 6c 6c 62 61 63 6b 46 6f 72 45 6c 65 6d 65 6e 74 73 3d 65 7d 6f 62 73 65 72 76 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 6e 2e 6e 29 28 65 29 3b 73 77 69 74 63 68 28 28 30 2c 61 2e 71 48 29 28 74 68 69 73 2e 74 61 72 67 65 74 56 69 65 77 54 69 6d 65 72 4d 61 70 2c 65 29 2c 74 29 7b 63 61 73 65 20 30 3a 28 30 2c 73 2e 44 4d 29 28 74 68 69 73 2e 49 4f 46 6f 72 41 64 73 29 26 26 74 68 69 73 2e 49 4f 46 6f 72 41 64 73 2e 6f 62 73 65 72 76 65 Data Ascii: d:3})}}getMeta(e){return(0,a.xZ)(this.targetViewTimerMap,e,3)}set fireCallbackForElement(e){this.genericCallbackForElements=e}observe(e){const t=(0,n.n)(e);switch((0,a.qH)(this.targetViewTimerMap,e),t){case 0:(0,s.DM)(this.IOForAds)&&this.IOForAds.observe
2024-03-03 23:26:34 UTC	7948	IN	Data Raw: 6f 72 28 65 2c 74 29 7b 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 2c 74 68 69 73 2e 68 6f 73 74 3d 72 2e 67 65 74 28 22 70 6f 67 22 29 2c 74 68 69 73 2e 6c 6f 67 54 6f 70 69 63 3d 22 22 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 3d 7b 6d 65 74 68 6f 64 3a 74 68 69 73 2e 6d 65 74 68 6f 64 2c 74 61 67 73 3a 5b 22 6c 6f 67 22 5d 2c 74 79 70 65 3a 22 62 65 61 63 6f 6e 22 2c 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 31 2c 77 69 74 68 46 61 6c 6c 62 61 63 6b 3a 21 30 7d 2c 74 68 69 73 2e 65 76 65 6e 74 49 64 3d 65 2c 74 68 69 73 2e 6c 6f 67 54 6f 70 69 63 3d 74 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 52 65 71 75 65 73 74 4f 70 74 69 6f 6e 73 2e 74 61 67 73 2e 70 75 73 68 28 65 29 7d 75 70 64 61 74 65 52 Data Ascii: or(e,t){this.method="POST",this.host=r.get("pog"),this.logTopic="",this.defaultRequestOptions={method:this.method,tags:["log"],type:"beacon",withCredentials:!1,withFallback:!0},this.eventId=e,this.logTopic=t,this.defaultRequestOptions.tags.push(e)}updateR
2024-03-03 23:26:34 UTC	16384	IN	Data Raw: 28 30 2c 63 2e 47 29 28 6e 29 3b 28 30 2c 72 2e 44 4d 29 28 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 70 28 74 5b 65 5d 2e 70 6c 61 63 65 6d 65 6e 74 53 75 62 6d 69 74 74 65 64 2c 28 28 65 2c 74 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 28 30 2c 6f 2e 7a 78 29 28 22 31 22 29 26 26 65 2e 73 65 74 54 61 72 67 65 74 69 6e 67 28 22 6e 6f 61 64 73 22 2c 22 31 22 29 7d 29 29 7d 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 63 6d 64 2e 70 75 73 68 28 28 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e Data Ascii: (0,c.G)(n);(0,r.DM)(s)&&function(e,t,i){(function(e,t){e.forEach((e=>{p(t[e].placementSubmitted,((e,t)=>{!function(e,t,i){window.googletag.cmd.push((()=>{(0,o.zx)("1")&&e.setTargeting("noads","1")}))}(t),function(e){window.googletag.cmd.push((()=>{window.
2024-03-03 23:26:34 UTC	16384	IN	Data Raw: 2e 67 65 74 50 72 65 62 69 64 42 69 64 64 65 72 52 65 71 75 65 73 74 28 65 29 29 29 2e 66 69 6c 74 65 72 28 72 2e 44 4d 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 7b 61 64 61 70 74 65 72 44 6f 6e 65 43 62 3a 65 2e 70 72 6f 76 69 64 65 72 44 6f 6e 65 2c 61 64 64 52 65 73 70 6f 6e 73 65 43 62 3a 74 68 69 73 2e 61 64 64 52 65 73 70 6f 6e 73 65 43 62 2e 62 69 6e 64 28 74 68 69 73 29 7d 3b 59 2e 6d 61 6b 65 50 72 65 62 69 64 52 65 71 75 65 73 74 28 65 2e 70 72 65 62 69 64 42 69 64 64 65 72 52 65 71 75 65 73 74 2c 74 29 7d 29 29 7d 67 65 74 50 72 65 62 69 64 42 69 64 64 65 72 52 65 71 75 65 73 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 5b 30 5d 2e 70 72 6f 76 69 64 65 72 2c 69 3d 6e 65 2e 55 2e 67 65 74 42 69 64 64 65 72 46 72 6f 6d 43 Data Ascii: .getPrebidBidderRequest(e))).filter(r.DM).forEach((e=>{const t={adapterDoneCb:e.providerDone,addResponseCb:this.addResponseCb.bind(this)};Y.makePrebidRequest(e.prebidBidderRequest,t)}))}getPrebidBidderRequest(e){const t=e[0].provider,i=ne.U.getBidderFromC
2024-03-03 23:26:34 UTC	7952	IN	Data Raw: 73 22 2c 72 75 6c 65 45 6e 67 69 6e 65 43 6f 6e 66 69 67 3a 7b 61 64 6a 75 73 74 6d 65 6e 74 42 75 63 6b 65 74 43 6f 6e 66 69 67 3a 22 41 64 6a 75 73 74 6d 65 6e 74 42 75 63 6b 65 74 22 2c 62 6c 6f 63 6b 69 6e 67 52 75 6c 65 43 6f 6e 66 69 67 3a 22 42 6c 6f 63 6b 69 6e 67 52 75 6c 65 22 2c 64 79 6e 61 6d 69 63 46 6c 6f 6f 72 43 6f 6e 66 69 67 3a 22 44 79 6e 61 6d 69 63 46 6c 6f 6f 72 22 2c 72 75 6c 65 45 6e 67 69 6e 65 43 6f 72 65 43 6f 6e 66 69 67 3a 22 52 75 6c 65 45 6e 67 69 6e 65 22 7d 2c 73 73 70 52 65 71 75 65 73 74 43 6f 6e 66 69 67 3a 22 53 73 70 52 65 71 75 65 73 74 43 6f 6e 66 69 67 22 2c 74 69 6d 65 6f 75 74 43 6f 6e 66 69 67 3a 22 54 69 6d 65 6f 75 74 22 2c 79 72 54 61 72 67 3a 22 59 61 68 6f 6f 52 65 66 72 65 73 68 54 61 72 67 65 74 69 6e 67 Data Ascii: s",ruleEngineConfig:{adjustmentBucketConfig:"AdjustmentBucket",blockingRuleConfig:"BlockingRule",dynamicFloorConfig:"DynamicFloor",ruleEngineCoreConfig:"RuleEngine"},sspRequestConfig:"SspRequestConfig",timeoutConfig:"Timeout",yrTarg:"YahooRefreshTargeting
2024-03-03 23:26:34 UTC	16384	IN	Data Raw: 45 52 22 2c 22 44 49 53 41 42 4c 45 5f 41 44 53 22 5d 2c 22 53 32 22 3a 5b 22 52 45 47 53 5f 43 4f 50 50 41 22 2c 22 54 52 49 4d 5f 4c 41 53 54 5f 4f 43 54 45 54 22 2c 22 44 49 53 41 42 4c 45 5f 43 4f 4f 4b 49 45 53 59 4e 43 22 5d 7d 2c 22 70 72 74 75 73 72 22 3a 22 22 2c 22 64 69 73 70 76 64 22 3a 7b 22 6b 6e 63 73 74 22 3a 5b 22 32 35 33 30 37 22 2c 22 32 35 30 31 34 22 2c 22 32 35 33 30 38 22 2c 22 32 35 30 38 32 22 2c 22 32 35 32 34 38 22 2c 22 32 35 30 31 36 22 2c 22 32 35 30 31 35 22 2c 22 32 35 32 35 31 22 2c 22 32 35 30 30 35 22 2c 22 32 35 30 30 30 22 2c 22 32 35 30 31 33 22 2c 22 32 35 30 30 34 22 2c 22 32 35 32 34 36 22 2c 22 32 35 33 31 31 22 2c 22 32 35 30 30 38 22 5d 2c 22 75 6b 6e 63 73 74 22 3a 6e 75 6c 6c 7d 7d 2c 22 67 64 70 72 22 3a 7b Data Ascii: ER","DISABLE_ADS"],"S2":["REGS_COPPA","TRIM_LAST_OCTET","DISABLE_COOKIESYNC"]},"prtusr":"","dispvd":{"kncst":["25307","25014","25308","25082","25248","25016","25015","25251","25005","25000","25013","25004","25246","25311","25008"],"ukncst":null}},"gdpr":{
2024-03-03 23:26:34 UTC	16384	IN	Data Raw: 22 3a 30 2c 22 69 64 22 3a 22 32 35 30 31 34 22 7d 2c 22 32 35 30 38 32 22 3a 7b 22 66 70 22 3a 30 2c 22 69 64 22 3a 22 32 35 30 38 32 22 7d 2c 22 32 35 31 31 33 22 3a 7b 22 66 70 22 3a 30 2c 22 69 64 22 3a 22 32 35 31 31 33 22 7d 2c 22 32 35 33 30 37 22 3a 7b 22 66 70 22 3a 30 2c 22 69 64 22 3a 22 32 35 33 30 37 22 7d 2c 22 32 35 33 30 38 22 3a 7b 22 66 70 22 3a 30 2c 22 69 64 22 3a 22 32 35 33 30 38 22 7d 2c 22 32 35 33 30 39 22 3a 7b 22 66 70 22 3a 30 2c 22 69 64 22 3a 22 32 35 33 30 39 22 7d 2c 22 32 35 33 31 30 22 3a 7b 22 66 70 22 3a 30 2c 22 69 64 22 3a 22 32 35 33 31 30 22 7d 7d 2c 22 35 33 33 37 31 37 32 37 31 22 3a 7b 22 2d 33 22 3a 7b 22 66 70 22 3a 30 2c 22 69 64 22 3a 22 2d 33 22 7d 2c 22 32 35 30 31 34 22 3a 7b 22 66 70 22 3a 30 2c 22 69 64 Data Ascii: ":0,"id":"25014"},"25082":{"fp":0,"id":"25082"},"25113":{"fp":0,"id":"25113"},"25307":{"fp":0,"id":"25307"},"25308":{"fp":0,"id":"25308"},"25309":{"fp":0,"id":"25309"},"25310":{"fp":0,"id":"25310"}},"533717271":{"-3":{"fp":0,"id":"-3"},"25014":{"fp":0,"id
2024-03-03 23:26:34 UTC	7952	IN	Data Raw: 66 61 6c 73 65 2c 22 61 75 74 6f 22 3a 30 2c 22 62 46 70 22 3a 30 2c 22 62 66 70 53 74 72 22 3a 22 64 79 6e 61 6d 69 63 22 2c 22 66 62 70 22 3a 30 7d 2c 22 32 35 30 38 32 22 3a 7b 22 62 72 22 3a 66 61 6c 73 65 2c 22 65 63 63 22 3a 22 38 43 55 50 48 34 36 55 38 22 2c 22 68 62 22 3a 74 72 75 65 2c 22 70 72 66 22 3a 66 61 6c 73 65 2c 22 69 64 22 3a 22 32 35 30 38 32 22 2c 22 73 7a 73 22 3a 5b 7b 22 65 70 63 4d 61 70 22 3a 7b 22 65 70 63 22 3a 22 39 34 30 31 31 37 34 38 38 22 7d 2c 22 73 7a 22 3a 22 33 30 30 78 36 30 30 22 2c 22 6d 65 64 69 61 74 79 70 65 22 3a 22 30 22 7d 5d 2c 22 74 6d 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 22 3a 30 2c 22 62 46 70 22 3a 30 2c 22 62 66 70 53 74 72 22 3a 22 64 79 6e 61 6d 69 63 22 2c 22 66 62 70 22 3a 30 7d 2c 22 32 35 33 30 Data Ascii: false,"auto":0,"bFp":0,"bfpStr":"dynamic","fbp":0},"25082":{"br":false,"ecc":"8CUPH46U8","hb":true,"prf":false,"id":"25082","szs":[{"epcMap":{"epc":"940117488"},"sz":"300x600","mediatype":"0"}],"tm":false,"auto":0,"bFp":0,"bfpStr":"dynamic","fbp":0},"2530

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49859	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 409715 Cache-Control: public, max-age=2592000 Cache-Tag: 455011173027560281408501159700854956092,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100098-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 76 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 455011173027560281408501159700854956092,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "f80320b7587d5726fc9c575ce8380237" Expiration: expiry-date="Fri, 26 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Jan 2024 16:58:27 GMT Server: ECAcc (nya/78E0) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=304,owidth=400,oheight=400,obytes=12220,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100088-IAD X-Timer: S1706506679.249298,VS0,VE1 Content-Length: 304 Connection: close
2024-03-03 23:26:34 UTC	304	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 54 50 4c 54 45 47 70 4c cc 00 00 cc 00 00 f3 c1 c1 cc 00 00 cc 00 00 cc 00 00 cc 00 00 cc 00 00 cc 00 00 f1 ba ba e0 62 62 f2 bd bd f4 c8 c8 f1 b4 b4 d8 38 38 e2 69 69 ec 9f 9f f5 ce ce d5 2b 2b d1 18 18 db 4b 4b e8 89 89 e4 77 77 fe f9 f9 dd 56 56 fb e9 e9 e5 7f 7f 6b 48 0f c6 00 00 00 0a 74 52 4e 53 00 c2 ff ff da fa fe 99 09 31 f4 aa 51 5d 00 00 00 81 49 44 41 54 18 d3 65 8f 59 0e 84 20 0c 40 b1 05 2a a5 6c 8a ce 76 ff 7b 4e d5 64 62 86 f7 d7 d7 dd 18 25 90 75 ce 52 30 17 33 79 38 f1 34 9f f1 04 3f a6 c3 10 dc 20 ed f7 77 e1 83 16 14 e6 28 19 1e a9 6c 39 92 b1 3d b1 7c 90 2b 37 7e 61 b4 c6 55 a9 b0 e2 5b 16 64 c4 e8 54 60 54 81 f2 94 bc 1c c2 76 Data Ascii: PNGIHDR(-STPLTEGpLbb88ii++KKwwVVkHtRNS1Q]IDATeY @*lv{Ndb%uR03y84? w(l9=\|+7~aU[dT`Tv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49848	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	570	OUT	GET /caas-assets-production/assets/v1/aol_header.80818154f7e7aac9.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	983	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 453274 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:34 GMT Etag: "80818154f7e7aac9e6406a9784c1ee4d" Last-Modified: Thu, 15 Feb 2024 16:48:04 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/798D) Vary: Accept-Encoding x-amz-id-2: tPyKXf8v9PEK2nJm3BE078JFYClwcvf7FG6+VUR7j0DabawEbrs/agseqMl8wYYYUHIGhJWyWVg= x-amz-replication-status: COMPLETED x-amz-request-id: 0E46AN3ABXAKT483 x-amz-server-side-encryption: AES256 x-amz-version-id: Uvypa3fv6NDPm5Xy4wBhSbUe_gZscawH X-Cache: HIT Content-Length: 75558 Connection: close
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 6f 6c 5f 68 65 61 64 65 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f Data Ascii: /! For license information please see aol_header.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 70 6c 61 63 65 28 74 2c 72 29 7d 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 3b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 52 65 67 65 78 70 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 61 3a 72 2c 6f 3d 74 2e 73 74 72 69 70 52 65 67 65 78 70 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 75 3a 6f 2c 63 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 69 3a 63 2c 64 3d 74 2e 64 65 6c 69 6d 69 74 65 72 2c 68 3d 76 6f 69 Data Ascii: place(t,r)}),e)}function l(e,t){return void 0===t&&(t={}),function(e,t){return void 0===t&&(t={}),function(e,t){void 0===t&&(t={});for(var r=t.splitRegexp,n=void 0===r?a:r,o=t.stripRegexp,l=void 0===o?u:o,c=t.transform,f=void 0===c?i:c,d=t.delimiter,h=voi
2024-03-03 23:26:34 UTC	2	IN	Data Raw: 29 72 Data Ascii: )r
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 65 28 72 29 3f 72 3a 53 74 72 69 6e 67 28 72 29 7d 72 2e 72 28 6e 29 2c 72 2e 64 28 6e 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 65 7d 7d 29 3b 76 61 72 20 63 2c 66 3d 72 28 37 38 34 37 29 2e 67 65 74 4f 62 6a 65 63 74 56 61 6c 75 65 2c 64 3d 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 Data Ascii: eturn o;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(t)}(t);return"symbol"==e(r)?r:String(r)}r.r(n),r.d(n,{default:function(){return Le}});var c,f=r(7847).getObjectValue,d=(c=function(){function e(){!function(e,t){if(!
2024-03-03 23:26:34 UTC	16383	IN	Data Raw: 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 74 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 4c 28 74 2c 6e 29 7d 72 65 74 75 72 6e 20 65 28 74 2c 72 29 7d 28 4d 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 72 29 29 2c 74 68 69 73 2e 6d 61 69 6c 50 72 65 76 69 65 77 45 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 29 2c 74 68 69 73 2e 79 6c 6b 3d 7b 7d 2c 74 68 69 73 2e 6d 61 69 6c 50 72 65 76 69 65 77 45 6c 65 6d 26 26 28 74 68 69 73 2e 6c 6f 63 61 6c 65 3d 74 68 69 73 2e 6d 61 69 6c 50 72 65 76 69 65 77 45 6c 65 6d 2e 64 61 Data Ascii: on(e,t,r){if(t&&!Array.isArray(t)&&"number"==typeof t.length){var n=t.length;return L(t,n)}return e(t,r)}(M,document.querySelectorAll(r)),this.mailPreviewElem=document.querySelector(n),this.ylk={},this.mailPreviewElem&&(this.locale=this.mailPreviewElem.da
2024-03-03 23:26:34 UTC	10024	IN	Data Raw: 72 6e 20 63 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 Data Ascii: rn ce="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},ce(e)}function fe(e){return function(e){if(Arra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49860	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-12%2Fc9eafd50-7bd3-11ed-aebb-a0692bf76bce&client=76f99bdb8f78cd44cc0b&signature=be733232ca102f238005d227e03dafbaceccffe5 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	1143	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 675470 Cache-Control: public, max-age=2592000 Cache-Tag: 369482139553269848877719610323974377574,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100116-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 55e71d018566fd257d40e6b5efabf335 cld_latency: 1 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 369482139553269848877719610323974377574,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "cf5119c058f932076546d867a49182db" Last-Modified: Fri, 26 Jan 2024 03:48:41 GMT Server: ECAcc (nya/7939) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1059,owidth=1080,oheight=1080,obytes=32325,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 55e71d018566fd257d40e6b5efabf335 X-Served-By: cache-iad-kiad7000072-IAD X-Timer: S1706240921.862976,VS0,VE144 Content-Length: 1059 Connection: close
2024-03-03 23:26:34 UTC	1059	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7a 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 08 02 03 04 05 07 06 10 00 02 02 01 02 07 01 00 03 01 00 00 00 00 00 00 01 02 04 05 03 00 06 07 11 12 13 21 31 41 22 32 51 71 81 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 Data Ascii: JFIF %%-))-969KKd""$$6&&6>424>LDDL_Z_\|\| z!1A"2Qq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49861	152.199.24.48	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	530	OUT	GET /tag/opus.js HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	561	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 463773 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: application/javascript Date: Sun, 03 Mar 2024 23:26:34 GMT Etag: "115656cfa3586f5dcd18f2dcb953d015" Last-Modified: Tue, 27 Feb 2024 14:35:21 GMT Server: ECAcc (nyd/D19A) Vary: Accept-Encoding x-amz-id-2: dlgcWtbQmGoD1/6IY8WdwJrvpV2QrWxGigeztnhiovxk0NlzVZQgd9UbXUGiRIHN1qm47rjwnSc= x-amz-request-id: MPKN821EAFFQK8Q4 X-Cache: HIT Content-Length: 8402 Connection: close
2024-03-03 23:26:34 UTC	8402	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5b 5c 77 5d 2b 5c 2e 28 5b 5c 77 5d 2b 7c 63 6f 2e 75 6b 29 24 2f 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 22 7d 7d 3b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2c 6f 3d 28 6e 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 61 3d 30 3b 61 3c 6f 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 Data Ascii: (()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const n=function(t,n){for(var e="".concat(t,"="),o=(n\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49862	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=177ac960ba64a8abb0f463dbe9e209b3d20d649d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	1142	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 420440 Cache-Control: public, max-age=2592000 Cache-Tag: 352991030521014136013954760138177611573,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100087-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 61 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 352991030521014136013954760138177611573,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "782119761d9a9ef7b0e1a43cfa75091c" Expiration: expiry-date="Fri, 09 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 10 Feb 2024 20:48:09 GMT Server: ECAcc (nya/79B1) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=849,owidth=400,oheight=400,obytes=35383,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100087-IAD X-Timer: S1709087954.136969,VS0,VE61 Content-Length: 849 Connection: close
2024-03-03 23:26:34 UTC	849	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 72 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 06 07 08 05 10 00 02 01 03 02 06 02 03 01 00 00 00 00 00 00 00 01 02 03 04 05 06 00 12 07 11 21 31 41 61 13 22 14 42 71 15 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 Data Ascii: JFIF %%-))-969KKd %%-))-969KKd "r!1Aa"Bq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49866	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	786	OUT	GET /p?c1=2&c2=1000009&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508393487 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	692	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Sun, 03 Mar 2024 23:26:34 GMT Location: /p2?c1=2&c2=1000009&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508393487 set-cookie: UID=17F9765074314b78a30f4d41709508394; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 932eefec422d884c28f3c110319f29fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 97iLszKvXwRj8Av0rKdwhPUsVQ0Co8wEQtxZa4evAH3GnQaQyvFQyA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49863	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fdce58b70-6994-11ec-bbce-f76baafa31ca&client=76f99bdb8f78cd44cc0b&signature=8b20bbd0531958d16c29ca2e9e8e661d182b0bdb HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:34 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 978488 Cache-Control: public, max-age=2592000 Cache-Tag: 274736506822183680507373023557343399468,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000166-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 146 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 274736506822183680507373023557343399468,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "c83d881a3d5ce5c56127203830586f67" Expiration: expiry-date="Mon, 22 Apr 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 24 Oct 2023 15:23:51 GMT Server: ECAcc (nya/7923) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=684,owidth=400,oheight=400,obytes=5198 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100065-IAD X-Timer: S1700753900.576050,VS0,VE102 Content-Length: 684 Connection: close
2024-03-03 23:26:34 UTC	684	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 0b 08 00 20 00 20 01 01 11 00 ff c4 00 3d 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 07 09 00 01 03 08 10 00 01 03 03 03 04 03 01 01 00 00 00 00 00 00 00 02 01 03 04 05 06 07 00 11 12 08 13 42 61 22 23 31 21 32 ff da 00 08 01 01 00 00 3f 00 e8 8e ac fa b3 8f 83 a3 b7 6e 5b 8d b1 36 eb 9a c7 77 ed f9 33 01 92 fc 75 d1 f2 32 f0 0d 25 fb d3 29 e4 5c 87 39 c9 97 3d cf 54 aa 38 65 bf 07 a4 17 68 3d 03 43 b0 02 7a 14 d5 d9 79 4f 22 e3 c9 cd cc b6 2e 7a a5 2d c0 2d f8 33 20 bb 47 e8 Data Ascii: JFIFC&""&0-0>>T =Ba"#1!2?n[6w3u2%)\9=T8eh=CzyO".z--3 G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49867	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	1072	OUT	GET /offers/aolHomepage/stickyFooter HTTP/1.1 Host: membernotifications.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-03 23:26:35 UTC	538	IN	HTTP/1.1 200 Strict-transport-security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade content-security-policy: frame-ancestors https://www.aol.com Cache-control: no-cache, no-store, private, max-age=0 Content-Type: text/html;charset=UTF-8 Content-Length: 5181 Date: Sun, 03 Mar 2024 23:26:34 GMT Age: 0 Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 74 69 74 6c 65 3e 4f 66 66 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 73 73 2f 72 61 70 69 64 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Offer</title><script src="https://s.yimg.com/ss/rapid3.js"></script><link rel="stylesheet" href="https://s.yimg.
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 20 20 20 74 69 74 6c 65 3d 22 53 61 79 20 67 6f 6f 64 62 79 65 20 74 6f 20 61 64 73 20 69 6e 20 79 6f 75 72 20 69 6e 62 6f 78 22 20 20 64 61 74 61 2d 79 6c 6b 3d 22 73 6c 6b 3a 63 74 61 2d 70 72 69 6d 61 72 79 3b 22 20 09 0a 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 75 74 69 6c 69 74 69 65 73 2f 61 64 2d 66 72 65 65 2d 6d 61 69 6c 3f 6e 63 69 64 3d 6d 62 72 5f 72 75 73 61 63 71 64 73 70 30 30 30 30 30 36 39 31 22 0a 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 62 67 2d 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f Data Ascii: title="Say goodbye to ads in your inbox" data-ylk="slk:cta-primary;" href="https://www.aol.com/products/utilities/ad-free-mail?ncid=mbr_rusacqdsp00000691" target="_blank"> <img class="bg-image" srcset="https://s.yimg.co
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 79 52 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 61 64 64 4d 6f 64 75 6c 65 73 57 69 74 68 56 69 65 77 61 62 69 6c 69 74 79 28 5b 22 43 54 41 5f 4c 69 6e 6b 22 2c 20 22 43 6c 6f 73 65 5f 4c 69 6e 6b 22 5d 2c 20 32 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 61 64 64 20 6d 6f 64 75 6c 65 73 20 64 6f 6e 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 6d 70 72 65 73 73 69 6f 6e 55 72 6c 29 20 7b 0a 20 20 Data Ascii: setTimeout(function() { myRapidInstance.addModulesWithViewability(["CTA_Link", "Close_Link"], 2); console.log("add modules done"); }, 500); } catch (e) { } } if (impressionUrl) {
2024-03-03 23:26:35 UTC	1281	IN	Data Raw: 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 76 61 72 20 53 41 46 45 5f 4f 52 49 47 49 4e 5f 50 41 54 54 45 52 4e 20 3d 20 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 5b 5c 77 5c 2e 5c 2d 5d 7b 31 2c 31 32 38 7d 5c 2e 28 3f 3a 61 6f 6c 7c 79 61 68 6f 6f 7c 79 69 6d 67 29 5c 2e 63 6f 6d 28 3f 3a 5c 3a 5c 64 7b 31 2c 37 7d 29 3f 24 2f 3b 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 4d 65 73 73 61 67 65 28 6d 73 67 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6d 73 67 20 7c 7c 20 21 6d 73 67 2e 6f 72 69 67 69 6e 20 7c 7c 20 21 28 53 41 46 45 5f 4f 52 49 47 49 4e 5f 50 41 54 54 45 52 4e 2e 74 65 73 74 28 6d 73 67 2e 6f 72 69 67 69 6e 29 29 20 7c 7c 20 28 6d 73 67 2e 73 6f 75 72 63 65 20 21 3d 3d 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 Data Ascii: } var SAFE_ORIGIN_PATTERN = /^https:\/\/[\w\.\-]{1,128}\.(?:aol\|yahoo\|yimg)\.com(?:\:\d{1,7})?$/; function handleMessage(msg) { if (!msg \|\| !msg.origin \|\| !(SAFE_ORIGIN_PATTERN.test(msg.origin)) \|\| (msg.source !== window.parent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49864	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-04%2F761cfe70-deb2-11ed-8fff-6672c0d730ce&client=76f99bdb8f78cd44cc0b&signature=3e88644a0b664a16743aee5bc603aabc2307f5c2 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1032	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1646153 Cache-Control: public, max-age=2592000 Cache-Tag: 243695100740789414078494434444352384892,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 243695100740789414078494434444352384892,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "10b71b02100238269f906f7773ad889d" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 20:19:51 GMT Server: ECAcc (nya/797F) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=673,owidth=400,oheight=400,obytes=27550,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21944-LGA X-Timer: S1707862241.053788,VS0,VE2 Content-Length: 673 Connection: close
2024-03-03 23:26:35 UTC	673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 0b 08 00 20 00 20 01 01 11 00 ff c4 00 3d 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 09 00 04 06 07 08 05 10 00 02 01 03 04 02 03 01 01 01 00 00 00 00 00 00 02 03 04 01 05 06 00 07 08 11 42 61 12 21 31 23 32 13 ff da 00 08 01 01 00 00 3f 00 d0 dc b3 e5 9a 36 3d 0b c6 f1 b5 a2 6e 57 35 14 6f 6d fb 4c 04 97 e3 18 3e 46 5e 01 a0 bf 9a 6e 86 e1 ee 24 e6 4c ca 32 5b 9d d5 8c 2e fe 2f 79 55 43 e8 15 4e 80 29 e8 69 a5 85 ee 86 e1 ed dc e5 cc c5 f2 5b 9d a9 8b 2e fe 28 79 51 45 e8 d5 Data Ascii: JFIFC&""&0-0>>T =Ba!1#2?6=nW5omL>F^n$L2[./yUCN)i[.(yQE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49865	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=ae507cb078909cbed31627771fd05c3f42bd428b HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1141	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 559820 Cache-Control: public, max-age=2592000 Cache-Tag: 491141387763699428533225341973349872950,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100074-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:34 GMT Edge-Cache-Tag: 491141387763699428533225341973349872950,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "3c40fbfdf168e3e082389cbefa1bc22e" Expiration: expiry-date="Wed, 17 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 18 Jan 2024 15:01:23 GMT Server: ECAcc (nya/78FC) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=952,owidth=400,oheight=400,obytes=44140,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000143-IAD X-Timer: S1706356574.240953,VS0,VE47 Content-Length: 952 Connection: close
2024-03-03 23:26:35 UTC	952	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 06 06 06 06 08 09 08 09 08 0c 0b 0a 0a 0b 0c 12 0d 0e 0d 0e 0d 12 1b 11 14 11 11 14 11 1b 18 1d 18 16 18 1d 18 2b 22 1e 1e 22 2b 32 2a 28 2a 32 3c 36 36 3c 4c 48 4c 64 64 86 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 75 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 07 08 00 03 01 04 06 10 00 02 02 02 01 03 04 03 01 01 00 00 00 00 00 00 01 02 03 04 05 06 11 00 07 42 12 21 22 61 13 14 16 31 32 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF+""+2(2<66<LHLdd, ,'/&$&/'F7117FQD@DQbXXb\|v\| uB!"a12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49873	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	550	OUT	GET /rx/ev/builds/1.3.9/evplayer.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	789	IN	HTTP/1.1 200 OK x-amz-id-2: K8KCELJMynM0znfWcGTi7PXKA9nJosVzPQL3gvD5dzcts+Gzz26kcliVbAfWVzIdnI4C9ODs+O4= x-amz-request-id: 95DYY282K18EVFRT Date: Sun, 03 Mar 2024 23:26:36 GMT Last-Modified: Tue, 27 Feb 2024 19:48:06 GMT ETag: "b6ecf40386a94dcf6f104b00d7c7f814" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: 2tg_n04bLN8ldQoHkOM8t6EGoTnH2wIm Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 3383 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 2e 65 76 70 2d 6d 61 69 6e 2c 2e 65 76 70 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 65 76 70 2d 6d 61 69 6e 20 2e 65 76 70 2d 64 6f 63 6b 65 64 2d 6d 65 74 61 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 36 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 31 32 31 37 31 37 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 3b 6c 65 Data Ascii: .evp-main,.evp-player{position:relative;width:100%;height:100%;outline:none}.evp-main .evp-docked-meta{position:relative;opacity:0;visibility:hidden;display:none;height:68px;font-size:16px;color:#121717;background:#fff;line-height:20px;padding-top:16px;le
2024-03-03 23:26:35 UTC	954	IN	Data Raw: 64 6c 50 6a 78 6d 5a 55 31 6c 63 6d 64 6c 54 6d 39 6b 5a 53 42 70 62 6a 30 69 63 32 68 68 5a 47 39 33 54 57 46 30 63 6d 6c 34 54 33 56 30 5a 58 49 78 49 69 38 2b 50 47 5a 6c 54 57 56 79 5a 32 56 4f 62 32 52 6c 49 47 6c 75 50 53 4a 54 62 33 56 79 59 32 56 48 63 6d 46 77 61 47 6c 6a 49 69 38 2b 50 43 39 6d 5a 55 31 6c 63 6d 64 6c 50 6a 77 76 5a 6d 6c 73 64 47 56 79 50 6a 77 76 5a 47 56 6d 63 7a 34 38 63 47 46 30 61 43 42 6b 50 53 4a 4e 4d 54 49 75 4d 44 49 31 49 44 45 77 4c 6a 59 78 54 44 59 75 4e 7a 45 34 49 44 55 75 4d 7a 41 7a 59 79 30 75 4d 7a 67 31 4c 53 34 7a 4f 44 51 74 4d 53 34 77 4d 69 30 75 4d 7a 67 32 4c 54 45 75 4e 44 45 75 4d 44 41 30 4c 53 34 7a 4f 54 51 75 4d 7a 6b 7a 4c 53 34 7a 4f 54 4d 67 4d 53 34 77 4d 6a 49 74 4c 6a 41 77 4e 53 41 78 4c Data Ascii: dlPjxmZU1lcmdlTm9kZSBpbj0ic2hhZG93TWF0cml4T3V0ZXIxIi8+PGZlTWVyZ2VOb2RlIGluPSJTb3VyY2VHcmFwaGljIi8+PC9mZU1lcmdlPjwvZmlsdGVyPjwvZGVmcz48cGF0aCBkPSJNMTIuMDI1IDEwLjYxTDYuNzE4IDUuMzAzYy0uMzg1LS4zODQtMS4wMi0uMzg2LTEuNDEuMDA0LS4zOTQuMzkzLS4zOTMgMS4wMjItLjAwNSAxL
2024-03-03 23:26:35 UTC	1129	IN	Data Raw: 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 30 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 31 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 72 69 67 69 6e 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 65 76 70 2d 6d 61 69 6e 2e 65 76 70 2d 64 6f 63 6b 65 64 2d 73 68 6f 77 2d 6d 65 74 61 20 2e 65 76 70 2d 64 6f 63 6b 65 64 2d 6d 65 74 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 20 52 65 67 75 6c 61 72 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 69 74 69 61 6c 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 76 Data Ascii: play:block;width:30px;height:30px;right:0;top:0;padding:11px;background-origin:content-box}.evp-main.evp-docked-show-meta .evp-docked-meta{font-family:Helvetica Neue Regular,Helvetica Neue,helvetica,arial,sans-serif;text-align:initial;white-space:normal;v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49872	142.251.35.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	635	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Sun, 03 Mar 2024 23:26:35 GMT Expires: Sun, 03 Mar 2024 23:26:35 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 343 / 19785 / m202402220101 / config-hash: 7305879754805612343 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 98523 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:35 UTC	467	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="fun
2024-03-03 23:26:35 UTC	1252	IN	Data Raw: 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d Data Ascii: "object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"=
2024-03-03 23:26:35 UTC	1252	IN	Data Raw: 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 64 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 62 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 Data Ascii: "Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=da[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ba(d.prototype,a,{configurable:!
2024-03-03 23:26:35 UTC	1252	IN	Data Raw: 29 6c 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 6f 61 3d 7b 7d 3b 74 72 79 7b 6f 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 6f 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6c 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 Data Ascii: )la=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},oa={};try{oa.__proto__=na;ma=oa.a;break a}catch(a){}ma=!1}la=ma?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la,A=function(a,b){a.pr
2024-03-03 23:26:35 UTC	1252	IN	Data Raw: 28 67 29 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 21 63 28 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 7a 28 67 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 62 61 28 67 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 7a 28 67 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 67 29 3b 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: (g);for(var h;!(h=g.next()).done;)h=h.value,this.set(h[0],h[1])}};f.prototype.set=function(g,h){if(!c(g))throw Error("Invalid WeakMap key");if(!z(g,d)){var k=new b;ba(g,d,{value:k})}if(!z(g,d))throw Error("WeakMap key fail: "+g);g[d][this.g]=h;return this
2024-03-03 23:26:35 UTC	1252	IN	Data Raw: 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 75 29 2c 74 68 69 73 5b 31 5d 2e 44 2e 6e 65 78 74 3d 6c 2e 75 2c 74 68 69 73 5b 31 5d 2e 44 3d 6c 2e 75 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 75 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 75 2e 44 2e 6e 65 78 74 3d 68 2e 75 2e 6e 65 78 74 2c 68 2e 75 2e 6e 65 78 74 2e 44 Data Ascii: d:this[1],key:h,value:k},l.list.push(l.u),this[1].D.next=l.u,this[1].D=l.u,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.u&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.u.D.next=h.u.next,h.u.next.D
2024-03-03 23:26:35 UTC	1252	IN	Data Raw: 3d 68 5b 31 5d 3b 29 6c 3d 6c 2e 44 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 44 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 29 3b 76 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 2c 22 65 73 36 22 29 3b 76 28 22 Data Ascii: =h[1];)l=l.D;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.D=h.next=h.head=h},g=0;return c},"es6");v("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991},"es6");v("
2024-03-03 23:26:35 UTC	1252	IN	Data Raw: 7c 75 28 4f 62 6a 65 63 74 2c 22 69 73 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 65 73 37 22 29 3b 76 61 72 20 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 Data Ascii: \|u(Object,"is").call(Object,f,b))return!0}return!1}},"es7");var sa=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to St
2024-03-03 23:26:35 UTC	1252	IN	Data Raw: 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 22 65 73 36 22 29 3b 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 75 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 Data Ascii: t()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}},"es6");v("Set",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!u(a.prototype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var c
2024-03-03 23:26:35 UTC	1252	IN	Data Raw: 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 76 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 7a 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 76 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 Data Ascii: ach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b},"es6");v("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)z(b,d)&&c.push([d,b[d]]);return c}},"es8");v("String.prototype.startsWith",funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49875	151.101.65.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:34 UTC	544	OUT	GET /libtrc/yahoo-aol-network/loader.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	899	IN	HTTP/1.1 200 OK Connection: close Content-Length: 321672 Server: nginx Content-Type: application/javascript; charset=utf-8 access-control-allow-origin: * etag: "a23b95406166d443ad02a58d82e3c2c434098841" last-modified: Sun, 03 Mar 2024 19:36:36 UTC x-amz-id-2: bbtEB8hWZBk3tHLFTDt8BBrENrdOuvVjXCRV0VzdQXejX6cTBsvc5PAj64Vfzl+C4ZI8SZ8AaAs= x-amz-replication-status: FAILED x-amz-request-id: 1K0FXJZ7MVSJD6V1 x-amz-server-side-encryption: AES256 x-amz-version-id: _Dqy.tBKlVfU_B_I0mcnDJbp0c1dc2x1 x-from-cache: 1 x-envoy-upstream-service-time: 15 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:35 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-ewr18120-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508395.062515,VS0,VE25 Cache-Control: private,max-age=14400 Vary: Accept-Encoding, Accept-Encoding abp: 9 Set-Cookie: abLdr=9;Max-Age=10800; path=/; SameSite=None;Secure
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 2f 2f 41 42 5f 54 45 4d 50 4c 41 54 45 0a 2f 2f 61 62 20 2d 3e 20 39 0a 0a 0a 0a 09 09 76 61 72 20 5f 74 61 62 6f 6f 6c 61 20 3d 20 5f 74 61 62 6f 6f 6c 61 20 7c 7c 20 5b 5d 3b 76 61 72 20 54 52 43 20 3d 20 54 52 43 20 7c 7c 20 7b 7d 3b 0a 54 52 43 2e 70 65 72 66 43 6f 6e 66 4f 76 65 72 72 69 64 65 20 3d 20 7b 27 6c 6f 67 54 69 6d 65 72 27 3a 20 35 30 30 30 30 2c 20 27 6c 6f 67 4c 65 6e 67 74 68 27 20 3a 20 35 2c 20 27 74 72 61 66 66 69 63 27 20 3a 20 35 30 2c 20 27 6d 65 61 73 75 72 65 45 6e 61 62 6c 65 27 20 3a 20 74 72 75 65 2c 20 27 6d 65 61 73 75 72 65 54 69 6d 65 54 6f 53 65 6e 64 27 20 3a 20 31 30 30 30 30 2c 20 27 6d 65 61 73 75 72 65 49 6e 74 65 72 76 61 6c 27 20 3a 20 31 30 30 30 30 2c 20 27 64 69 73 61 62 6c 65 52 61 77 44 61 74 61 53 65 6e 64 Data Ascii: //AB_TEMPLATE//ab -> 9var _taboola = _taboola \|\| [];var TRC = TRC \|\| {};TRC.perfConfOverride = {'logTimer': 50000, 'logLength' : 5, 'traffic' : 50, 'measureEnable' : true, 'measureTimeToSend' : 10000, 'measureInterval' : 10000, 'disableRawDataSend
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 6e 20 65 28 61 2c 6c 29 7b 76 61 72 20 63 3d 6e 65 77 20 6e 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 20 74 28 6f 2c 61 2c 72 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 3f 61 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3b 74 72 79 7b 61 3d 6f 28 74 29 2c 69 28 63 2c 61 2c 65 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 6e 28 65 29 7d 7d 29 3a 61 2e 70 75 73 68 28 72 29 7d 3b 66 28 61 2c 72 2c 65 29 2c 66 28 6c 2c 73 2c 6e 29 2c 75 21 3d 3d 74 2e 50 45 4e 44 49 4e 47 26 26 6f 28 64 29 7d 29 3b 72 65 74 75 72 6e 20 63 7d 2c 63 61 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 6e 75 6c 6c 2c 65 29 7d 7d 3b 72 65 74 75 72 Data Ascii: n e(a,l){var c=new n(function(e,n){var f=function t(o,a,r){"function"==typeof o?a.push(function(t){var a;try{a=o(t),i(c,a,e,n)}catch(e){n(e)}}):a.push(r)};f(a,r,e),f(l,s,n),u!==t.PENDING&&o(d)});return c},catch:function(e){return this.then(null,e)}};retur
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 2c 50 72 6f 6d 69 73 65 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 3f 50 72 6f 6d 69 73 65 3a 54 52 43 2e 50 72 6f 6d 69 73 65 50 6f 6c 79 46 69 6c 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 29 72 65 74 75 72 6e 21 31 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 64 65 74 61 69 6c 3a Data Ascii: ment.head.appendChild(n)},Promise:"undefined"!=typeof Promise?Promise:TRC.PromisePolyFill},function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){var n=document.createEvent("CustomEvent");return t=t\|\|{bubbles:!1,cancelable:!1,detail:
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 2c 61 29 7b 76 61 72 20 73 2c 6c 3b 72 65 74 75 72 6e 20 69 3d 69 7c 7c 6e 2c 72 3d 72 7c 7c 21 31 2c 69 3d 3d 3d 6e 3f 75 28 74 2c 61 29 3a 69 3d 3d 3d 6f 26 26 54 52 43 2e 6c 6f 61 64 65 72 55 74 69 6c 73 2e 69 73 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 28 65 2e 53 63 68 65 64 75 6c 69 6e 67 29 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 28 29 3f 75 28 74 2c 61 29 3a 66 28 74 29 7d 7d 28 77 69 6e 64 6f 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 54 52 43 3d 74 2e 54 52 43 7c 7c 7b 7d 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 66 75 Data Ascii: ,a){var s,l;return i=i\|\|n,r=r\|\|!1,i===n?u(t,a):i===o&&TRC.loaderUtils.isNativeFunction(e.Scheduling)&&navigator.scheduling.isInputPending&&navigator.scheduling.isInputPending()?u(t,a):f(t)}}(window),function(e,t){if(t.TRC=t.TRC\|\|{},"object"==typeof e&&"fu
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 6e 65 63 74 69 6f 6e 29 7b 76 61 72 20 65 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 3b 69 66 28 65 2e 64 6f 77 6e 6c 69 6e 6b 26 26 75 2e 63 61 6c 6c 28 74 68 69 73 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 44 6f 77 6e 6c 69 6e 6b 22 2c 65 2e 64 6f 77 6e 6c 69 6e 6b 29 2c 65 2e 72 74 74 26 26 75 2e 63 61 6c 6c 28 74 68 69 73 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 52 74 74 22 2c 65 2e 72 74 74 29 2c 65 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 29 7b 76 61 72 20 74 3b 73 77 69 74 63 68 28 65 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 29 7b 63 61 73 65 22 73 6c 6f 77 2d 32 67 22 3a 74 3d 31 3b 62 72 65 61 6b 3b 63 61 73 65 22 32 67 22 3a 63 61 73 65 22 33 67 22 3a 63 61 73 65 22 34 67 22 3a 74 3d 65 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 5b 30 Data Ascii: nection){var e=navigator.connection;if(e.downlink&&u.call(this,"connectionDownlink",e.downlink),e.rtt&&u.call(this,"connectionRtt",e.rtt),e.effectiveType){var t;switch(e.effectiveType){case"slow-2g":t=1;break;case"2g":case"3g":case"4g":t=e.effectiveType[0
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 6e 67 74 68 29 7b 69 66 28 21 65 2e 73 65 74 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 42 75 66 66 65 72 53 69 7a 65 29 72 65 74 75 72 6e 3b 65 2e 73 65 74 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 42 75 66 66 65 72 53 69 7a 65 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 2e 6c 65 6e 67 74 68 2b 31 30 30 29 2c 65 2e 6d 61 72 6b 28 61 2b 22 6d 65 61 73 75 72 69 6e 67 22 29 7d 69 66 28 74 68 69 73 2e 66 69 72 73 74 49 74 65 72 61 74 69 6f 6e 46 6c 61 67 29 66 6f 72 28 76 61 72 20 75 20 69 6e 20 6f 2e 6d 65 61 73 75 72 65 73 29 69 66 28 6f 2e 6d 65 61 73 75 72 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 29 7b 76 61 72 20 70 3d 6f 2e 6d 65 61 73 75 72 65 73 5b 75 5d 5b 30 5d 2c 67 3d 6f 2e 6d 65 61 73 75 72 65 73 5b 75 5d 5b 31 5d 3b 65 2e 67 Data Ascii: ngth){if(!e.setResourceTimingBufferSize)return;e.setResourceTimingBufferSize(e.getEntries().length+100),e.mark(a+"measuring")}if(this.firstIterationFlag)for(var u in o.measures)if(o.measures.hasOwnProperty(u)){var p=o.measures[u][0],g=o.measures[u][1];e.g
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 6c 4d 65 61 73 75 72 65 5f 64 6f 6d 43 6f 6d 70 6c 65 74 65 22 2c 65 6e 74 72 79 54 79 70 65 3a 22 6d 65 61 73 75 72 65 22 2c 73 74 61 72 74 54 69 6d 65 3a 73 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 2c 64 75 72 61 74 69 6f 6e 3a 30 7d 29 2c 74 68 69 73 2e 61 64 64 50 61 67 65 43 6f 6e 6e 65 63 74 69 6f 6e 4d 65 74 72 69 63 73 28 29 29 2c 30 21 3d 3d 74 68 69 73 2e 76 69 74 61 6c 73 43 6c 73 26 26 28 74 68 69 73 2e 6d 65 61 73 75 72 65 6d 65 6e 74 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 67 65 6e 65 72 61 6c 4d 65 61 73 75 72 65 5f 63 6c 73 41 67 67 41 64 6a 75 73 74 65 64 22 2c 65 6e 74 72 79 54 79 70 65 3a 22 6d 65 61 73 75 72 65 22 2c 73 74 61 72 74 54 69 6d 65 3a 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2c 64 75 72 61 74 69 6f 6e 3a 31 30 30 2a Data Ascii: lMeasure_domComplete",entryType:"measure",startTime:s.domComplete,duration:0}),this.addPageConnectionMetrics()),0!==this.vitalsCls&&(this.measurements.push({name:"generalMeasure_clsAggAdjusted",entryType:"measure",startTime:performance.now(),duration:100*
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 20 77 69 6e 64 6f 77 2e 52 65 70 6f 72 74 69 6e 67 4f 62 73 65 72 76 65 72 26 26 28 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 52 65 70 6f 72 74 69 6e 67 4f 62 73 65 72 76 65 72 28 67 2e 62 69 6e 64 28 74 68 69 73 2c 74 68 69 73 2e 6c 6f 67 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 62 69 6e 64 28 74 68 69 73 2c 21 30 29 29 2c 7b 74 79 70 65 73 3a 5b 22 69 6e 74 65 72 76 65 6e 74 69 6f 6e 22 5d 2c 62 75 66 66 65 72 65 64 3a 21 31 7d 29 29 2e 6f 62 73 65 72 76 65 28 29 7d 2c 74 68 69 73 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 6f 2c 69 2c 72 2c 73 29 7b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 3b 69 66 28 30 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e Data Ascii: window.ReportingObserver&&(e=new window.ReportingObserver(g.bind(this,this.logMeasurements.bind(this,!0)),{types:["intervention"],buffered:!1})).observe()},this.mark=function(t,n,o,i,r,s){var l=function(e){var t=0;if(0==e.length)return t;for(var n=0;n<e.
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 65 64 3d 30 2c 74 68 69 73 2e 6c 61 73 74 3d 6e 75 6c 6c 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 6d 61 72 6b 28 22 69 6e 74 65 72 76 65 6e 74 69 6f 6e 2d 65 76 65 6e 74 22 2c 6e 75 6c 6c 2c 22 68 65 61 76 79 41 64 49 6e 74 65 72 76 65 6e 74 69 6f 6e 22 2c 22 22 2c 22 68 65 61 76 79 41 64 49 6e 74 65 72 76 65 6e 74 69 6f 6e 22 2c 54 52 43 2e 50 65 72 66 45 76 65 6e 54 79 70 65 2e 4d 41 52 4b 29 2c 65 28 29 7d 3b 70 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 74 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 65 6c 61 70 73 65 64 3d 28 65 2d 28 74 68 69 73 2e 6c 61 73 74 7c 7c 65 29 29 2f 31 65 33 2c 74 68 69 73 2e 6c 61 73 74 3d 65 7d 2c 66 70 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 Data Ascii: ed=0,this.last=null},g=function(e){this.mark("intervention-event",null,"heavyAdIntervention","","heavyAdIntervention",TRC.PerfEvenType.MARK),e()};p.prototype={tick:function(e){this.elapsed=(e-(this.last\|\|e))/1e3,this.last=e},fps:function(){return Math.rou
2024-03-03 23:26:35 UTC	1378	IN	Data Raw: 72 65 6d 65 6e 74 73 2e 62 69 6e 64 28 74 68 69 73 29 3b 69 66 28 54 52 43 2e 5f 5f 74 61 6b 65 4d 65 61 73 75 72 65 51 75 65 75 65 2e 70 75 73 68 28 52 29 2c 30 3d 3d 62 29 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 54 52 43 2e 5f 5f 74 61 6b 65 4d 65 61 73 75 72 65 51 75 65 75 65 2e 70 6f 70 28 29 29 3b 65 6c 73 65 20 69 66 28 31 3d 3d 54 52 43 2e 5f 5f 74 61 6b 65 4d 65 61 73 75 72 65 51 75 65 75 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 79 3d 54 52 43 2e 5f 5f 74 61 6b 65 4d 65 61 73 75 72 65 51 75 65 75 65 2e 70 6f 70 28 29 3b 74 68 69 73 2e 6d 65 61 73 75 72 65 54 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 52 28 29 2c 6f 2e 6d 65 61 Data Ascii: rements.bind(this);if(TRC.__takeMeasureQueue.push(R),0==b)window.addEventListener("beforeunload",TRC.__takeMeasureQueue.pop());else if(1==TRC.__takeMeasureQueue.length){var y=TRC.__takeMeasureQueue.pop();this.measureTimeout=setTimeout(function(){R(),o.mea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49879	76.13.32.141	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	1365	OUT	POST /nex/modules/weather/v1?isXHR=true&m_mode=json HTTP/1.1 Host: www.aol.com Connection: keep-alive Content-Length: 20 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" tracestate: 2526950@nr=0-1-3101648-658130534-35ed9fd23b74cc4c----1709508394029 traceparent: 00-e1299fdc72fcd72b49ee710eeceb1300-35ed9fd23b74cc4c-01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMxMDE2NDgiLCJhcCI6IjY1ODEzMDUzNCIsImlkIjoiMzVlZDlmZDIzYjc0Y2M0YyIsInRyIjoiZTEyOTlmZGM3MmZjZDcyYjQ5ZWU3MTBlZWNlYjEzMDAiLCJ0aSI6MTcwOTUwODM5NDAyOSwidGsiOiIyNTI2OTUwIn19 content-type: application/json sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-03 23:26:35 UTC	20	OUT	Data Raw: 7b 22 77 6f 65 69 64 22 3a 22 31 32 37 36 31 34 30 34 22 7d Data Ascii: {"woeid":"12761404"}
2024-03-03 23:26:35 UTC	841	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:35 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept x-cached-cookies: weathergeo set-cookie: weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; Domain=.aol.com; Path=/; Expires=Mon, 03 Mar 2025 23:26:35 GMT Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Vary: Accept-Encoding Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS Referrer-Policy: no-referrer-when-downgrade
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 31 31 34 64 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 73 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 7b 22 6c 61 74 22 3a 34 30 2e 37 34 38 31 31 32 2c 22 6c 6f 6e 67 22 3a 2d 37 33 2e 39 38 34 38 39 34 2c 22 6c 6f 63 61 6c 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 61 64 6d 69 6e 44 69 73 74 72 69 63 74 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 7a 69 70 22 3a 22 30 22 2c 22 77 6f 65 69 64 22 3a 31 32 37 36 31 34 30 34 7d 7d 5d 7d 2c 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 69 73 41 63 63 75 57 65 61 74 68 65 72 22 3a 74 72 75 65 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 41 43 43 55 57 45 41 54 48 45 52 22 2c 22 77 65 61 74 68 65 72 22 3a 7b 22 63 75 72 Data Ascii: 114d{"data":{"metadata":{"cookies":[{"value":{"lat":40.748112,"long":-73.984894,"locality":"New York","adminDistrict":"NY","country":"United States","zip":"0","woeid":12761404}}]},"response":{"isAccuWeather":true,"provider":"ACCUWEATHER","weather":{"cur
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 32 32 36 38 30 2c 22 73 75 6e 73 65 74 22 3a 36 34 35 36 30 7d 2c 7b 22 64 61 79 22 3a 31 37 30 39 39 36 30 34 30 30 2c 22 64 61 74 65 22 3a 31 37 30 39 39 36 30 34 30 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4d 6f 73 74 6c 79 20 43 6c 6f 75 64 79 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 32 38 2c 22 6d 61 78 5f 74 65 6d 70 22 3a 34 37 2c 22 6d 69 6e 5f 74 65 6d 70 22 3a 33 38 2c 22 70 6f 70 22 3a 37 39 2c 22 73 75 6e 72 69 73 65 22 3a 32 32 35 36 30 2c 22 73 75 6e 73 65 74 22 3a 36 34 36 32 30 7d 2c 7b 22 64 61 79 22 3a 31 37 31 30 30 34 36 38 30 30 2c 22 64 61 74 65 22 3a 31 37 31 30 30 34 36 38 30 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 68 6f 77 65 72 73 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 31 31 2c 22 6d 61 78 5f 74 65 6d Data Ascii: 22680,"sunset":64560},{"day":1709960400,"date":1709960400,"description":"Mostly Cloudy","icon_code":28,"max_temp":47,"min_temp":38,"pop":79,"sunrise":22560,"sunset":64620},{"day":1710046800,"date":1710046800,"description":"Showers","icon_code":11,"max_tem
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 30 39 35 33 39 32 30 30 2c 22 70 6f 70 22 3a 31 36 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6c 6f 75 64 79 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 32 36 2c 22 74 65 6d 70 65 72 61 74 75 72 65 22 3a 35 31 7d 2c 7b 22 74 69 6d 65 22 3a 31 37 30 39 35 34 32 38 30 30 2c 22 70 6f 70 22 3a 33 37 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6c 6f 75 64 79 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 32 36 2c 22 74 65 6d 70 65 72 61 74 75 72 65 22 3a 34 39 7d 2c 7b 22 74 69 6d 65 22 3a 31 37 30 39 35 34 36 34 30 30 2c 22 70 6f 70 22 3a 34 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 63 61 74 74 65 72 65 64 20 53 68 6f 77 65 72 73 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 33 39 2c 22 74 65 6d 70 65 72 61 74 75 72 65 22 3a 34 39 7d 2c 7b 22 Data Ascii: 09539200,"pop":16,"description":"Cloudy","icon_code":26,"temperature":51},{"time":1709542800,"pop":37,"description":"Cloudy","icon_code":26,"temperature":49},{"time":1709546400,"pop":40,"description":"Scattered Showers","icon_code":39,"temperature":49},{"
2024-03-03 23:26:35 UTC	542	IN	Data Raw: 64 79 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 32 36 2c 22 74 65 6d 70 65 72 61 74 75 72 65 22 3a 35 31 7d 5d 7d 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 77 6f 65 69 64 22 3a 31 32 37 36 31 34 30 34 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 70 68 6f 74 6f 5f 77 6f 65 69 64 22 3a 32 34 35 39 31 31 35 2c 22 63 65 6e 74 72 6f 69 64 5f 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 34 38 31 31 32 2c 22 63 65 6e 74 72 6f 69 64 5f 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 33 2e 39 38 34 38 39 34 2c 22 74 69 6d 65 7a 6f 6e 65 5f 69 64 22 3a 5b 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 5d 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 66 75 6c Data Ascii: dy","icon_code":26,"temperature":51}]},"location":{"woeid":12761404,"state":"NY","photo_woeid":2459115,"centroid_latitude":40.748112,"centroid_longitude":-73.984894,"timezone_id":["America/New_York"],"country_name":"United States","country_code":"US","ful

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49876	34.95.69.49	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	489	OUT	OPTIONS /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	492	IN	HTTP/1.1 204 No Content Server: nginx/1.21.6 Date: Sun, 03 Mar 2024 23:26:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Max-Age: 1728000 Content-Type: text/plain; charset=utf-8 Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49877	76.13.32.141	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	1363	OUT	POST /nex/modules/news/v1/?m_mode=json&isXHR=true HTTP/1.1 Host: www.aol.com Connection: keep-alive Content-Length: 56 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" tracestate: 2526950@nr=0-1-3101648-658130534-e06a02e968b9921d----1709508394042 traceparent: 00-6bd3222aa317398dfd07749f2e7f6270-e06a02e968b9921d-01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMxMDE2NDgiLCJhcCI6IjY1ODEzMDUzNCIsImlkIjoiZTA2YTAyZTk2OGI5OTIxZCIsInRyIjoiNmJkMzIyMmFhMzE3Mzk4ZGZkMDc3NDlmMmU3ZjYyNzAiLCJ0aSI6MTcwOTUwODM5NDA0MiwidGsiOiIyNTI2OTUwIn19 content-type: application/json sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-03 23:26:35 UTC	56	OUT	Data Raw: 7b 22 77 6f 65 69 64 22 3a 22 31 32 37 36 31 34 30 34 22 2c 22 72 65 6e 64 65 72 54 79 70 65 22 3a 22 77 65 61 74 68 65 72 5f 76 32 22 2c 22 73 6c 6f 74 22 3a 22 22 7d Data Ascii: {"woeid":"12761404","renderType":"weather_v2","slot":""}
2024-03-03 23:26:35 UTC	681	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:35 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept x-cached-cookies: weathergeo Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Vary: Accept-Encoding Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS Referrer-Policy: no-referrer-when-downgrade
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 31 39 30 37 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 61 72 74 69 63 6c 65 73 22 3a 5b 7b 22 69 64 22 3a 22 38 65 64 63 37 33 33 39 2d 64 37 37 35 2d 33 63 63 39 2d 39 36 33 37 2d 33 32 36 64 37 35 66 63 61 37 36 30 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 4f 46 46 4e 45 54 22 2c 22 74 69 74 6c 65 22 3a 22 4e 59 43 20 75 6e 76 65 69 6c 73 20 70 75 62 6c 69 63 20 65 2d 62 69 6b 65 20 63 68 61 72 67 69 6e 67 20 70 6f 72 74 73 20 66 6f 72 20 64 65 6c 69 76 65 72 79 20 77 6f 72 6b 65 72 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 20 70 72 65 73 65 6e 74 65 64 20 6c 61 73 74 20 77 65 65 6b 20 69 74 73 20 66 69 72 73 74 20 73 75 69 74 Data Ascii: 1907{"data":{"response":{"articles":[{"id":"8edc7339-d775-3cc9-9637-326d75fca760","contentType":"OFFNET","title":"NYC unveils public e-bike charging ports for delivery workers","description":"","summary":"New York City presented last week its first suit
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 31 33 38 38 35 39 32 61 26 63 6c 69 65 6e 74 3d 37 36 66 39 39 62 64 62 38 66 37 38 63 64 34 34 63 63 30 62 26 73 69 67 6e 61 74 75 72 65 3d 36 63 30 31 66 35 32 62 64 64 31 35 31 61 61 31 65 65 66 61 31 63 33 30 33 38 63 32 39 61 34 38 65 37 34 38 33 30 34 66 22 2c 22 69 73 48 6f 73 74 65 64 22 3a 66 61 6c 73 65 2c 22 63 61 74 65 67 6f 72 79 4c 61 62 65 6c 22 3a 22 55 2e 53 2e 22 2c 22 70 72 6f 76 69 64 65 72 43 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6d 6e 79 2e 63 6f 6d 2f 74 72 61 6e 73 69 74 2f 6e 79 63 2d 70 75 62 6c 69 63 2d 65 2d 62 69 6b 65 2d 63 68 61 72 67 69 6e 67 2d 70 6f 72 74 73 2d 75 6e 76 65 69 6c 65 64 2f 22 2c 22 73 6f 75 72 63 65 22 3a 22 22 2c 22 70 6f 6c 6c 73 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 22 Data Ascii: 1388592a&client=76f99bdb8f78cd44cc0b&signature=6c01f52bdd151aa1eefa1c3038c29a48e748304f","isHosted":false,"categoryLabel":"U.S.","providerContentUrl":"https://www.amny.com/transit/nyc-public-e-bike-charging-ports-unveiled/","source":"","polls":null,"link"
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 6d 2f 64 63 37 36 65 37 32 33 2d 32 64 34 66 2d 33 64 30 63 2d 61 31 39 64 2d 32 65 62 39 63 36 34 63 33 63 64 63 2f 66 61 6e 73 2d 67 61 74 68 65 72 2d 74 6f 2d 73 61 79 2d 67 6f 6f 64 62 79 65 2d 74 6f 2e 68 74 6d 6c 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 2c 22 63 6c 69 63 6b 54 68 72 6f 75 67 68 55 72 6c 22 3a 6e 75 6c 6c 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 64 69 6d 73 3f 74 68 75 6d 62 6e 61 69 6c 3d 32 30 30 25 32 43 32 30 30 25 32 43 61 75 74 6f 26 69 6d 61 67 65 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 2e 79 69 6d 67 2e 63 6f 6d 25 32 46 61 6d 25 32 46 36 Data Ascii: "https://www.aol.com/m/dc76e723-2d4f-3d0c-a19d-2eb9c64c3cdc/fans-gather-to-say-goodbye-to.html","canonicalUrl":null,"clickThroughUrl":null,"thumbnail":"https://s.aolcdn.com/images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F6
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 73 20 69 6e 6a 75 72 69 65 73 20 61 6e 64 20 68 65 72 20 6c 65 66 74 20 6c 65 67 20 77 61 73 20 6c 65 66 74 20 70 61 72 61 6c 79 7a 65 64 2e 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 4e 42 43 20 4e 65 77 20 59 6f 72 6b 22 2c 22 75 72 6c 22 3a 22 22 2c 22 73 6f 75 72 63 65 49 64 22 3a 22 6e 62 63 6e 65 77 79 6f 72 6b 2e 63 6f 6d 22 2c 22 6c 6f 67 6f 22 3a 6e 75 6c 6c 2c 22 69 6d 61 67 65 42 79 54 79 70 65 22 3a 6e 75 6c 6c 7d 2c 22 70 72 65 76 69 65 77 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 6d 2f 62 62 38 30 30 38 62 38 2d 31 38 37 30 2d 33 37 33 35 2d 62 34 34 37 2d 33 37 62 64 37 64 63 37 65 37 38 38 2f 63 61 6e 63 65 72 2d 70 61 74 69 65 6e 74 2d 64 72 61 67 67 65 64 2d Data Ascii: s injuries and her left leg was left paralyzed.","provider":{"displayName":"NBC New York","url":"","sourceId":"nbcnewyork.com","logo":null,"imageByType":null},"previewUrl":"https://www.aol.com/m/bb8008b8-1870-3735-b447-37bd7dc7e788/cancer-patient-dragged-
2024-03-03 23:26:35 UTC	1220	IN	Data Raw: 74 65 6e 20 49 73 6c 61 6e 64 20 42 75 73 69 6e 65 73 73 20 4f 75 74 72 65 61 63 68 20 43 65 6e 74 65 72 20 69 73 20 68 61 76 69 6e 67 20 61 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 70 61 72 61 64 65 20 6f 70 65 6e 20 74 6f 20 74 68 6f 73 65 20 67 72 6f 75 70 73 20 6f 6e 20 4d 61 72 63 68 20 31 37 2e 20 54 68 69 73 20 79 65 61 72 27 73 20 67 72 61 6e 64 20 6d 61 72 73 68 61 6c 20 69 73 20 54 69 6d 6f 74 68 79 20 4f 27 53 75 6c 6c 69 76 61 6e 2e 20 54 68 65 20 4e 59 43 20 44 4f 54 20 73 61 79 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 72 65 65 74 73 20 77 69 6c 6c 20 62 65 20 63 6c 6f 73 65 64 3a 20 48 61 72 74 20 42 6f 75 6c 65 76 61 72 64 20 62 65 74 77 65 65 6e 20 46 6f 72 65 73 74 20 41 76 65 6e 75 65 20 61 6e 64 20 52 65 76 65 72 65 20 53 74 Data Ascii: ten Island Business Outreach Center is having an additional parade open to those groups on March 17. This year's grand marshal is Timothy O'Sullivan. The NYC DOT says the following streets will be closed: Hart Boulevard between Forest Avenue and Revere St

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49874	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-12%2Fc9eafd50-7bd3-11ed-aebb-a0692bf76bce&client=76f99bdb8f78cd44cc0b&signature=be733232ca102f238005d227e03dafbaceccffe5 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1143	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 675471 Cache-Control: public, max-age=2592000 Cache-Tag: 369482139553269848877719610323974377574,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100116-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 55e71d018566fd257d40e6b5efabf335 cld_latency: 1 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:35 GMT Edge-Cache-Tag: 369482139553269848877719610323974377574,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "cf5119c058f932076546d867a49182db" Last-Modified: Fri, 26 Jan 2024 03:48:41 GMT Server: ECAcc (nya/7939) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1059,owidth=1080,oheight=1080,obytes=32325,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 55e71d018566fd257d40e6b5efabf335 X-Served-By: cache-iad-kiad7000072-IAD X-Timer: S1706240921.862976,VS0,VE144 Content-Length: 1059 Connection: close
2024-03-03 23:26:35 UTC	1059	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7a 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 08 02 03 04 05 07 06 10 00 02 02 01 02 07 01 00 03 01 00 00 00 00 00 00 01 02 04 05 03 00 06 07 11 12 13 21 31 41 22 32 51 71 81 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 Data Ascii: JFIF %%-))-969KKd""$$6&&6>424>LDDL_Z_\|\| z!1A"2Qq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49881	76.13.32.141	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	908	OUT	GET /lib/metro/g/myy/rapidworker_1_2_0.0.2.js HTTP/1.1 Host: www.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-03-03 23:26:35 UTC	925	IN	HTTP/1.1 200 OK x-amz-id-2: Yamkq8XNyOCU363nuYrP5fEeGoklfZX/MqXUPiyAnY+5bJnAO9YlwhvYKhSNop95vi2IF2XPvHpidyUkIdyey2+b1CO3rra/ZSDEyCBOZ4w= x-amz-request-id: 95DYWGY2CVN6J7BW Date: Sun, 03 Mar 2024 23:26:36 GMT Last-Modified: Fri, 06 Jul 2018 04:18:58 GMT ETag: "afff28b6dd72d1bd824133318ddeaa17" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Mon, 05 Jan 2015 14:32:02 GMT x-amz-meta-mbst-etag: "YM:1:8514ac89-424f-4bf7-8991-9907ccdf05d700050be88dc2a686" x-amz-meta-x-ysws-mbst-vtime: 1420468322215558 x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: application/x-javascript Server: ATS Content-Length: 16605 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 62 61 73 65 36 34 28 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 74 6f 61 29 7b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 3b 7d 66 6f 72 28 76 61 72 20 71 2c 6b 2c 64 2c 6a 2c 63 2c 68 2c 6d 2c 67 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 70 3d 5b 5d 2c 76 3d 30 3b 62 2e 6c 65 6e 67 74 68 3e 76 3b 29 7b 71 3d 62 2e 63 68 61 72 43 6f 64 65 41 74 28 76 2b 2b 29 2c 6b 3d 62 2e 63 68 61 72 43 6f 64 65 41 74 28 76 2b 2b 29 2c 64 3d 62 2e 63 68 61 72 43 6f 64 65 41 74 28 76 2b 2b 29 2c 6a 3d 71 3e 3e 32 2c 63 3d 28 33 26 71 29 3c 3c 34 Data Ascii: function base64(b){if("undefined"!=typeof btoa){return btoa(b);}for(var q,k,d,j,c,h,m,g="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",p=[],v=0;b.length>v;){q=b.charCodeAt(v++),k=b.charCodeAt(v++),d=b.charCodeAt(v++),j=q>>2,c=(3&q)<<4
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 2c 61 6b 3d 32 35 36 2c 61 45 3d 32 35 36 2c 61 70 3d 61 6b 2b 31 2b 61 69 2c 61 61 3d 33 30 2c 62 36 3d 31 39 2c 63 72 3d 31 36 2c 62 33 3d 31 37 2c 62 48 3d 31 38 2c 63 63 3d 32 2a 61 70 2b 31 2c 61 71 3d 70 61 72 73 65 49 6e 74 28 28 62 68 2b 62 63 2d 31 29 2f 62 63 29 2c 61 62 3d 6e 75 6c 6c 2c 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 63 3d 30 2c 74 68 69 73 2e 64 6c 3d 30 3b 7d 2c 61 7a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 79 6e 5f 74 72 65 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 74 61 74 69 63 5f 74 72 65 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 78 74 72 61 5f 62 69 74 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 78 74 72 61 5f 62 61 73 65 3d 30 2c 74 68 69 73 2e 65 6c 65 6d 73 3d 30 2c 74 68 69 73 2e 6d 61 78 5f 6c 65 6e Data Ascii: ,ak=256,aE=256,ap=ak+1+ai,aa=30,b6=19,cr=16,b3=17,bH=18,cc=2*ap+1,aq=parseInt((bh+bc-1)/bc),ab=null,ca=function(){this.fc=0,this.dl=0;},az=function(){this.dyn_tree=null,this.static_tree=null,this.extra_bits=null,this.extra_base=0,this.elems=0,this.max_len
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 65 77 20 63 61 3b 7d 62 41 3d 6e 65 77 20 61 7a 2c 62 72 3d 6e 65 77 20 61 7a 2c 62 6c 3d 6e 65 77 20 61 7a 2c 63 67 3d 41 72 72 61 79 28 62 45 2b 31 29 2c 63 6d 3d 41 72 72 61 79 28 32 2a 61 70 2b 31 29 2c 62 6d 3d 41 72 72 61 79 28 32 2a 61 70 2b 31 29 2c 63 69 3d 41 72 72 61 79 28 61 36 2d 62 63 2b 31 29 2c 61 4a 3d 41 72 72 61 79 28 35 31 32 29 2c 61 44 3d 41 72 72 61 79 28 61 69 29 2c 62 57 3d 41 72 72 61 79 28 61 61 29 2c 63 6b 3d 41 72 72 61 79 28 70 61 72 73 65 49 6e 74 28 62 59 2f 38 29 29 3b 7d 7d 2c 61 30 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6e 65 78 74 3d 61 4c 2c 61 4c 3d 61 3b 7d 2c 63 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 4c 3f 28 61 3d 61 4c 2c 61 4c 3d 61 4c 2e 6e 65 78 Data Ascii: ew ca;}bA=new az,br=new az,bl=new az,cg=Array(bE+1),cm=Array(2ap+1),bm=Array(2ap+1),ci=Array(a6-bc+1),aJ=Array(512),aD=Array(ai),bW=Array(aa),ck=Array(parseInt(bY/8));}},a0=function(a){a.next=aL,aL=a;},cu=function(){var a;return null!=aL?(a=aL,aL=aL.nex
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 2b 2b 6d 5d 3d 3d 61 55 5b 68 2b 31 5d 29 7b 68 2b 3d 32 2c 6d 2b 2b 3b 64 6f 7b 7d 77 68 69 6c 65 28 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 67 3e 68 29 3b 69 66 28 69 3d 61 36 2d 28 67 2d 68 29 2c 68 3d 67 2d 61 36 2c 69 3e 63 29 7b 69 66 28 62 73 3d 62 2c 63 3d 69 2c 61 34 29 7b 69 66 28 69 3e 3d 61 36 29 7b 62 72 65 61 6b 3b 7d 7d 65 6c 73 65 7b 69 66 28 69 3e 3d 62 Data Ascii: ++m]==aU[h+1]){h+=2,m++;do{}while(aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&g>h);if(i=a6-(g-h),h=g-a6,i>c){if(bs=b,c=i,a4){if(i>=a6){break;}}else{if(i>=b
2024-03-03 23:26:35 UTC	1116	IN	Data Raw: 7c 28 61 46 3d 30 2c 62 4e 3d 30 2c 61 42 28 29 2c 63 73 28 29 2c 61 47 3d 6e 75 6c 6c 2c 61 37 3d 30 2c 61 48 3d 30 2c 61 32 3d 30 2c 33 3e 3d 62 70 3f 28 62 78 3d 62 63 2d 31 2c 62 46 3d 30 29 3a 28 62 46 3d 62 63 2d 31 2c 61 32 3d 30 2c 61 32 3d 30 29 2c 62 66 3d 21 31 29 3b 7d 2c 63 71 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 2c 63 29 7b 76 61 72 20 64 3b 72 65 74 75 72 6e 20 61 59 7c 7c 28 61 76 28 29 2c 61 59 3d 21 30 2c 30 21 3d 62 53 29 3f 28 64 3d 61 63 28 62 2c 61 2c 63 29 29 3d 3d 63 3f 63 3a 62 66 3f 64 3a 28 33 3e 3d 62 70 3f 61 50 28 29 3a 62 44 28 29 2c 30 3d 3d 62 53 26 26 28 30 21 3d 61 32 26 26 62 5a 28 30 2c 32 35 35 26 61 55 5b 62 50 2d 31 5d 29 2c 62 39 28 31 29 2c 62 66 3d 21 30 29 2c 64 2b 61 63 28 62 2c 64 2b 61 2c 63 2d 64 29 29 3a Data Ascii: \|(aF=0,bN=0,aB(),cs(),aG=null,a7=0,aH=0,a2=0,3>=bp?(bx=bc-1,bF=0):(bF=bc-1,a2=0,a2=0),bf=!1);},cq=function(b,a,c){var d;return aY\|\|(av(),aY=!0,0!=bS)?(d=ac(b,a,c))==c?c:bf?d:(3>=bp?aP():bD(),0==bS&&(0!=a2&&bZ(0,255&aU[bP-1]),b9(1),bf=!0),d+ac(b,d+a,c-d)):
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 3e 3e 3d 37 3b 61 61 3e 67 3b 67 2b 2b 29 7b 66 6f 72 28 62 57 5b 67 5d 3d 63 3c 3c 37 2c 62 3d 30 3b 31 3c 3c 61 75 5b 67 5d 2d 37 3e 62 3b 62 2b 2b 29 7b 61 4a 5b 32 35 36 2b 63 2b 2b 5d 3d 67 3b 7d 7d 66 6f 72 28 61 3d 30 3b 62 45 3e 3d 61 3b 61 2b 2b 29 7b 63 67 5b 61 5d 3d 30 3b 7d 66 6f 72 28 62 3d 30 3b 31 34 33 3e 3d 62 3b 29 7b 62 4a 5b 62 2b 2b 5d 2e 64 6c 3d 38 2c 63 67 5b 38 5d 2b 2b 3b 7d 66 6f 72 28 3b 32 35 35 3e 3d 62 3b 29 7b 62 4a 5b 62 2b 2b 5d 2e 64 6c 3d 39 2c 63 67 5b 39 5d 2b 2b 3b 7d 66 6f 72 28 3b 32 37 39 3e 3d 62 3b 29 7b 62 4a 5b 62 2b 2b 5d 2e 64 6c 3d 37 2c 63 67 5b 37 5d 2b 2b 3b 7d 66 6f 72 28 3b 32 38 37 3e 3d 62 3b 29 7b 62 4a 5b 62 2b 2b 5d 2e 64 6c 3d 38 2c 63 67 5b 38 5d 2b 2b 3b 7d 66 6f 72 28 62 37 28 62 4a 2c 61 70 Data Ascii: >>=7;aa>g;g++){for(bW[g]=c<<7,b=0;1<<au[g]-7>b;b++){aJ[256+c++]=g;}}for(a=0;bE>=a;a++){cg[a]=0;}for(b=0;143>=b;){bJ[b++].dl=8,cg[8]++;}for(;255>=b;){bJ[b++].dl=9,cg[9]++;}for(;279>=b;){bJ[b++].dl=7,cg[7]++;}for(;287>=b;){bJ[b++].dl=8,cg[8]++;}for(b7(bJ,ap
2024-03-03 23:26:35 UTC	530	IN	Data Raw: 73 74 61 74 69 63 5f 74 72 65 65 2c 63 3d 62 2e 65 6c 65 6d 73 2c 68 3d 2d 31 2c 6d 3d 63 3b 66 6f 72 28 62 77 3d 30 2c 63 7a 3d 63 63 2c 70 3d 30 3b 63 3e 70 3b 70 2b 2b 29 7b 30 21 3d 64 5b 70 5d 2e 66 63 3f 28 63 6d 5b 2b 2b 62 77 5d 3d 68 3d 70 2c 62 6d 5b 70 5d 3d 30 29 3a 64 5b 70 5d 2e 64 6c 3d 30 3b 7d 66 6f 72 28 3b 32 3e 62 77 3b 29 7b 76 61 72 20 67 3d 63 6d 5b 2b 2b 62 77 5d 3d 32 3e 68 3f 2b 2b 68 3a 30 3b 64 5b 67 5d 2e 66 63 3d 31 2c 62 6d 5b 67 5d 3d 30 2c 63 6a 2d 2d 2c 6e 75 6c 6c 21 3d 6a 26 26 28 63 78 2d 3d 6a 5b 67 5d 2e 64 6c 29 3b 7d 66 6f 72 28 62 2e 6d 61 78 5f 63 6f 64 65 3d 68 2c 70 3d 62 77 3e 3e 31 3b 70 3e 3d 31 3b 70 2d 2d 29 7b 61 6c 28 64 2c 70 29 3b 7d 64 6f 7b 70 3d 63 6d 5b 62 31 5d 2c 63 6d 5b 62 31 5d 3d 63 6d 5b 62 Data Ascii: static_tree,c=b.elems,h=-1,m=c;for(bw=0,cz=cc,p=0;c>p;p++){0!=d[p].fc?(cm[++bw]=h=p,bm[p]=0):d[p].dl=0;}for(;2>bw;){var g=cm[++bw]=2>h?++h:0;d[g].fc=1,bm[g]=0,cj--,null!=j&&(cx-=j[g].dl);}for(b.max_code=h,p=bw>>1;p>=1;p--){al(d,p);}do{p=cm[b1],cm[b1]=cm[b
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 35 2c 6b 3d 30 3b 70 3e 3d 6b 3b 6b 2b 2b 29 7b 64 3d 63 2c 63 3d 62 5b 6b 2b 31 5d 2e 64 6c 2c 6d 3e 2b 2b 68 26 26 64 3d 3d 63 7c 7c 28 67 3e 68 3f 62 42 5b 64 5d 2e 66 63 2b 3d 68 3a 30 21 3d 64 3f 28 64 21 3d 6a 26 26 62 42 5b 64 5d 2e 66 63 2b 2b 2c 62 42 5b 63 72 5d 2e 66 63 2b 2b 29 3a 31 30 3e 3d 68 3f 62 42 5b 62 33 5d 2e 66 63 2b 2b 3a 62 42 5b 62 48 5d 2e 66 63 2b 2b 2c 68 3d 30 2c 6a 3d 64 2c 30 3d 3d 63 3f 28 6d 3d 31 33 38 2c 67 3d 33 29 3a 64 3d 3d 63 3f 28 6d 3d 36 2c 67 3d 33 29 3a 28 6d 3d 37 2c 67 3d 34 29 29 3b 7d 7d 2c 61 41 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 70 29 7b 76 61 72 20 6b 2c 64 2c 6a 3d 2d 31 2c 63 3d 62 5b 30 5d 2e 64 6c 2c 68 3d 30 2c 6d 3d 37 2c 67 3d 34 3b 66 6f 72 28 30 3d 3d 63 26 26 28 6d 3d 31 33 38 2c 67 3d 33 29 Data Ascii: 5,k=0;p>=k;k++){d=c,c=b[k+1].dl,m>++h&&d==c\|\|(g>h?bB[d].fc+=h:0!=d?(d!=j&&bB[d].fc++,bB[cr].fc++):10>=h?bB[b3].fc++:bB[bH].fc++,h=0,j=d,0==c?(m=138,g=3):d==c?(m=6,g=3):(m=7,g=4));}},aA=function(b,p){var k,d,j=-1,c=b[0].dl,h=0,m=7,g=4;for(0==c&&(m=138,g=3)
2024-03-03 23:26:35 UTC	148	IN	Data Raw: 3d 33 2c 70 61 72 73 65 49 6e 74 28 61 52 2f 32 29 3e 62 35 26 26 70 61 72 73 65 49 6e 74 28 63 2f 32 29 3e 67 29 7b 72 65 74 75 72 6e 20 21 30 3b 7d 7d 72 65 74 75 72 6e 20 61 52 3d 3d 62 59 2d 31 7c 7c 62 35 3d 3d 61 68 3b 7d 2c 62 4f 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 71 29 7b 76 61 72 20 6b 2c 64 2c 6a 2c 63 2c 68 3d 30 2c 6d 3d 30 2c 67 3d 30 2c 70 3d 30 3b 69 66 28 30 21 3d 61 52 29 7b 64 6f 7b 30 3d 3d 28 37 26 68 29 26 26 28 70 3d Data Ascii: =3,parseInt(aR/2)>b5&&parseInt(c/2)>g){return !0;}}return aR==bY-1\|\|b5==ah;},bO=function(b,q){var k,d,j,c,h=0,m=0,g=0,p=0;if(0!=aR){do{0==(7&h)&&(p=
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 63 6b 5b 67 2b 2b 5d 29 2c 64 3d 32 35 35 26 62 56 5b 68 2b 2b 5d 2c 30 3d 3d 28 31 26 70 29 3f 63 6f 28 64 2c 62 29 3a 28 6a 3d 63 69 5b 64 5d 2c 63 6f 28 6a 2b 61 6b 2b 31 2c 62 29 2c 63 3d 61 4b 5b 6a 5d 2c 30 21 3d 63 26 26 28 64 2d 3d 61 44 5b 6a 5d 2c 61 6f 28 64 2c 63 29 29 2c 6b 3d 62 49 5b 6d 2b 2b 5d 2c 6a 3d 61 35 28 6b 29 2c 63 6f 28 6a 2c 71 29 2c 63 3d 61 75 5b 6a 5d 2c 30 21 3d 63 26 26 28 6b 2d 3d 62 57 5b 6a 5d 2c 61 6f 28 6b 2c 63 29 29 29 2c 70 3e 3e 3d 31 3b 7d 77 68 69 6c 65 28 61 52 3e 68 29 3b 7d 63 6f 28 61 45 2c 62 29 3b 7d 2c 61 6d 3d 31 36 2c 61 6f 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 62 4e 3e 61 6d 2d 61 3f 28 61 46 7c 3d 62 3c 3c 62 4e 2c 61 67 28 61 46 29 2c 61 46 3d 62 3e 3e 61 6d 2d 62 4e 2c 62 4e 2b 3d 61 2d 61 6d Data Ascii: ck[g++]),d=255&bV[h++],0==(1&p)?co(d,b):(j=ci[d],co(j+ak+1,b),c=aK[j],0!=c&&(d-=aD[j],ao(d,c)),k=bI[m++],j=a5(k),co(j,q),c=au[j],0!=c&&(k-=bW[j],ao(k,c))),p>>=1;}while(aR>h);}co(aE,b);},am=16,ao=function(b,a){bN>am-a?(aF\|=b<<bN,ag(aF),aF=b>>am-bN,bN+=a-am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49871	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=a55197107cb3e922d2624bc588f9c497bb452282 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1389	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 410380 Cache-Control: public, max-age=2592000 Cache-Tag: 242478970273792402798397858869058529945,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:35 GMT Edge-Cache-Tag: 242478970273792402798397858869058529945,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "89d3eccc7fa224aa00717aef439265b8" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 08:15:15 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7978) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1451,owidth=400,oheight=400,obytes=75663,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100122-IAD X-Timer: S1709098015.204286,VS0,VE94 Content-Length: 1451 Connection: close
2024-03-03 23:26:35 UTC	1451	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7f 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 06 08 00 05 02 07 09 10 00 02 02 01 03 04 02 02 03 01 00 00 00 00 00 00 01 02 03 05 04 00 06 12 07 11 31 41 21 22 13 71 14 15 23 52 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T 1A!"q#R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49882	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	768	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1709508394066&yhlClientVer=3.53.44&yhlRnd=KD6ODXoGiKjsYXjx&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 2021 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	2021	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 43 51 48 35 57 55 43 45 44 4c 76 2d 34 5a 6f 37 4b 5f 51 4a 5a 73 63 4f 4f 56 54 7a 35 67 46 45 67 45 42 41 51 46 59 35 6d 58 75 5a 64 78 48 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 67 2d 45 55 35 37 34 36 6a 67 46 37 6a 30 47 4f 64 71 74 64 44 51 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 34 34 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.44%22%2C%22A_cn%22%3A%22ANALY
2024-03-03 23:26:35 UTC	816	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Sun, 03 Mar 2024 23:26:35 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCENUr9R3w6mMkJxFzP2Q0uxkFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAvYdHaR7r2J-LquY_SG3mhg; Expires=Tue, 4 Mar 2025 05:26:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49883	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	768	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1709508394101&yhlClientVer=3.53.44&yhlRnd=6NK7PNI9H6CJv1DT&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 2475 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	2475	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 43 51 48 35 57 55 43 45 44 4c 76 2d 34 5a 6f 37 4b 5f 51 4a 5a 73 63 4f 4f 56 54 7a 35 67 46 45 67 45 42 41 51 46 59 35 6d 58 75 5a 64 78 48 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 67 2d 45 55 35 37 34 36 6a 67 46 37 6a 30 47 4f 64 71 74 64 44 51 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 34 34 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.44%22%2C%22A_cn%22%3A%22ANALY
2024-03-03 23:26:35 UTC	816	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Sun, 03 Mar 2024 23:26:35 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEAdgAT3aOQwAj5_sZQItDgwFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAtXYFkTGqfrRcP0xv3eG-S0; Expires=Tue, 4 Mar 2025 05:26:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49884	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=f96c8983d15c2cd551b47caf27cd710ec77e61ad HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1131	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 790203 Cache-Control: public, max-age=2592000 Cache-Tag: 455011173027560281408501159700854956092,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21976-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 39 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:35 GMT Edge-Cache-Tag: 455011173027560281408501159700854956092,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "c5072f4f3a2588f7b3c1e237a3a1a4b3" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 08:25:55 GMT Server: ECAcc (nya/78E7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1414,owidth=400,oheight=400,obytes=12220,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21976-LGA X-Timer: S1708718192.168775,VS0,VE39 Content-Length: 1414 Connection: close
2024-03-03 23:26:35 UTC	1414	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7a 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 09 03 05 08 06 10 00 02 02 02 00 06 03 01 01 00 00 00 00 00 00 00 01 02 03 04 05 06 00 07 08 11 12 42 13 22 61 31 14 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 07 00 01 03 Data Ascii: JFIF&""&0-0>>T##)" ")1,,1>;>QQm zB"a1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49887	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	834	OUT	GET /p2?c1=2&c2=1000009&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508393487 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=17F9765074314b78a30f4d41709508394
2024-03-03 23:26:35 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:26:35 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 0b703f88574c6bad454306eb64dd50a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: Kiln5NJQbsDrOAdOMIdSAJu_4n22QA39OQhIzF-6S2VRlDD3buQOcA==
2024-03-03 23:26:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49886	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F93412d20-245e-11eb-bfbb-1ba7d4a515e3&client=76f99bdb8f78cd44cc0b&signature=36aa3331b61a3ab35c58aca2ff4e86ae1c72c40c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1456	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 369627 Cache-Control: public, max-age=2592000 Cache-Tag: 325516298952848880504883450815467548634,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21970-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 165 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:35 GMT Edge-Cache-Tag: 325516298952848880504883450815467548634,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "349dd56de100c0b4f39353e016e1778f" Expiration: expiry-date="Thu, 07 Mar 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 08 Sep 2023 15:55:23 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/797B) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,owidth=400,oheight=400,obytes=56855 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000062-IAD X-Timer: S1701362763.474650,VS0,VE1 Content-Length: 1456 Connection: close
2024-03-03 23:26:35 UTC	1456	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 84 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 09 00 04 08 06 10 00 01 04 01 02 06 01 04 03 00 00 00 00 00 00 00 02 01 03 04 05 06 00 11 07 08 12 22 42 61 31 13 15 21 23 14 51 72 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T "Ba1!#Qr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49885	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	614	OUT	GET /aa/templates/widget/bgImageStickyFooter/main.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	857	IN	HTTP/1.1 200 OK x-amz-id-2: mvkm1X1OJAYkofX54ERMRXeksyFMFlFPR/JxOXsvc3MVAlAv207bjtlG8B+sA7pZijZ6DE+3cqpw1pIZSG+5T+UHGLuNwRuJA2H/aYBVP8Q= x-amz-request-id: 2Y8N9C29518XH6RN Date: Sun, 03 Mar 2024 22:41:00 GMT Last-Modified: Wed, 20 Dec 2023 22:22:04 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 x-amz-version-id: DhGfdYfaoASz5ubmcLDJ.qnV0_uWaRLf Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 701 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "0207fb58bfd0359f586c29f0a0bc8a9b" Age: 2736 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:35 UTC	701	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 62 67 2d 69 6d 61 67 65 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 2e 63 74 61 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 69 6d 67 5b 73 72 63 3d 22 22 5d 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 64 69 76 23 43 6f 6e 74 65 6e 74 5f 52 65 67 69 6f 6e 20 7b 0a 09 74 Data Ascii: @charset "UTF-8";body {margin: 0;overflow: hidden;}.bg-image {width: 100%;vertical-align: middle;}.cta-container {display: inline-block;border: 1px solid #ccc;position: relative;}img[src=""] {display: none;}div#Content_Region {t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49892	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=0ce860f1e66ab33504feea849bdc56f9987a9c41 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1479	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 397603 Cache-Control: public, max-age=2592000 Cache-Tag: 457935326151757118911061591064955503832,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21968-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 126 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:35 GMT Edge-Cache-Tag: 457935326151757118911061591064955503832,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "e2ab0ea8c7fd54ba949c2fa993a91900" Expiration: expiry-date="Fri, 19 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 20 Jan 2024 15:13:42 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7917) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=802,owidth=400,oheight=400,obytes=158455,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21964-LGA X-Timer: S1705913992.363012,VS0,VE111 Content-Length: 802 Connection: close
2024-03-03 23:26:35 UTC	802	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 66 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 07 08 06 10 00 01 04 01 02 06 02 03 01 01 00 00 00 00 00 00 03 02 04 05 06 01 00 07 11 12 13 21 22 51 31 42 23 32 43 15 41 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 03 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T "f!"Q1B#2CA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49888	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fbe863210-34b6-11eb-9fb7-2187cff1c470&client=76f99bdb8f78cd44cc0b&signature=cd7d9f6e5bc98fb19e3761f13bce648092a434ce HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1145	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1896930 Cache-Control: public, max-age=2592000 Cache-Tag: 231379971849977839629518286442517686114,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000047-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 4a17c8bf91d4b46f39d4e811d548d9db cld_latency: 212 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:35 GMT Edge-Cache-Tag: 231379971849977839629518286442517686114,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "b6b5e2b6a90bfe4cd91c383b3d33ef41" Last-Modified: Fri, 09 Feb 2024 13:56:19 GMT Server: ECAcc (nya/7982) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1022,owidth=400,oheight=400,obytes=50047,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 4a17c8bf91d4b46f39d4e811d548d9db X-Served-By: cache-iad-kiad7000047-IAD X-Timer: S1707611468.991737,VS0,VE212 Content-Length: 1022 Connection: close
2024-03-03 23:26:35 UTC	1022	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7f 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 06 08 00 09 04 05 07 10 00 02 01 03 03 04 02 02 02 03 00 00 00 00 00 00 01 02 03 04 05 06 00 07 11 12 21 42 61 13 31 22 41 14 17 23 32 71 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd++&.%#%.&D5//5DNB>BN_UU_wqw !Ba1"A#2q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49894	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	564	OUT	GET /ss/rapid3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	828	IN	HTTP/1.1 200 OK x-amz-id-2: VqDEqHcAlc7Rd0+vsFCW7QHjCxqekOqXo8XiiMM7+ppMvmSQ4HqET/ZjRxy0kHzFyq5IPDJ4EEnSYHzSOgDaMw== x-amz-request-id: T0720N39Q3N8HG1Z Date: Sun, 03 Mar 2024 23:21:48 GMT Last-Modified: Tue, 20 Feb 2024 21:14:57 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=600 x-amz-version-id: lItJ.mPhLykhATkg2UgSYzkv5eHyktvQ Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 51009 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "11b2437f39bbc12e1202efbabad809f5" Age: 288 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 65 28 64 29 7b 76 61 72 20 66 3d 7b 41 31 53 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 61 31 73 22 7d 2c 42 3a 7b 6c 6f 67 3a 21 31 7d 2c 42 58 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 62 78 22 7d 2c 57 56 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 77 76 22 7d 2c 54 54 3a 7b 6c 6f 67 3a 21 31 7d 2c 44 3a 7b 6c 6f 67 3a 21 31 7d 2c 5f 67 61 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 67 61 22 7d 2c 79 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 79 78 22 7d 2c 72 78 78 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 5f 72 78 22 7d 2c 55 4e 41 55 54 48 49 44 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a 22 61 6f 6c 5f 75 6e 61 75 74 68 22 7d 2c 5f 75 74 64 3a 7b 6c 6f 67 3a 21 30 2c 6b 65 79 3a Data Ascii: !function(){function fe(d){var f={A1S:{log:!0,key:"_a1s"},B:{log:!1},BX:{log:!0,key:"bx"},WV:{log:!0,key:"_wv"},TT:{log:!1},D:{log:!1},_ga:{log:!0,key:"_ga"},yx:{log:!0,key:"_yx"},rxx:{log:!0,key:"_rx"},UNAUTHID:{log:!0,key:"aol_unauth"},_utd:{log:!0,key:
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 2d 31 21 3d 3d 6f 3f 28 6d 5b 74 5d 3d 6e 2c 61 3d 66 5b 74 5d 2c 64 26 26 61 26 26 61 2e 6c 6f 67 26 26 64 2e 73 65 74 28 61 2e 6b 65 79 2c 6e 29 29 3a 30 3c 73 2b 6c 26 26 28 73 2d 2d 2c 75 28 29 29 7d 65 2e 66 70 63 26 26 22 2e 79 61 68 6f 6f 2e 63 6f 6d 22 21 3d 3d 63 28 73 29 26 26 75 28 29 7d 2c 6e 75 6c 6c 29 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 52 61 70 69 64 20 57 61 73 20 50 72 65 76 65 6e 74 65 64 20 46 72 6f 6d 20 41 63 63 65 73 73 69 6e 67 20 43 6f 6f 6b 69 65 73 3a 22 2c 65 29 7d 69 66 28 65 26 26 2f Data Ascii: Rapid Was Prevented From Accessing Cookies:",e)}-1!==o?(m[t]=n,a=f[t],d&&a&&a.log&&d.set(a.key,n)):0<s+l&&(s--,u())}e.fpc&&".yahoo.com"!==c(s)&&u()},null);try{e=document.cookie}catch(e){console.warn("Rapid Was Prevented From Accessing Cookies:",e)}if(e&&/
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 66 66 65 63 74 69 76 65 5f 64 65 76 69 63 65 69 64 3a 65 5b 36 5d 2c 64 65 76 69 63 65 69 64 5f 74 79 70 65 3a 65 5b 37 5d 2c 6c 69 6d 69 74 5f 61 64 5f 74 72 61 63 6b 69 6e 67 3a 65 5b 38 5d 2c 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 3a 65 5b 39 5d 7d 7d 72 65 74 75 72 6e 7b 7d 7d 28 28 6e 65 77 20 66 65 29 2e 67 65 74 43 6f 6f 6b 69 65 42 79 4e 61 6d 65 28 22 57 56 22 29 29 2e 74 72 61 63 6b 69 6e 67 5f 61 75 74 68 5f 73 74 61 74 75 73 7c 7c 2d 31 29 7d 2c 59 41 48 4f 4f 2e 69 31 33 6e 2e 45 76 65 6e 74 54 79 70 65 73 3d 28 74 3d 22 72 69 63 68 76 69 65 77 22 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 67 65 74 59 51 4c 49 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 79 71 6c 69 64 7d 2c 67 65 74 45 76 65 Data Ascii: ffective_deviceid:e[6],deviceid_type:e[7],limit_ad_tracking:e[8],tracking_auth_status:e[9]}}return{}}((new fe).getCookieByName("WV")).tracking_auth_status\|\|-1)},YAHOO.i13n.EventTypes=(t="richview",e.prototype={getYQLID:function(){return this.yqlid},getEve
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 20 74 68 69 73 2e 6d 61 70 5b 65 5d 7d 2c 67 65 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 7d 2c 61 62 73 6f 72 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 79 2e 68 61 73 4f 77 6e 28 65 2c 74 29 26 26 74 68 69 73 2e 73 65 74 28 74 2c 65 5b 74 5d 29 7d 2c 61 62 73 6f 72 62 5f 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 79 2e 69 73 4f 62 6a 28 65 29 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 26 26 21 74 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 6e 29 7c 7c 79 2e 68 61 73 4f 77 6e 28 65 2c 6e 29 26 26 74 68 69 73 2e 73 65 74 28 6e 2c 65 5b 6e 5d 29 7d 2c 67 65 74 53 69 7a 65 3a 66 Data Ascii: this.map[e]},getAll:function(){return this.map},absorb:function(e){if(e&&y.isObj(e))for(var t in e)y.hasOwn(e,t)&&this.set(t,e[t])},absorb_filter:function(e,t){if(e&&y.isObj(e))for(var n in e)t&&!t.call(null,n)\|\|y.hasOwn(e,n)&&this.set(n,e[n])},getSize:f
2024-03-03 23:26:35 UTC	864	IN	Data Raw: 69 6f 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7c 7c 22 22 2c 69 3d 28 4e 28 65 2c 6e 29 2c 74 3d 74 26 26 79 2e 6e 6f 72 6d 28 22 22 2b 74 29 2c 65 2e 6f 76 65 72 72 69 64 65 7c 7c 7b 7d 29 2c 6f 3d 22 67 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 72 3d 22 75 64 63 2e 79 61 68 6f 6f 2e 63 6f 6d 22 2c 69 3d 28 21 30 21 3d 3d 65 2e 66 70 63 26 26 22 79 61 68 6f 6f 2e 63 6f 6d 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 7c 7c 28 6f 3d 22 33 70 2d 22 2b 6f 2c 72 3d 22 33 70 2d 22 2b 72 29 2c 7b 6f 76 65 72 72 69 64 65 3a 69 2c 76 65 72 73 69 6f 6e 3a 6d 65 2c 63 6f 6d 62 6f 4e 61 6d 65 3a 70 65 2c 6b 65 79 73 3a 61 2c 72 Data Ascii: ion&&document.location.href\|\|"",i=(N(e,n),t=t&&y.norm(""+t),e.override\|\|{}),o="geo.yahoo.com",r="udc.yahoo.com",i=(!0!==e.fpc&&"yahoo.com"===document.domain.split(".").slice(-2).join(".")\|\|(o="3p-"+o,r="3p-"+r),{override:i,version:me,comboName:pe,keys:a,r
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 78 74 5f 6c 69 6e 6b 5f 6c 65 6e 7c 7c 2d 31 2c 74 65 73 74 5f 69 64 3a 74 2c 79 71 6c 5f 68 6f 73 74 3a 65 2e 79 71 6c 5f 68 6f 73 74 7c 7c 72 2c 79 71 6c 5f 70 61 74 68 3a 65 2e 79 71 6c 5f 70 61 74 68 7c 7c 22 2f 76 32 2f 70 75 62 6c 69 63 2f 79 71 6c 22 2c 67 65 6f 5f 68 6f 73 74 3a 65 2e 67 65 6f 5f 68 6f 73 74 7c 7c 6f 2c 61 6e 6f 6e 79 6d 69 7a 65 64 3a 21 30 3d 3d 3d 65 2e 61 6e 6f 6e 79 6d 69 7a 65 64 2c 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 3a 65 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 7c 7c 31 65 34 2c 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 3a 65 2e 63 6f 6d 70 72 5f 74 69 6d 65 6f 75 74 7c 7c 37 30 30 2c 63 6f 6d 70 72 5f 6f 6e 3a 21 31 21 3d 3d 65 2e 63 6f 6d 70 72 5f 6f 6e 2c 63 6f 6d 70 72 5f 74 79 70 65 3a 65 2e 63 6f 6d 70 72 5f 74 79 Data Ascii: xt_link_len\|\|-1,test_id:t,yql_host:e.yql_host\|\|r,yql_path:e.yql_path\|\|"/v2/public/yql",geo_host:e.geo_host\|\|o,anonymized:!0===e.anonymized,click_timeout:e.click_timeout\|\|1e4,compr_timeout:e.compr_timeout\|\|700,compr_on:!1!==e.compr_on,compr_type:e.compr_ty
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 64 61 74 61 2d 72 61 70 69 64 2d 73 6b 69 70 22 2c 70 61 72 73 65 5f 64 6f 6d 3a 21 30 3d 3d 3d 65 2e 70 61 72 73 65 5f 64 6f 6d 2c 70 61 67 65 76 69 65 77 5f 6f 6e 5f 69 6e 69 74 3a 21 31 21 3d 3d 65 2e 70 61 67 65 76 69 65 77 5f 6f 6e 5f 69 6e 69 74 2c 70 65 72 66 5f 6e 61 76 69 67 61 74 69 6f 6e 74 69 6d 65 3a 65 2e 70 65 72 66 5f 6e 61 76 69 67 61 74 69 6f 6e 74 69 6d 65 7c 7c 30 2c 70 65 72 66 5f 63 6f 6d 6d 6f 6e 74 69 6d 65 3a 65 2e 70 65 72 66 5f 63 6f 6d 6d 6f 6e 74 69 6d 65 7c 7c 6e 75 6c 6c 2c 70 65 72 66 5f 75 73 65 72 74 69 6d 65 3a 65 2e 70 65 72 66 5f 75 73 65 72 74 69 6d 65 7c 7c 6e 75 6c 6c 2c 70 65 72 66 5f 72 65 73 6f 75 72 63 65 74 69 6d 65 3a 65 2e 70 65 72 66 5f 72 65 73 6f 75 72 63 65 74 69 6d 65 7c 7c 30 2c 73 61 6d 70 6c 65 3a 65 Data Ascii: data-rapid-skip",parse_dom:!0===e.parse_dom,pageview_on_init:!1!==e.pageview_on_init,perf_navigationtime:e.perf_navigationtime\|\|0,perf_commontime:e.perf_commontime\|\|null,perf_usertime:e.perf_usertime\|\|null,perf_resourcetime:e.perf_resourcetime\|\|0,sample:e
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 6e 3d 28 66 3d 6e 65 77 20 66 65 28 74 29 2c 74 2e 73 65 74 28 22 5f 70 6c 22 2c 31 29 2c 74 2e 73 65 74 28 22 41 5f 76 22 2c 41 2e 76 65 72 73 69 6f 6e 29 2c 74 2e 73 65 74 28 22 41 5f 63 6e 22 2c 41 2e 63 6f 6d 62 6f 4e 61 6d 65 29 2c 41 2e 67 65 74 52 65 66 65 72 72 65 72 28 29 29 3b 69 66 28 6e 26 26 21 31 21 3d 3d 65 26 26 74 2e 73 65 74 28 22 5f 52 22 2c 6e 29 2c 41 2e 74 65 73 74 5f 69 64 26 26 74 2e 73 65 74 28 22 74 65 73 74 22 2c 41 2e 74 65 73 74 5f 69 64 29 2c 41 2e 63 75 73 74 6f 6d 55 49 44 26 26 28 65 3d 41 2e 63 75 73 74 6f 6d 55 49 44 2c 74 2e 73 65 74 28 22 75 73 65 72 5f 69 64 22 2c 65 2e 69 64 29 2c 74 2e 73 65 74 28 22 75 73 65 72 5f 69 64 5f 74 79 70 65 22 2c 65 2e 74 79 70 65 29 29 2c 41 2e 61 63 63 6f 75 6e 74 47 55 49 44 26 26 74 Data Ascii: n=(f=new fe(t),t.set("_pl",1),t.set("A_v",A.version),t.set("A_cn",A.comboName),A.getReferrer());if(n&&!1!==e&&t.set("_R",n),A.test_id&&t.set("test",A.test_id),A.customUID&&(e=A.customUID,t.set("user_id",e.id),t.set("user_id_type",e.type)),A.accountGUID&&t
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 43 26 26 43 2e 73 74 61 72 74 5f 64 77 65 6c 6c 28 29 26 26 28 6e 2e 65 74 61 67 3d 22 64 77 65 6c 6c 2c 73 74 61 72 74 22 2c 6e 2e 75 73 65 72 67 65 6e 66 3d 31 2c 6e 2e 41 5f 70 72 65 74 73 3d 52 3f 52 2e 74 73 3a 6e 75 6c 6c 2c 6e 2e 41 5f 70 72 65 6d 73 3d 52 3f 52 2e 6d 73 3a 6e 75 6c 6c 29 2c 21 41 2e 79 71 6c 5f 65 6e 61 62 6c 65 64 7c 7c 6f 3f 28 6f 3d 6e 75 6c 6c 2c 63 28 64 28 74 3f 22 62 22 3a 22 70 22 2c 6f 3d 6e 3f 6e 65 77 20 6c 28 6e 29 3a 6f 29 29 29 3a 75 28 65 2c 74 2c 6e 2c 69 29 7d 2c 73 65 6e 64 52 61 70 69 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 74 26 26 43 26 26 43 2e 73 74 61 72 74 5f 64 77 65 6c 6c 28 29 26 26 28 6e 2e 65 74 61 67 3d 22 64 77 65 6c 6c 2c 73 74 61 72 74 22 2c 6e 2e 75 73 65 72 67 65 6e 66 3d 31 Data Ascii: C&&C.start_dwell()&&(n.etag="dwell,start",n.usergenf=1,n.A_prets=R?R.ts:null,n.A_prems=R?R.ms:null),!A.yql_enabled\|\|o?(o=null,c(d(t?"b":"p",o=n?new l(n):o))):u(e,t,n,i)},sendRapid:function(e,t,n,i){t&&C&&C.start_dwell()&&(n.etag="dwell,start",n.usergenf=1
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 29 3f 74 28 29 3a 28 6e 3d 74 2c 69 3d 6e 65 77 20 49 6d 61 67 65 2c 6f 3d 6e 75 6c 6c 2c 69 2e 6f 6e 6c 6f 61 64 3d 69 2e 6f 6e 61 62 6f 72 74 3d 69 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6f 29 2c 6e 2e 63 61 6c 6c 28 6e 75 6c 6c 29 7d 2c 69 2e 73 72 63 3d 65 2c 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 6f 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 28 6e 75 6c 6c 29 7d 2c 41 2e 63 6c 69 63 6b 5f 74 69 6d 65 6f 75 74 29 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 6e 75 6c 6c 7d 2c 31 65 37 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 72 65 74 Data Ascii: .sendBeacon(e)?t():(n=t,i=new Image,o=null,i.onload=i.onabort=i.onerror=function(){clearTimeout(o),n.call(null)},i.src=e,n&&"function"==typeof n&&(o=setTimeout(function(){n.call(null)},A.click_timeout)),setTimeout(function(){i=null},1e7))}function B(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49895	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	674	OUT	GET /aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	860	IN	HTTP/1.1 200 OK x-amz-id-2: g8vEF35ysIOvOx/HHDoxiN2qN1bZIp69SBlTex8q/og6y34gqzjEbE3NY824dU0CxAHyY+JHu7Sy4wdubWtANpUUSxVPyW2GEn7/3m+21fA= x-amz-request-id: S2MCETD8X8SP8H8P Date: Sun, 03 Mar 2024 23:19:47 GMT Last-Modified: Mon, 11 Sep 2023 19:32:23 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 x-amz-version-id: Ku5dtK7t_rO0fjr.MzhvSNwYCSW9LhxS Accept-Ranges: bytes Content-Type: image/jpeg Server: ATS Content-Length: 12180 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "74f7c49c7421783a21f05158e9de7cd7" Age: 409 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: ff d8 ff ee 00 21 41 64 6f 62 65 00 64 80 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 00 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 64 03 41 03 01 22 00 02 11 01 03 11 01 ff c4 00 e7 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 08 02 01 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 10 00 01 04 02 01 03 02 04 05 04 Data Ascii: !AdobeddA"
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 7f ff da 00 08 01 02 00 01 05 00 fc b5 a4 2f 7a e9 af 3a 6b ce 9a f3 a6 bc e9 af 3a 6b ce 9a f3 a6 bc e9 af 3a 6b ce 9a fe 95 0f fb 7c 4a d2 af 97 4a d6 fe 57 3f 9f d2 21 ff 00 6f 89 88 e2 51 ed 57 bd fb 67 77 bd 47 77 f7 3a c3 cb 71 31 9c d6 d6 c3 8a 5f b5 77 7a 65 0a 4a 31 cf e7 f4 88 e4 59 6d ae 55 8c e5 58 ce 55 8c e5 58 ce 55 8c e5 58 ce 55 8c e5 58 ce 55 8c e5 58 ce 55 8c 5e ff 00 55 7e 6d ff da 00 08 01 03 00 01 05 00 fc b5 b5 a7 59 d4 46 75 11 9d 44 67 51 19 d4 46 75 11 9d 44 67 51 19 d4 46 75 11 9d 44 7a 5f a7 d0 25 ff 00 5f 14 95 27 e5 de b7 af 95 bf e1 f4 89 7f d7 cd ca 6d 4b f7 28 d6 bd c3 5a d7 5d af da d3 cd 25 Data Ascii: 9TuSGU9TuSGU9TuSGU9TuSGU9TuSGU9TuSGU9T/z:k:k:k\|JJW?!oQWgwGw:q1_wzeJ1YmUXUXUXUXUXU^U~mYFuDgQFuDgQFuDz_%_'mK(Z]%
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 2d 7b 61 aa 98 d8 b8 ac e1 64 88 f6 c0 e3 29 c5 68 60 e9 04 55 29 12 80 13 6e 24 81 c0 99 8c a8 be d2 09 0d 3a 88 93 23 a6 10 c4 bc 66 13 23 e0 fc 45 7d af d3 b7 19 e1 6b e0 03 bc 70 c7 fa 69 39 65 04 e8 02 fe c9 77 9a 18 c3 76 0a b4 c2 66 ac 16 a9 b4 ca ca ab c0 29 df e5 3e 54 30 6a 31 6f 1c 11 26 42 b5 f2 af 4a da 7b 72 1f 0c e0 59 e9 54 38 0c 46 8f 00 7f b3 18 90 09 48 17 44 3d 36 0c 08 f3 da 53 22 58 4c a4 d7 9c 61 11 46 c9 dc f0 42 4c 8a 8d 20 73 72 65 44 ac fb 78 ec 56 df 6d 5b 03 fa ba 54 5b b3 5e 60 16 da 69 15 f7 a3 b6 e0 07 df 87 db 2d a5 f9 02 65 cb 9d 67 fd 64 45 74 36 d9 5e eb cf fb 71 c3 a4 c6 96 e8 97 1c 9a c0 69 fb 76 68 ef 77 32 48 19 8e 21 42 e6 c7 99 24 0c e5 a8 98 49 93 e1 12 1d a9 d0 e5 00 96 41 97 47 f5 24 11 83 25 f7 e4 83 eb 8c 74 Data Ascii: -{ad)h`U)n$:#f#E}kpi9ewvf)>T0j1o&BJ{rYT8FHD=6S"XLaFBL sreDxVm[T[^`i-egdEt6^qivhw2H!B$IAG$%t
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 08 e6 3e 57 68 b0 8b e4 c1 8a ae 56 2d 01 64 52 51 05 15 45 61 d9 2c 58 ec 2d 5b 4a eb 71 12 34 98 c0 ca e2 02 0c 8b 54 88 c5 9e 6f b0 b3 f7 0b f6 6e 56 df 1a d4 4d c8 b2 20 74 a8 8a f8 64 eb d4 af 97 e8 bf 2e e3 b6 db ad c0 ed ad 90 a7 93 42 90 29 9c fb 93 ce 6a 1e 1e d5 1e 5f 77 f9 ab f4 da 2d c0 5b 6b a6 dd d2 e0 a2 24 a3 3e 95 16 65 58 f0 fd 27 cd f3 17 f9 2d 9d 7a b6 b0 6e de 36 cb 84 c0 94 c1 94 11 09 1e a1 ab 83 83 fd bb b8 06 fd b4 0e e3 b2 6e 17 12 cf c4 80 05 92 30 73 90 ad e0 c8 9e 1f 9a 66 9f 33 ba d5 c5 83 2d 37 bf c0 ed 1f 41 5b 31 0b 86 1b 11 03 94 5b db db d0 4d 0e b2 bb b0 e4 e0 f6 1f c4 6e 77 1d ba e6 d8 9a a6 de 26 52 f5 9c 46 7c 3a 80 a3 21 f8 54 51 8f 69 ed 37 cb 89 b8 dc 76 42 22 43 59 48 d6 27 1a 36 b1 14 79 6e 15 9f fe a7 16 97 7b Data Ascii: >WhV-dRQEa,X-[Jq4TonVM td.B)j_w-[k$>eX'-zn6n0sf3-7A[1[Mnw&RF\|:!TQi7vB"CYH'6yn{
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 0d 4c f2 fb 1f 39 c1 be fb 31 b8 de 55 b8 6d 85 45 be e8 b1 81 29 aa 4e 16 66 bc a8 e5 90 01 7f 97 84 7b 18 0c d0 df d7 74 6a bc dc b8 4a 21 2b e3 d4 11 a4 46 aa 6a fe 1a bc b7 70 02 a4 c9 b2 03 03 2c 3e 92 29 88 eb 9f c2 2f cb 00 f7 ad 47 31 9c 09 98 8c e5 fa 72 29 c7 ae 23 eb 43 e5 63 d7 11 f5 a1 f2 b1 eb 88 fa d0 f9 58 f5 c4 7d 68 7c ac 7a e2 3e b4 3e 56 3d 71 1f 5a 1f 2b 1e b8 8f ad 0f 95 8f 5c 47 d6 87 ca c7 ae 23 eb 43 e5 63 d7 11 f5 a1 f2 b1 eb 88 fa d0 f9 58 f5 c4 7d 68 7c ac 7a e2 3e b4 3e 56 3d 71 1f 5a 1f 2b 1e b8 8f ad 0f 95 8f 5c 47 d6 87 ca c7 ae 23 eb 43 e5 63 d7 11 f5 a1 f2 b1 eb 88 fa d0 f9 58 f5 c4 7d 68 7c ac 7a e2 3e b4 3e 56 3d 71 1f 5a 1f 2b 1e b8 8f ad 0f 95 88 30 98 20 28 89 12 89 ce 26 27 de 98 9f ce b6 e9 e5 4a 50 04 c6 17 e8 11 Data Ascii: L91UmE)Nf{tjJ!+Fjp,>)/G1r)#CcX}h\|z>>V=qZ+\G#CcX}h\|z>>V=qZ+\G#CcX}h\|z>>V=qZ+0 (&'JP
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 80 ca 9a 94 2e da a1 2d 5e 6b cd 8e 36 9a b1 bb ef cd 62 8a d7 71 5a c1 20 32 52 c8 90 85 89 6a 89 00 af cd f6 18 7f 93 da 9b 66 b5 12 7b f1 5c 15 a4 89 1c c0 c3 85 c0 bf 11 9a 86 8e f8 6b d3 d5 c1 7b 2c 4d 44 df 4a d8 1a 90 47 a3 99 bc ee 47 8f 4f 57 a8 7e 87 1b 26 c4 17 09 4b f6 d6 28 ae 1f 99 e5 48 01 ac ca db 25 d6 6c e3 a9 7a 9a 38 db ef fd a5 bb b5 6d 96 ce 55 db 0d b0 98 93 0a 24 4c 58 d0 38 a5 64 66 a4 93 b9 94 72 f4 c3 cb c3 fd a3 f6 5a e2 dc 1f 7a b8 5d e5 ad dc 16 99 65 02 3a 8b 25 41 7a 30 fe 7c 18 dd 6f e2 e5 17 3e d2 ee d3 51 38 ea 1b 75 96 65 4d 34 ac 98 54 6a 19 f7 3e 8d 78 b5 75 8d d2 c3 da 9b 7b 8f 16 7b 81 11 50 66 53 cc 51 1e 99 b4 94 3d 8e 57 19 ea 7a 7c 2a 6e e0 06 e6 98 d6 85 4c 90 41 e5 c7 a6 46 2b 32 0a ba b5 07 e5 57 d0 0f ef b7 Data Ascii: .-^k6bqZ 2Rjf{\k{,MDJGGOW~&K(H%lz8mU$LX8dfrZz]e:%Az0\|o>Q8ueM4Tj>xu{{PfSQ=Wz\|*nLAF+2W
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 9a d4 df 5a 23 03 b6 4f a3 f3 98 b3 53 6d e0 2e 5f 7a 5b 7d ca e1 95 42 98 29 75 ee a0 32 88 d7 59 ad 0b d3 e0 47 2d fd 8e eb 17 56 74 53 e1 45 45 5e 79 d5 ab 07 3d 5c b8 68 d3 c6 e3 17 09 40 ed 7b 7c 41 31 fa c5 aa 23 0a f1 35 8d bf 86 d3 3a bb 7f 7b 0d 3f 87 8b 3f c4 2d 02 dd 3b 89 50 89 06 cb 0c 0e 40 de a5 dd 0e 92 c0 35 14 af 36 c6 00 3f 93 f3 b8 da 6c ed 16 b6 ae ee e8 85 cb 63 8d 10 70 bb 7b 9b 91 49 b1 28 b9 31 55 69 d6 e1 ed ab 47 bb 61 e2 ea e6 da cc 19 b6 ed 92 4b 69 ea 96 a9 68 46 57 73 6e 9d 23 d4 f0 f4 d0 3a 8e 06 bc d6 ce a7 06 ab 2d b6 c4 29 c1 6e 20 4e 73 9b 2b 8a 99 10 d5 a5 42 b4 dc 11 72 67 51 8c 3a 3a ea ef 7c de ee cd 1c bf 09 69 ab 2a bb ca 10 8b da ba bc af 58 d2 f3 9d 4c 2e ce d9 28 86 9a 41 e0 37 2e 95 4b 20 fa e1 6b 4a 1d ad a3 Data Ascii: Z#OSm._z[}B)u2YG-VtSEE^y=\h@{\|A1#5:{??-;P@56?lcp{I(1UiGaKihFWsn#:-)n Ns+BrgQ::\|i*XL.(A7.K kJ
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 2b d3 09 0d 4c b2 cf 3c fa 68 cc bf 4f 95 8b 1d a7 5b 99 b7 2e dc 53 73 44 65 a9 6d 00 20 c2 41 11 72 d9 47 31 5a 9d d9 f7 be 73 0e b5 dc 0d 39 99 2c d4 76 ea 90 a0 d4 42 f5 30 b5 58 fd 4a 5e b0 3c 14 dd 9d b9 c4 8c 40 f8 74 92 a7 3e 9a c8 c8 dc fe 12 e0 a1 7d 8f 48 cc 5d 5d 5c 40 dc b6 e8 c4 a2 4c 23 81 60 22 b5 a0 33 ab 84 4a 18 df a4 73 31 6c 56 77 50 ab 8b 13 77 85 32 5c 10 c2 1e 5a 85 60 e5 89 2e b4 06 4a d3 25 b1 2c fb ba 3e 1e a4 6e 3b 83 81 ef 5a c9 36 e0 a0 95 ad 60 72 26 e2 e3 63 8d 8e 76 92 aa 65 7d 45 f7 7d e6 a5 a5 83 2f ad ae 2c 6c d4 29 81 1b 53 5b 48 40 68 5f 3e 6f 9e a1 2a a9 af ee d8 d6 6c c1 28 ad d9 6c 69 98 e8 21 6c ac 8b 8b 3f 25 74 f5 71 b6 a8 ae 89 cd b0 ba 9b b6 bc c2 2b 79 4a ae 2d 32 3a 48 45 74 ae e0 38 fe 63 00 b9 b8 56 82 ae Data Ascii: +L<hO[.SsDem ArG1Zs9,vB0XJ^<@t>}H]]\@L#`"3Js1lVwPw2\Z`.J%,>n;Z6`r&cve}E}/,l)S[H@h_>o*l(li!l?%tq+yJ-2:HEt8cV
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 94 bc c4 84 b2 ae 60 06 08 b2 e9 1a 8c 46 ac 1c db 1c 0c 36 32 31 28 82 89 88 f7 b3 12 89 c2 9c 6f 99 62 33 d2 2c 86 32 ab ad ef 0f 10 e0 81 ae cd 67 23 32 10 23 11 98 cd 43 31 c3 e5 60 92 d6 45 07 96 a4 08 88 c9 65 e5 c8 0c 61 ca 49 d2 17 03 43 63 28 9c e3 a7 a3 8a 38 7a dd 9c 21 3a 93 0b b6 29 24 c4 44 44 8c cc d7 25 54 45 7d 6c 68 3d b9 ae 72 aa 20 60 6a cb cb a6 38 b0 ab 42 6c ca 12 55 ac 32 8e 89 e9 e9 ab 2a fb 58 87 5d 33 51 90 30 31 39 44 74 46 73 96 41 02 3d af 71 67 f4 0a fd c1 fc e5 2c 01 31 cf 3c 8a 22 63 3f ed c5 4b 50 01 7e 91 18 89 ff 00 77 e4 a9 8b 03 2f 7b 32 18 99 cb fb 71 30 b0 10 89 f7 e0 62 23 fb b1 11 7b 6a 9b a8 1f 7a 1c b1 66 5f 58 25 89 8b 2b 54 da c1 7b f0 95 8a f3 fa b1 1f c9 04 29 01 28 e9 89 81 88 98 ff 00 76 21 77 b6 ea b9 01 Data Ascii: `F621(ob3,2g#2#C1`EeaICc(8z!:)$DD%TE}lh=r `j8BlU2*X]3Q019DtFsA=qg,1<"c?KP~w/{2q0b#{jzf_X%+T{)(v!w
2024-03-03 23:26:35 UTC	480	IN	Data Raw: 6a e5 af 13 57 85 70 45 00 c6 5c a4 da 65 50 db 8e 8e a0 5b 05 e7 2d 5e 6b 0f b9 aa 16 76 51 17 6a 61 4d 23 04 8e 77 19 f4 d2 0c 10 d2 67 cd b3 1b 76 e3 a3 2f bb 5d cb 2f 6e ed f3 1a e6 6e 56 e5 98 24 8e 54 ad 5b 30 7a 92 ba cb b8 4e 9e 37 1b c8 b6 24 b1 ed b2 24 5a 19 05 64 16 2f 1b b2 32 a4 c9 0b 6d d7 1a d7 ce f4 3a da 78 f1 cc b4 3b 6b 51 b5 24 8c b4 82 b9 39 60 32 79 6a 36 d2 14 8f 0f 17 fe 1e a3 77 35 db 32 f1 37 76 aa b7 91 54 85 6b 34 1b da 3d fb 13 ca 7f 8b ec f5 0d 58 b0 bf 75 a4 b1 d6 e7 b8 ad d6 8a 20 22 10 bd ba f1 8a 7a 48 cd 6a 3a 41 2a a8 2b d4 d2 6f a4 0d 2c 36 e9 88 d3 3b cd d1 17 d3 6d 32 19 a9 4a 1b 7b 7c d9 22 64 a2 75 36 9a e7 a4 67 d7 c5 d5 f4 86 56 cd b2 b6 48 33 38 e9 62 db 7a c6 85 39 d7 c2 17 09 ec e3 77 64 5a b1 eb bd 30 ba 43 Data Ascii: jWpE\eP[-^kvQjaM#wgv/]/nnV$T[0zN7$$Zd/2m:x;kQ$9`2yj6w527vTk4=Xu "zHj:A*+o,6;m2J{\|"du6gVH38bz9wdZ0C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49891	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-12%2Ff32d3a20-a01c-11ee-a4fb-2a31dca05260&client=76f99bdb8f78cd44cc0b&signature=d701f74e6d8efcc3b78ab05548e3fc9c7dc32afa HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 883537 Cache-Control: public, max-age=2592000 Cache-Tag: 407731474252756321647035230946744503184,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100160-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 118 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:35 GMT Edge-Cache-Tag: 407731474252756321647035230946744503184,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "94d97e37d6fae7ad498a7a43b6ee966d" Expiration: expiry-date="Sat, 22 Jun 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 24 Dec 2023 18:00:01 GMT Server: ECAcc (nya/79AD) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=693,owidth=400,oheight=400,obytes=6049,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21935-LGA X-Timer: S1703440801.873803,VS0,VE34 Content-Length: 693 Connection: close
2024-03-03 23:26:35 UTC	693	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 79 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 08 00 01 04 05 07 09 10 00 01 04 01 03 03 01 05 09 00 00 00 00 00 00 00 02 01 03 04 05 11 00 06 12 07 14 31 21 13 15 17 22 51 23 55 56 71 83 93 95 d1 d2 01 00 02 03 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd %%-))-969KKd "y1!"Q#UVq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49890	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	643	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	713	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:35 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58784/sync?format=json&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&verify=true Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49893	23.40.179.72	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	674	OUT	GET /ss/nes/dfs?itype=YHB&type=1&cid=8YHB8F956&dn=www.aol.com&cc=US&ugd=desktop&callback=window.advBidxc.pf_rtd&algo=exploitation HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:35 UTC	286	IN	HTTP/1.1 200 OK Content-Type: text/javascript timing-allow-origin: * Cache-Control: max-age=1800 Date: Sun, 03 Mar 2024 23:26:35 GMT Content-Length: 8663 Connection: close Strict-Transport-Security: max-age=604800 Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:35 UTC	8663	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 70 66 5f 72 74 64 28 7b 22 73 63 68 65 6d 61 22 3a 7b 22 64 65 6c 69 6d 69 74 65 72 22 3a 22 7c 22 2c 22 66 69 65 6c 64 73 22 3a 5b 22 63 72 69 64 22 2c 22 64 66 70 44 69 76 22 2c 22 70 76 69 64 22 5d 7d 2c 22 76 61 6c 75 65 73 22 3a 7b 22 32 36 32 32 38 33 37 34 35 7c 2a 7c 2a 22 3a 30 2e 33 35 2c 22 31 39 37 36 37 30 38 31 32 7c 2a 7c 2a 22 3a 30 2e 33 35 2c 22 35 38 36 31 36 37 30 38 39 7c 2a 7c 2a 22 3a 30 2e 33 35 2c 22 31 30 32 36 31 35 38 35 38 7c 2a 7c 32 35 33 31 30 22 3a 30 2e 31 35 2c 22 38 33 39 35 33 38 34 37 38 7c 2a 7c 32 35 30 31 34 22 3a 30 2e 33 35 2c 22 31 35 35 32 36 32 32 32 30 7c 2a 7c 2a 22 3a 30 2e 33 35 2c 22 31 35 35 32 36 32 32 32 30 7c 2a 7c 32 35 30 31 34 22 3a 30 2e 33 35 2c 22 Data Ascii: window.advBidxc.pf_rtd({"schema":{"delimiter":"\|","fields":["crid","dfpDiv","pvid"]},"values":{"262283745\|\|":0.35,"197670812\|\|":0.35,"586167089\|\|":0.35,"102615858\|\|25310":0.15,"839538478\|\|25014":0.35,"155262220\|\|":0.35,"155262220\|*\|25014":0.35,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49896	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	536	OUT	GET /rx/ev/lib/comscore-6.3.5-min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	856	IN	HTTP/1.1 200 OK x-amz-id-2: 4Ci879cx8qzs5wOPbcelTi+HiaKOH17KhulSctUlLmHYrrZpD4Ql0iC+pU2tL1OZSLYFeaD+Nis= x-amz-request-id: G5JYZYPVDWTNGNEE Date: Mon, 26 Feb 2024 17:36:37 GMT Last-Modified: Wed, 18 Oct 2023 19:33:03 GMT ETag: "d4437107af61d80fd90f57a0808fa483" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: .TVKYLW2EUyd_rP7dLtapLjw7X6rARlN Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 159581 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 539400 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 6e 29 3a 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 6e 73 5f 3d 6e 28 29 7d 28 66 75 6e 63 74 Data Ascii: !function(n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define([],n):("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).ns_=n()}(funct
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 67 49 6e 74 65 72 76 61 6c 28 29 3a 2d 31 29 2c 72 26 26 28 63 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 29 2c 6e 2e 69 28 29 29 29 3a 28 6f 28 2d 31 29 2c 73 28 29 29 7d 2c 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3c 30 26 26 6f 28 2b 6e 65 77 20 44 61 74 65 2b 31 65 33 2a 74 2e 67 65 74 43 61 63 68 65 46 6c 75 73 68 69 6e 67 49 6e 74 65 72 76 61 6c 28 29 29 2c 72 3d 63 2e 73 65 74 54 69 6d 65 6f 75 74 28 75 2c 69 2d 2b 6e 65 77 20 44 61 74 65 29 7d 7d 29 7d 7d 2c 7b 32 34 3a 32 34 2c 32 36 3a 32 36 2c 33 36 3a 33 36 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 69 3d 6e 28 35 29 2c 72 3d 6e 28 38 29 2e 54 72 61 6e 73 6d 69 73 73 69 6f 6e 4d 6f 64 65 2c 6f 3d 6e 28 38 29 2e 75 2c 75 3d 6e 65 77 20 69 2c 73 3d 7b 54 72 Data Ascii: gInterval():-1),r&&(c.clearTimeout(r),n.i())):(o(-1),s())},i:function(){i<0&&o(+new Date+1e3*t.getCacheFlushingInterval()),r=c.setTimeout(u,i-+new Date)}})}},{24:24,26:26,36:36}],2:[function(n,t,e){var i=n(5),r=n(8).TransmissionMode,o=n(8).u,u=new i,s={Tr
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 6d 65 28 29 7d 2c 73 65 74 41 70 70 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 75 2e 73 65 74 41 70 70 4e 61 6d 65 28 6e 29 7d 2c 67 65 74 41 70 70 56 65 72 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 67 65 74 41 70 70 56 65 72 73 69 6f 6e 28 29 7d 2c 73 65 74 41 70 70 56 65 72 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 75 2e 73 65 74 41 70 70 56 65 72 73 69 6f 6e 28 6e 29 7d 2c 67 65 74 47 65 6e 65 73 69 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 67 65 74 47 65 6e 65 73 69 73 28 29 7d 2c 67 65 74 56 69 73 69 74 6f 72 49 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 67 65 74 56 69 73 69 74 6f 72 49 64 28 29 7d 2c 73 65 74 56 69 73 69 74 6f 72 49 64 3a 66 75 6e 63 74 Data Ascii: me()},setAppName:function(n){u.setAppName(n)},getAppVersion:function(){return u.getAppVersion()},setAppVersion:function(n){u.setAppVersion(n)},getGenesis:function(){return u.getGenesis()},getVisitorID:function(){return u.getVisitorId()},setVisitorId:funct
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 7d 2c 73 65 74 43 61 63 68 65 4d 61 78 4d 65 61 73 75 72 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 75 2e 73 65 74 43 61 63 68 65 4d 61 78 4d 65 61 73 75 72 65 6d 65 6e 74 73 28 6e 29 7d 2c 67 65 74 43 61 63 68 65 4d 61 78 4d 65 61 73 75 72 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 67 65 74 43 61 63 68 65 4d 61 78 4d 65 61 73 75 72 65 6d 65 6e 74 73 28 29 7d 2c 73 65 74 43 61 63 68 65 4d 61 78 42 61 74 63 68 46 69 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 75 2e 73 65 74 43 61 63 68 65 4d 61 78 42 61 74 63 68 46 69 6c 65 73 28 6e 29 7d 2c 67 65 74 43 61 63 68 65 4d 61 78 42 61 74 63 68 46 69 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 67 65 74 43 61 63 68 65 4d 61 78 42 Data Ascii: },setCacheMaxMeasurements:function(n){u.setCacheMaxMeasurements(n)},getCacheMaxMeasurements:function(){return u.getCacheMaxMeasurements()},setCacheMaxBatchFiles:function(n){u.setCacheMaxBatchFiles(n)},getCacheMaxBatchFiles:function(){return u.getCacheMaxB
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 74 66 6f 72 6d 41 50 49 28 6e 29 7d 2c 73 65 74 4f 66 66 6c 69 6e 65 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 75 2e 73 65 74 4f 66 66 6c 69 6e 65 55 52 4c 28 6e 29 7d 2c 63 6c 65 61 72 49 6e 74 65 72 6e 61 6c 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 63 6c 65 61 72 49 6e 74 65 72 6e 61 6c 44 61 74 61 28 29 7d 2c 63 61 63 68 65 48 74 74 70 52 65 64 69 72 65 63 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 63 61 63 68 65 48 74 74 70 52 65 64 69 72 65 63 74 73 28 29 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 73 7d 2c 7b 35 3a 35 2c 38 3a 38 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 70 3d 6e 28 32 34 29 2c 76 3d 6e 28 33 36 29 2c 64 3d 6e 28 38 29 2e 54 72 61 6e 73 6d 69 73 73 69 6f 6e 4d 6f 64 65 3b 74 2e Data Ascii: tformAPI(n)},setOfflineURL:function(n){u.setOfflineURL(n)},clearInternalData:function(){u.clearInternalData()},cacheHttpRedirects:function(){u.cacheHttpRedirects()}};t.exports=s},{5:5,8:8}],3:[function(n,t,e){var p=n(24),v=n(36),d=n(8).TransmissionMode;t.
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 22 2c 22 6e 73 5f 61 70 5f 65 63 22 2c 22 6e 73 5f 61 70 5f 65 76 22 2c 22 6e 73 5f 61 70 5f 64 65 76 69 63 65 22 2c 22 6e 73 5f 61 70 5f 69 64 22 2c 22 6e 73 5f 61 70 5f 63 73 66 22 2c 22 6e 73 5f 61 70 5f 62 69 22 2c 22 6e 73 5f 61 70 5f 70 66 6d 22 2c 22 6e 73 5f 61 70 5f 70 66 76 22 2c 22 6e 73 5f 61 70 5f 76 65 72 22 2c 22 63 61 5f 6e 73 5f 61 70 5f 76 65 72 22 2c 22 63 62 5f 6e 73 5f 61 70 5f 76 65 72 22 2c 22 63 63 5f 6e 73 5f 61 70 5f 76 65 72 22 2c 22 63 64 5f 6e 73 5f 61 70 5f 76 65 72 22 2c 22 6e 73 5f 61 70 5f 73 76 22 2c 22 6e 73 5f 61 70 5f 62 76 22 2c 22 6e 73 5f 61 70 5f 63 76 22 2c 22 6e 73 5f 61 70 5f 73 6d 76 22 2c 22 6e 73 5f 74 79 70 65 22 2c 22 63 61 5f 6e 73 5f 74 79 70 65 22 2c 22 63 62 5f 6e 73 5f 74 79 70 65 22 2c 22 63 63 5f 6e Data Ascii: ","ns_ap_ec","ns_ap_ev","ns_ap_device","ns_ap_id","ns_ap_csf","ns_ap_bi","ns_ap_pfm","ns_ap_pfv","ns_ap_ver","ca_ns_ap_ver","cb_ns_ap_ver","cc_ns_ap_ver","cd_ns_ap_ver","ns_ap_sv","ns_ap_bv","ns_ap_cv","ns_ap_smv","ns_type","ca_ns_type","cb_ns_type","cc_n
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 61 74 65 64 22 2c 22 6e 73 5f 61 70 5f 6c 61 73 74 72 75 6e 22 2c 22 6e 73 5f 61 70 5f 63 73 22 2c 22 6e 73 5f 61 70 5f 72 75 6e 73 22 2c 22 6e 73 5f 61 70 5f 75 73 61 67 65 22 2c 22 6e 73 5f 61 70 5f 66 67 22 2c 22 6e 73 5f 61 70 5f 66 74 22 2c 22 6e 73 5f 61 70 5f 64 66 74 22 2c 22 6e 73 5f 61 70 5f 62 74 22 2c 22 6e 73 5f 61 70 5f 64 62 74 22 2c 22 6e 73 5f 61 70 5f 64 69 74 22 2c 22 6e 73 5f 61 70 5f 61 73 22 2c 22 6e 73 5f 61 70 5f 64 61 73 22 2c 22 6e 73 5f 61 70 5f 69 74 22 2c 22 6e 73 5f 61 70 5f 75 63 22 2c 22 6e 73 5f 61 70 5f 61 75 73 22 2c 22 6e 73 5f 61 70 5f 64 61 75 73 22 2c 22 6e 73 5f 61 70 5f 75 73 22 2c 22 6e 73 5f 61 70 5f 64 75 73 22 2c 22 6e 73 5f 61 70 5f 75 74 22 2c 22 6e 73 5f 61 70 5f 6f 63 22 2c 22 6e 73 5f 61 70 5f 75 78 63 22 Data Ascii: ated","ns_ap_lastrun","ns_ap_cs","ns_ap_runs","ns_ap_usage","ns_ap_fg","ns_ap_ft","ns_ap_dft","ns_ap_bt","ns_ap_dbt","ns_ap_dit","ns_ap_as","ns_ap_das","ns_ap_it","ns_ap_uc","ns_ap_aus","ns_ap_daus","ns_ap_us","ns_ap_dus","ns_ap_ut","ns_ap_oc","ns_ap_uxc"
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 73 74 5f 61 6d 69 22 2c 22 6e 73 5f 73 74 5f 61 6d 70 22 2c 22 6e 73 5f 73 74 5f 61 6d 74 22 2c 22 6e 73 5f 73 74 5f 61 6d 73 22 2c 22 6e 73 5f 61 70 5f 69 31 22 2c 22 6e 73 5f 61 70 5f 69 32 22 2c 22 6e 73 5f 61 70 5f 69 33 22 2c 22 6e 73 5f 61 70 5f 69 34 22 2c 22 6e 73 5f 61 70 5f 69 35 22 2c 22 6e 73 5f 61 70 5f 69 36 22 2c 22 6e 73 5f 61 70 5f 72 65 66 65 72 72 65 72 22 2c 22 6e 73 5f 63 6c 69 64 22 2c 22 6e 73 5f 63 61 6d 70 61 69 67 6e 22 2c 22 6e 73 5f 73 6f 75 72 63 65 22 2c 22 6e 73 5f 6d 63 68 61 6e 6e 65 6c 22 2c 22 6e 73 5f 6c 69 6e 6b 6e 61 6d 65 22 2c 22 6e 73 5f 66 65 65 22 2c 22 67 63 6c 69 64 22 2c 22 75 74 6d 5f 63 61 6d 70 61 69 67 6e 22 2c 22 75 74 6d 5f 73 6f 75 72 63 65 22 2c 22 75 74 6d 5f 6d 65 64 69 75 6d 22 2c 22 75 74 6d 5f 74 Data Ascii: st_ami","ns_st_amp","ns_st_amt","ns_st_ams","ns_ap_i1","ns_ap_i2","ns_ap_i3","ns_ap_i4","ns_ap_i5","ns_ap_i6","ns_ap_referrer","ns_clid","ns_campaign","ns_source","ns_mchannel","ns_linkname","ns_fee","gclid","utm_campaign","utm_source","utm_medium","utm_t
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 6b 67 72 6f 75 6e 64 54 69 6d 65 22 2c 6e 74 3d 22 61 63 63 75 6d 75 6c 61 74 65 64 49 6e 61 63 74 69 76 65 54 69 6d 65 22 2c 74 74 3d 22 74 6f 74 61 6c 46 6f 72 65 67 72 6f 75 6e 64 54 69 6d 65 22 2c 65 74 3d 22 74 6f 74 61 6c 42 61 63 6b 67 72 6f 75 6e 64 54 69 6d 65 22 2c 69 74 3d 22 74 6f 74 61 6c 49 6e 61 63 74 69 76 65 54 69 6d 65 22 2c 72 74 3d 22 61 63 63 75 6d 75 6c 61 74 65 64 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 73 73 69 6f 6e 54 69 6d 65 22 2c 6f 74 3d 22 61 63 63 75 6d 75 6c 61 74 65 64 41 63 74 69 76 65 55 73 65 72 53 65 73 73 69 6f 6e 54 69 6d 65 22 2c 75 74 3d 22 61 63 63 75 6d 75 6c 61 74 65 64 55 73 65 72 53 65 73 73 69 6f 6e 54 69 6d 65 22 2c 73 74 3d 22 61 63 74 69 76 65 55 73 65 72 53 65 73 73 69 6f 6e 43 6f 75 6e 74 22 2c 61 74 3d Data Ascii: kgroundTime",nt="accumulatedInactiveTime",tt="totalForegroundTime",et="totalBackgroundTime",it="totalInactiveTime",rt="accumulatedApplicationSessionTime",ot="accumulatedActiveUserSessionTime",ut="accumulatedUserSessionTime",st="activeUserSessionCount",at=
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 70 56 65 72 73 69 6f 6e 28 29 2c 45 3d 6b 6e 2e 6f 28 72 2e 67 65 74 28 76 74 29 2c 30 29 2c 28 6b 3d 6b 6e 2e 6f 28 72 2e 67 65 74 28 70 74 29 2c 2d 31 29 29 3c 30 3f 28 6b 3d 2b 6e 65 77 20 44 61 74 65 2c 45 3d 30 2c 57 3d 6b 2c 52 2b 2b 29 3a 28 5f 6e 28 29 7c 7c 28 4e 2b 3d 2b 6e 65 77 20 44 61 74 65 2d 46 2c 72 2e 73 65 74 28 72 74 2c 4e 2b 22 22 29 29 2c 57 3d 6b 29 2c 28 64 3d 6b 6e 2e 6f 28 72 2e 67 65 74 28 68 74 29 2c 2d 31 29 29 3c 30 3f 28 76 3d 64 3d 6b 2c 68 26 26 68 21 3d 6a 6e 26 26 72 2e 73 65 74 28 5f 74 2c 68 2b 22 22 29 2c 72 2e 73 65 74 28 68 74 2c 64 2b 22 22 29 2c 72 2e 73 65 74 28 64 74 2c 76 2b 22 22 29 29 3a 6e 6e 2e 73 65 74 41 70 70 56 65 72 73 69 6f 6e 28 68 29 2c 72 2e 73 65 74 28 70 74 2c 6b 2b 22 22 29 2c 72 2e 73 65 74 28 Data Ascii: pVersion(),E=kn.o(r.get(vt),0),(k=kn.o(r.get(pt),-1))<0?(k=+new Date,E=0,W=k,R++):(_n()\|\|(N+=+new Date-F,r.set(rt,N+"")),W=k),(d=kn.o(r.get(ht),-1))<0?(v=d=k,h&&h!=jn&&r.set(_t,h+""),r.set(ht,d+""),r.set(dt,v+"")):nn.setAppVersion(h),r.set(pt,k+""),r.set(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49898	34.95.69.49	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	586	OUT	POST /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Content-Length: 491 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	491	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 45 76 65 6e 74 73 22 2c 22 66 22 3a 22 70 61 67 65 76 69 65 77 22 2c 22 6a 73 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 30 39 35 30 38 33 39 33 39 31 32 2c 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 33 2c 22 61 63 74 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 22 3a 22 39 36 61 30 37 61 61 61 2d 62 62 38 66 2d 30 31 61 37 2d 35 35 34 62 2d 31 34 32 61 36 30 36 31 36 31 61 34 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 32 36 2e 35 2d 61 71 2d 79 61 68 6f 6f 73 63 6c 22 2c 22 74 6f 70 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 6a 73 74 7a 6f 66 66 73 65 74 Data Ascii: {"action_name":"Events","f":"pageview","jstimestamp":1709508393912,"elapsed_time":23,"action_group_id":"96a07aaa-bb8f-01a7-554b-142a606161a4","version":"4.26.5-aq-yahooscl","topLocation":"https://www.aol.com/","referrer":"https://www.aol.com/","jstzoffset
2024-03-03 23:26:35 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Sun, 03 Mar 2024 23:26:35 GMT Content-Type: application/octet-stream Content-Length: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Expose-Headers: Content-Length,Content-Range Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49897	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	952	OUT	GET /checksync.php?cid=8YHB8F956&cs=1&cv=37&hb=1&vsSync=1&prvid=25014%2C25082%2C25113%2C25307%2C25308%2C25309%2C25310&refUrl=&gdpr=0&gdprconsent=1&gdprstring=&usp_status=0&usp_consent=1&uspstring=1YNN&axid_e=&coppa=0&ckdel=0&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:35 UTC	368	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 21388 Content-Type: text/html; charset=UTF-8 x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Expires: Sun, 03 Mar 2024 23:26:35 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:35 GMT Connection: close
2024-03-03 23:26:35 UTC	214	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 32 36 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 31 35 35 35 32 30 30 30 2c 22 63 63 22 3a 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"
2024-03-03 23:26:35 UTC	16384	IN	Data Raw: 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 65 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 31 22 2c 22 6c 6f 6f 6b 75 70 22 3a 5b 5d 2c 22 75 73 73 79 6e 63 6d 61 70 22 3a 7b 22 64 69 73 61 62 6c 65 22 3a 5b 5d 7d 2c 22 68 61 73 53 61 6d 65 53 69 74 65 53 75 70 70 6f 72 74 22 3a 22 31 22 2c 22 63 73 44 65 6c 53 53 22 3a 74 72 75 65 2c 22 62 61 74 63 68 22 3a 7b 22 67 47 72 6f 75 70 73 22 3a 5b 22 61 70 78 22 2c 22 63 73 6d 22 2c 22 70 70 74 22 2c 22 72 62 63 6e 22 2c 22 73 6f 6e 22 2c 22 62 64 74 22 2c 22 63 6f 6e 22 2c 22 6f 70 78 22 2c 22 74 6c 78 22 2c 22 6d 6d 61 22 2c 22 63 31 78 22 2c 22 79 73 22 2c 22 73 6f 76 22 2c 22 66 62 22 2c 22 72 31 22 2c 22 67 22 2c 22 70 62 22 2c 22 64 78 75 22 2c 22 72 6b 74 22 2c 22 74 72 78 22 2c 22 77 64 73 22 Data Ascii: US","zone":"e","coc":"NA"},"cs":"1","lookup":[],"ussyncmap":{"disable":[]},"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds"
2024-03-03 23:26:35 UTC	4790	IN	Data Raw: 69 64 45 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 72 2c 6e 29 7b 76 61 72 20 61 3d 74 2e 72 65 71 75 69 72 65 28 22 72 75 62 69 63 6f 6e 22 29 3b 72 65 74 75 72 6e 22 72 62 63 6e 22 3d 3d 3d 6e 26 26 61 26 26 65 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 2e 73 65 74 43 75 73 74 6f 6d 53 63 72 69 70 74 50 61 72 61 6d 73 29 26 26 28 72 3d 61 2e 73 65 74 43 75 73 74 6f 6d 53 63 72 69 70 74 50 61 72 61 6d 73 28 72 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 61 2c 69 3d 74 2e 67 65 74 41 41 58 43 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 28 29 7c 7c 22 22 2c 6f 3d 50 2e 73 65 70 43 73 3b 65 2e 65 61 63 68 28 43 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 2e 68 61 73 56 61 6c 69 64 50 72 6f 76 69 64 65 72 43 6f 6f 6b 69 65 28 74 29 29 Data Ascii: idE()))}function g(r,n){var a=t.require("rubicon");return"rbcn"===n&&a&&e.isFunction(a.setCustomScriptParams)&&(r=a.setCustomScriptParams(r)),r}function f(){var a,i=t.getAAXCookieSyncUrl()\|\|"",o=P.sepCs;e.each(C,function(t){if(n.hasValidProviderCookie(t))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49900	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	532	OUT	GET /aaq/pv/perf-vitals_2.1.1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	885	IN	HTTP/1.1 200 OK x-amz-id-2: RMONtPZ5bAK7NLP9lxYqyNvhPdj/2tx9BVsVq8oXVowHgebdOPLQ6nu8lBP8561aforrURPuV9a8o5i0REueGCk1SXAKq/85UTAIAhmXSOo= x-amz-request-id: 86DFJCAS1JN2YQJC Date: Wed, 21 Feb 2024 15:11:41 GMT Last-Modified: Mon, 29 Nov 2021 20:22:54 GMT ETag: "857d1a718f7aeb43b03b79b7cf3cb0da" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ahrqQUWWaJKYq5NcMeFNfSCgBitYSCQI Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4628 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 980095 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 32 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 7d 7d 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 2e 73 75 70 70 6f 72 74 65 64 45 6e 74 72 79 54 79 70 65 73 2e 69 6e 63 6c 75 Data Ascii: !function(){"use strict";var e=function(e,t){return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12)}},t=function(e,t){try{if(PerformanceObserver.supportedEntryTypes.inclu
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 75 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 63 2e 76 61 6c 75 65 3d 65 2e 73 74 61 72 74 54 69 6d 65 2c 63 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6f 28 21 30 29 29 29 7d 2c 66 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 5b 30 5d 2c 70 3d 66 3f 6e 75 6c 6c 3a 74 28 22 70 61 69 6e 74 22 2c 64 29 3b 28 66 7c 7c 70 29 26 26 28 6f 3d 61 28 6e 2c 63 2c 72 29 2c 66 26 26 64 28 66 29 2c 69 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: t(),e.startTime<u.firstHiddenTime&&(c.value=e.startTime,c.entries.push(e),o(!0)))},f=window.performance&&performance.getEntriesByName&&performance.getEntriesByName("first-contentful-paint")[0],p=f?null:t("paint",d);(f\|\|p)&&(o=a(n,c,r),f&&d(f),i((function(
2024-03-03 23:26:35 UTC	1300	IN	Data Raw: 4f 77 6e 50 72 6f 70 65 72 74 79 28 79 29 26 26 28 70 5b 79 5d 3d 22 22 29 3b 72 2e 73 65 74 52 61 70 69 64 41 74 74 72 69 62 75 74 65 28 7b 73 70 61 63 65 69 64 3a 6d 7d 29 2c 72 2e 62 65 61 63 6f 6e 50 65 72 66 6f 72 6d 61 6e 63 65 44 61 74 61 28 7b 70 65 72 66 5f 75 73 65 72 74 69 6d 65 3a 7b 75 74 6d 3a 67 7d 7d 2c 70 29 2c 72 2e 73 65 74 52 61 70 69 64 41 74 74 72 69 62 75 74 65 28 7b 73 70 61 63 65 69 64 3a 77 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 6c 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 3f 28 68 28 29 2c 77 28 65 29 29 3a 67 2e 70 75 73 68 28 65 29 7d 75 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 76 61 72 20 75 2c 63 3d 73 28 29 2c 64 3d 65 28 22 46 49 44 22 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 Data Ascii: OwnProperty(y)&&(p[y]="");r.setRapidAttribute({spaceid:m}),r.beaconPerformanceData({perf_usertime:{utm:g}},p),r.setRapidAttribute({spaceid:w})}}function y(e){l.rapidInstance?(h(),w(e)):g.push(e)}u(y),function(r,o){var u,c=s(),d=e("FID"),f=function(e){e.st
2024-03-03 23:26:35 UTC	728	IN	Data Raw: 5b 6e 5d 26 26 28 61 5b 6e 5d 3d 4d 61 74 68 2e 6d 61 78 28 72 5b 6e 5d 2d 72 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 30 29 29 3b 76 61 72 20 6f 3d 61 5b 6e 5d 3b 69 66 28 6f 3c 30 7c 7c 6f 3e 69 2e 6e 6f 77 28 29 29 72 65 74 75 72 6e 3b 65 28 7b 64 65 6c 74 61 3a 6f 2c 65 6e 74 72 69 65 73 3a 5b 61 5d 2c 69 64 3a 74 2c 6e 61 6d 65 3a 74 2c 76 61 6c 75 65 3a 6f 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 79 2c 22 54 54 46 42 22 2c 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 22 29 2c 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 68 29 2c 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 Data Ascii: [n]&&(a[n]=Math.max(r[n]-r.navigationStart,0));var o=a[n];if(o<0\|\|o>i.now())return;e({delta:o,entries:[a],id:t,name:t,value:o})}catch(e){}}(y,"TTFB","responseStart"),l.addEventListener&&(l.addEventListener("DOMContentLoaded",h),l.addEventListener("pagehid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49899	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F05264ae0-2b91-11eb-b77b-425c560e375a&client=76f99bdb8f78cd44cc0b&signature=105afc7a48dc8079c60c5060c13a01867cea77cc HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:35 UTC	1101	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 708026 Cache-Control: public, max-age=2592000 Cache-Tag: 363170647456862273370535470905028584055,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21962-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 77 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:35 GMT Edge-Cache-Tag: 363170647456862273370535470905028584055,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "92071bfe197dadc7d6e4cbf61d9f1fd3" Expiration: expiry-date="Thu, 29 Feb 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 01 Sep 2023 05:44:57 GMT Server: ECAcc (nya/7891) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,owidth=400,oheight=400,obytes=29738 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21962-LGA X-Timer: S1708800369.486804,VS0,VE77 Content-Length: 1116 Connection: close
2024-03-03 23:26:35 UTC	1116	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 01 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 85 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 07 03 06 08 05 10 00 02 01 02 04 06 01 03 05 00 00 00 00 00 00 00 01 02 03 04 05 00 06 11 12 07 13 21 31 41 61 71 14 32 81 24 51 52 82 91 01 00 01 05 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&&,%#%,5//5C?CWWu.$ $.5-*-5@99@QMQjj !1Aaq2$QR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49901	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	875	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1709508394819&yhlClientVer=3.53.44&yhlRnd=b0L68fsuldKhaF0O&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 4081 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEAdgAT3aOQwAj5_sZQItDgwFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAtXYFkTGqfrRcP0xv3eG-S0
2024-03-03 23:26:35 UTC	4081	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 43 51 48 35 57 55 43 45 44 4c 76 2d 34 5a 6f 37 4b 5f 51 4a 5a 73 63 4f 4f 56 54 7a 35 67 46 45 67 45 42 41 51 46 59 35 6d 58 75 5a 64 78 48 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 67 2d 45 55 35 37 34 36 6a 67 46 37 6a 30 47 4f 64 71 74 64 44 51 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 34 34 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.44%22%2C%22A_cn%22%3A%22ANALY
2024-03-03 23:26:35 UTC	816	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Sun, 03 Mar 2024 23:26:35 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEAdgAT3aOQwAj5_sZQItDgwFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAtXYFkTGqfrRcP0xv3eG-S0; Expires=Tue, 4 Mar 2025 05:26:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49902	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	875	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1709508394846&yhlClientVer=3.53.44&yhlRnd=y4XnAhVqwdJyPZPt&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 6427 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEAdgAT3aOQwAj5_sZQItDgwFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAtXYFkTGqfrRcP0xv3eG-S0
2024-03-03 23:26:35 UTC	6427	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 43 51 48 35 57 55 43 45 44 4c 76 2d 34 5a 6f 37 4b 5f 51 4a 5a 73 63 4f 4f 56 54 7a 35 67 46 45 67 45 42 41 51 46 59 35 6d 58 75 5a 64 78 48 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 67 2d 45 55 35 37 34 36 6a 67 46 37 6a 30 47 4f 64 71 74 64 44 51 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 33 2e 34 34 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.53.44%22%2C%22A_cn%22%3A%22ANALY
2024-03-03 23:26:36 UTC	816	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:26:35 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEAdgAT3aOQwAj5_sZQItDgwFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAtXYFkTGqfrRcP0xv3eG-S0; Expires=Tue, 4 Mar 2025 05:26:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49903	142.251.35.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	672	OUT	GET /pagead/managed/js/gpt/m202402220101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	741	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 437896 X-XSS-Protection: 0 Date: Sun, 03 Mar 2024 19:55:31 GMT Expires: Mon, 03 Mar 2025 19:55:31 GMT Cache-Control: public, immutable, max-age=31536000 Age: 12664 ETag: 2919427224111863329 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:36 UTC	511	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 62 61 2c 65 61 2c 69 61 2c 6d 61 2c 6f 61 2c 71 61 2c 75 61 2c 74 61 2c 76 61 2c 77 61 2c 79 61 2c 7a 61 2c 41 61 2c 44 61 2c 45 61 2c 49 61 2c 4a 61 2c 4b 61 2c 4c 61 2c 4f 61 2c 58 61 2c 63 62 2c 66 62 2c 6c 62 2c 6e 62 2c 6f 62 2c 70 62 2c 71 62 2c 73 62 2c 77 62 2c 79 62 2c 45 62 2c 48 62 2c 4d 62 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 */ var ba,ea,ia,ma,oa,qa,ua,ta,va,wa,ya,za,Aa,Da,Ea,Ia,Ja,Ka,La,Oa,Xa,cb,fb,lb,nb,ob,pb,qb,sb,wb,yb,Eb,Hb,Mb
2024-03-03 23:26:36 UTC	1252	IN	Data Raw: 51 65 2c 42 65 2c 52 65 2c 53 65 2c 54 65 2c 56 65 2c 57 65 2c 58 65 2c 61 66 2c 62 66 2c 63 66 2c 5a 65 2c 6b 66 2c 24 65 2c 6c 66 2c 42 66 2c 44 66 2c 46 66 2c 49 66 2c 4a 66 2c 4b 66 2c 4f 66 2c 50 66 2c 51 66 2c 53 66 2c 54 66 2c 55 66 2c 56 66 2c 57 66 2c 5a 66 2c 63 67 2c 65 67 2c 64 67 2c 69 67 2c 6b 67 2c 6c 67 2c 46 67 2c 47 67 2c 48 67 2c 4b 67 2c 4d 67 2c 4f 67 2c 51 67 2c 52 67 2c 55 67 2c 56 67 2c 57 67 2c 58 67 2c 59 67 2c 24 67 2c 61 68 2c 63 68 2c 64 68 2c 66 68 2c 67 68 2c 68 68 2c 69 68 2c 6a 68 2c 6b 68 2c 6e 68 2c 70 68 2c 74 68 2c 72 68 2c 78 68 2c 48 68 2c 49 68 2c 76 68 2c 77 68 2c 4a 68 2c 4b 68 2c 55 68 2c 53 68 2c 58 68 2c 65 69 2c 4c 68 2c 6e 69 2c 77 69 2c 78 69 2c 42 69 2c 43 69 2c 49 69 2c 4b 69 2c 4c 69 2c 4f 69 2c 52 69 2c Data Ascii: Qe,Be,Re,Se,Te,Ve,We,Xe,af,bf,cf,Ze,kf,$e,lf,Bf,Df,Ff,If,Jf,Kf,Of,Pf,Qf,Sf,Tf,Uf,Vf,Wf,Zf,cg,eg,dg,ig,kg,lg,Fg,Gg,Hg,Kg,Mg,Og,Qg,Rg,Ug,Vg,Wg,Xg,Yg,$g,ah,ch,dh,fh,gh,hh,ih,jh,kh,nh,ph,th,rh,xh,Hh,Ih,vh,wh,Jh,Kh,Uh,Sh,Xh,ei,Lh,ni,wi,xi,Bi,Ci,Ii,Ki,Li,Oi,Ri,
2024-03-03 23:26:36 UTC	1252	IN	Data Raw: 65 2e 63 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 28 62 29 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 32 3e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 29 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3b 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 Data Ascii: e.call(a,b,1);return c};_.fa=function(a){var b=a.length;if(0<b){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};ia=function(a,b,c){return 2>=arguments.length?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)};ma=function(a){for
2024-03-03 23:26:36 UTC	1252	IN	Data Raw: 72 20 63 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 7d 3b 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 20 63 7d 3b 44 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 2c 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 64 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 63 20 69 6e 20 64 29 61 5b 63 5d 3d 64 Data Ascii: r c in a)b.call(void 0,a[c],c,a)};za=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};Aa=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return c};Da=function(a,b){for(var c,d,e=1;e<arguments.length;e++){d=arguments[e];for(c in d)a[c]=d
2024-03-03 23:26:36 UTC	1252	IN	Data Raw: 20 62 3d 6e 65 77 20 5f 2e 62 62 3b 62 2e 4f 69 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 62 62 29 72 65 74 75 72 6e 20 61 2e 4f 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 7d 3b 66 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 70 6c 69 74 28 2f 5c 3f 7c 23 2f 29 2c 63 3d 2f 5c 3f 2f 2e 74 65 73 74 28 61 29 3f 22 3f 22 2b 62 5b 31 5d 3a 22 22 3b 72 65 74 75 72 6e 7b 70 61 74 68 3a 62 5b 30 5d 2c 61 65 3a 63 2c 68 61 73 68 3a 2f 23 2f 2e 74 65 73 74 28 61 29 3f 22 23 22 2b 28 63 3f 62 5b 32 5d 3a 62 5b 31 5d 29 3a 22 22 7d 7d 3b 5f 2e 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 57 61 2e 61 70 70 6c Data Ascii: b=new _.bb;b.Oi=a;return b};_.db=function(a){if(a instanceof _.bb)return a.Oi;throw Error("");};fb=function(a){var b=a.split(/\?\|#/),c=/\?/.test(a)?"?"+b[1]:"";return{path:b[0],ae:c,hash:/#/.test(a)?"#"+(c?b[2]:b[1]):""}};_.hb=function(a){var b=_.Wa.appl
2024-03-03 23:26:36 UTC	1252	IN	Data Raw: 75 6c 6c 3b 67 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 76 61 72 20 68 3b 6e 75 6c 6c 3d 3d 28 68 3d 67 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 7c 7c 68 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 67 29 7d 76 61 72 20 67 3d 62 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 67 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 29 3b 64 28 29 7d 3b 67 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 29 3b 65 28 76 6f 69 64 20 30 29 7d 3b 67 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 71 62 28 67 2c 61 29 3b 63 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 62 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 5f 2e 72 62 28 62 2c 22 6c Data Ascii: ull;g.onerror=null;var h;null==(h=g.parentElement)\|\|h.removeChild(g)}var g=b.document.createElement("script");g.onload=function(){f();d()};g.onerror=function(){f();e(void 0)};g.type="text/javascript";qb(g,a);c&&"complete"!==b.document.readyState?_.rb(b,"l
2024-03-03 23:26:36 UTC	1252	IN	Data Raw: 6c 2c 68 2e 5f 6a 6b 5f 3d 64 2e 51 64 2c 68 2e 5f 73 74 5f 3d 64 2e 6d 64 2c 68 2e 5f 72 63 5f 3d 64 2e 53 65 2c 68 2e 5f 64 6c 5f 3d 64 2e 74 66 2c 68 2e 5f 67 32 5f 3d 64 2e 52 65 2c 68 29 29 3b 69 66 28 64 3d 66 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 66 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 76 6f 69 64 20 30 2c 64 5b 31 5d 28 29 3b 65 3d 5f 2e 68 62 28 78 62 2c 65 29 3b 73 62 28 65 29 7d 72 65 74 75 72 6e 20 63 2e 72 65 74 75 72 6e 28 62 29 7d 29 7d 3b 45 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 21 31 3b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 21 31 3a 62 3b 69 66 28 7a 62 29 7b 69 66 28 62 26 26 28 41 62 3f 21 61 2e 66 6c 28 29 3a 2f 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 Data Ascii: l,h._jk_=d.Qd,h._st_=d.md,h._rc_=d.Se,h._dl_=d.tf,h._g2_=d.Re,h));if(d=f.GoogleDX5YKUSk)f.GoogleDX5YKUSk=void 0,d[1]();e=_.hb(xb,e);sb(e)}return c.return(b)})};Eb=function(a){var b=!1;b=void 0===b?!1:b;if(zb){if(b&&(Ab?!a.fl():/(?:[^\uD800-\uDBFF]\|^)[\uDC
2024-03-03 23:26:36 UTC	1252	IN	Data Raw: 55 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 21 3d 3d 53 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 6c 6c 65 67 61 6c 20 65 78 74 65 72 6e 61 6c 20 63 61 6c 6c 65 72 22 29 3b 7d 3b 56 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 42 69 67 49 6e 74 7d 3b 24 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3e 61 3b 61 3d 4d 61 74 68 2e 61 62 73 28 61 29 3b 76 61 72 20 63 3d 61 3e 3e 3e 30 3b 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 61 2d 63 29 2f 34 32 39 34 39 36 37 32 39 36 29 3b 62 26 26 28 63 3d 5f 2e 7a 28 57 62 28 63 2c 61 29 29 2c 62 3d 63 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 61 3d 63 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 63 3d 62 29 3b 58 Data Ascii: Ub=function(a){if(a!==Sb)throw Error("illegal external caller");};Vb=function(){return"function"===typeof BigInt};$b=function(a){var b=0>a;a=Math.abs(a);var c=a>>>0;a=Math.floor((a-c)/4294967296);b&&(c=_.z(Wb(c,a)),b=c.next().value,a=c.next().value,c=b);X
2024-03-03 23:26:36 UTC	1252	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 7e 62 3b 61 3f 61 3d 7e 61 2b 31 3a 62 2b 3d 31 3b 72 65 74 75 72 6e 5b 61 2c 62 5d 7d 3b 67 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 7d 3b 68 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 2e 75 2e 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 28 30 2c 5f 2e 75 2e 53 79 6d 62 6f 6c 29 28 29 3f 28 30 2c 5f 2e 75 2e 53 79 6d 62 6f 6c 29 28 29 3a 61 7d 3b 69 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 3f 61 7c 62 3a 61 26 7e 62 7d 3b 6c 63 3d 66 75 6e 63 74 69 6f Data Ascii: =function(a,b){b=~b;a?a=~a+1:b+=1;return[a,b]};gc=function(a){return Array.prototype.slice.call(a)};hc=function(a){return"function"===typeof _.u.Symbol&&"symbol"===typeof(0,_.u.Symbol)()?(0,_.u.Symbol)():a};ic=function(a,b,c){return c?a\|b:a&~b};lc=functio
2024-03-03 23:26:36 UTC	1252	IN	Data Raw: 6c 21 3d 61 26 26 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 61 6c 75 65 20 6f 66 20 66 6c 6f 61 74 2f 64 6f 75 62 6c 65 20 66 69 65 6c 64 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 2c 20 66 6f 75 6e 64 20 22 2b 74 79 70 65 6f 66 20 61 2b 22 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 4b 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 61 3b 69 66 28 22 4e 61 4e 22 3d 3d 3d 61 7c 7c 22 49 6e 66 69 6e 69 74 79 22 3d 3d 3d 61 7c 7c 22 2d 49 6e 66 69 6e 69 74 79 22 3d 3d 3d 61 29 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 61 29 7d 3b 4d 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: l!=a&&"number"!==typeof a)throw Error("Value of float/double field must be a number, found "+typeof a+": "+a);return a};Kc=function(a){if(null==a\|\|"number"===typeof a)return a;if("NaN"===a\|\|"Infinity"===a\|\|"-Infinity"===a)return Number(a)};Mc=function(a){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49905	151.101.65.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	628	OUT	GET /libtrc/tr5?abgroup=doc-client-width-4_var HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=9
2024-03-03 23:26:36 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3 Server: Varnish Retry-After: 0 Content-Type: text/html Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:36 GMT Via: 1.1 varnish X-Served-By: cache-ewr18136-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1709508396.029877,VS0,VE0 Cache-Control: private,max-age=14400 Access-Control-Allow-Origin: *
2024-03-03 23:26:36 UTC	3	IN	Data Raw: 6c 6c 3b Data Ascii: ll;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49904	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F41d3b880-3404-11eb-937b-3aacf54802f7&client=76f99bdb8f78cd44cc0b&signature=ab41e87f69cf3babf4095d9b8ba35b1a6bbdb360 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1142	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 415231 Cache-Control: public, max-age=2592000 Cache-Tag: 232686577624863233903056574575834270471,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100153-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 232686577624863233903056574575834270471,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "62673eb3f4f65db0fd7b37ad94813b02" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 00:19:32 GMT Server: ECAcc (nya/7941) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1182,owidth=400,oheight=400,obytes=27838,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100153-IAD X-Timer: S1709093165.150696,VS0,VE2 Content-Length: 1182 Connection: close
2024-03-03 23:26:36 UTC	1182	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 06 06 06 06 08 09 08 09 08 0c 0b 0a 0a 0b 0c 12 0d 0e 0d 0e 0d 12 1b 11 14 11 11 14 11 1b 18 1d 18 16 18 1d 18 2b 22 1e 1e 22 2b 32 2a 28 2a 32 3c 36 36 3c 4c 48 4c 64 64 86 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 79 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 08 06 00 02 10 00 01 03 02 06 02 02 03 00 00 00 00 00 00 00 00 02 01 03 05 04 06 00 07 11 12 21 31 22 41 13 72 14 61 62 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 06 07 00 05 Data Ascii: JFIF&""&0-0>>T+""+2(2<66<LHLdd y!1"Arab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49910	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	698	OUT	GET /rx/ev/builds/1.3.9/pframe.html HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	840	IN	HTTP/1.1 200 OK x-amz-id-2: pwtmAZzpX1N4/tyhfxFkKuqIiWqLIYBcE3AxwC0dkqVgYytV35Mw7h+70YSc57+XU8Lq9E41kGg= x-amz-request-id: 90DAKVV59X0FH55B Date: Wed, 28 Feb 2024 17:25:05 GMT Last-Modified: Tue, 27 Feb 2024 19:48:06 GMT ETag: "2aa7ef0b22f0b66cafbdaacff599771d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: B7xNpNLDuhmdWRZffHlu38_lR9.Zk4Mw Accept-Ranges: bytes Content-Type: text/html Server: ATS Content-Length: 539 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 367292 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:36 UTC	539	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 7d 0a 20 20 20 20 20 20 20 20 23 70 66 72 61 6d 65 2d 72 6f 6f 74 2c 20 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <style> html, body { width: 100%; height: 100%; margin: 0; padding: 0; overflow: hidden } #pframe-root, #pframe-player-container { height: 100%; } </style></head><body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49911	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:35 UTC	758	OUT	GET /ups/58784/sync?format=json&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:36 UTC	763	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:36 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC=19cw~2h3b;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:36 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:36 UTC	26	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 57 48 32 55 32 5f 6c 45 32 75 Data Ascii: 30{"axid": "y-WH2U2_lE2u
2024-03-03 23:26:36 UTC	33	IN	Data Raw: 4a 34 54 51 4a 5a 79 34 45 74 5a 64 32 6b 4e 42 6c 4a 47 6c 34 67 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: J4TQJZy4EtZd2kNBlJGl4g~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49906	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=ac1c86f1c864869accf8544da530e03be9b801e8 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 420442 Cache-Control: public, max-age=2592000 Cache-Tag: 417884516681699342842259125334062851322,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21963-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 66 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 417884516681699342842259125334062851322,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "f721cf57548e40cb0f7e8ed0934cf1f1" Expiration: expiry-date="Thu, 18 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 19 Jan 2024 00:16:01 GMT Server: ECAcc (nya/7962) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1233,owidth=400,oheight=401,obytes=176359,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100084-IAD X-Timer: S1706495954.157551,VS0,VE94 Content-Length: 1233 Connection: close
2024-03-03 23:26:36 UTC	1233	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7e 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 07 08 03 05 01 04 06 10 00 02 02 02 01 04 01 03 05 00 00 00 00 00 00 00 01 02 03 04 05 06 12 00 07 11 21 23 13 14 24 31 42 51 61 72 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd!!1&""&18/-/8D==DVQVpp ~!#$1BQar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49907	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fd50a9120-3411-11eb-97bb-1084c5a79300&client=76f99bdb8f78cd44cc0b&signature=2e380cbe938a1f4b6b57c6cdf936e0516050112f HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 420510 Cache-Control: public, max-age=2592000 Cache-Tag: 461969623020839103870209087167249109379,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000032-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 67 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 461969623020839103870209087167249109379,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "6a6eec9542309f83d565ce90ab410d25" Expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 08 Feb 2024 12:24:10 GMT Server: ECAcc (nya/799E) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1020,owidth=400,oheight=400,obytes=57208,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000032-IAD X-Timer: S1709087886.153014,VS0,VE67 Content-Length: 1020 Connection: close
2024-03-03 23:26:36 UTC	1020	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 09 09 09 09 09 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 14 12 11 11 12 14 1e 16 17 16 17 16 1e 2e 1d 21 1d 1d 21 1d 2e 29 31 28 25 28 31 29 49 39 33 33 39 49 54 47 43 47 54 66 5b 5b 66 81 7a 81 a8 a8 e2 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7e 00 00 01 04 03 00 00 00 00 00 00 00 00 00 00 00 00 08 04 05 06 09 00 03 07 10 00 02 01 03 04 01 04 03 00 03 00 00 00 00 00 00 01 02 03 04 05 06 00 07 11 12 42 13 21 41 61 14 31 71 16 22 23 01 00 01 05 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd.!!.)1(%(1)I9339ITGCGTf[[fz ~B!Aa1q"#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49908	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9ff3de001884e92d939ae40d08e9b7109e31ec24 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1129	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1164611 Cache-Control: public, max-age=2592000 Cache-Tag: 437559623224935281181735502381789763861,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21974-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 68 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 437559623224935281181735502381789763861,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "b4515d9ec12c634f4b40abee83809012" Expiration: expiry-date="Sat, 03 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 04 Feb 2024 07:07:51 GMT Server: ECAcc (nya/79B8) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=806,owidth=400,oheight=400,obytes=38740,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21974-LGA X-Timer: S1708343785.056832,VS0,VE68 Content-Length: 806 Connection: close
2024-03-03 23:26:36 UTC	806	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 01 09 09 09 09 09 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 14 12 11 11 12 14 1e 16 17 16 17 16 1e 2e 1d 21 1d 1d 21 1d 2e 29 31 28 25 28 31 29 49 39 33 33 39 49 54 47 43 47 54 66 5b 5b 66 81 7a 81 a8 a8 e2 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 76 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 08 00 06 07 03 10 00 02 01 03 04 00 03 07 05 00 00 00 00 00 00 00 02 03 04 01 05 06 00 07 11 12 08 31 71 13 22 32 41 51 61 72 14 16 21 33 81 01 01 00 03 01 00 00 00 00 00 00 00 00 Data Ascii: JFIF&&,%#%,5//5C?CWWu.!!.)1(%(1)I9339ITGCGTf[[fz v1q"2AQar!3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49909	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-01%2Fc8e15350-aa80-11ee-bdbf-641468506b6f&client=76f99bdb8f78cd44cc0b&signature=1532bdc3ce1b36c5f1e1e6803f90c92ce686c25e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1494	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2496110 Cache-Control: public, max-age=2592000 Cache-Tag: 241991630967237766322661541564215562872,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000131-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 93 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 241991630967237766322661541564215562872,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "8e9f49d1e5a7f4193370bb3b1571436f" Expiration: expiry-date="Thu, 04 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 05 Jan 2024 02:04:48 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/1C48) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1404,owidth=400,oheight=400,obytes=27293,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000131-IAD X-Timer: S1707012286.149982,VS0,VE93 Content-Length: 1404 Connection: close
2024-03-03 23:26:36 UTC	1404	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 86 00 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 07 03 06 08 05 10 00 01 04 01 03 03 04 02 02 03 00 00 00 00 00 00 02 01 03 04 05 06 00 07 11 12 21 41 14 22 31 42 13 51 15 32 53 61 81 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd) )/'%'/9339GDG]]} !A"1BQ2Sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49912	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	570	OUT	GET /cv/apiv2/aolfp/metadata/manifest.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	786	IN	HTTP/1.1 200 OK x-amz-id-2: 0A+T93hcEXnkCv+pcHBCFVXSdGqiC8rm0UqPNVKx4M/cA3C84KUja/IqxV6GV3CqUqvqdFgevys= x-amz-request-id: JYSV95V60W0W1DSP Date: Sun, 03 Mar 2024 09:35:46 GMT Last-Modified: Mon, 09 Jan 2023 14:45:37 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Accept-Ranges: bytes Content-Type: text/json Server: ATS Content-Length: 1653 Referrer-Policy: no-referrer-when-downgrade Etag: "6bdda2b37274eaed3fd8895766c49e86" Age: 49851 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 7b 0a 20 20 22 6e 61 6d 65 22 3a 20 22 41 6f 6c 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 61 70 70 2f 41 4f 4c 2d 6c 6f 67 6f 2d 33 36 78 33 36 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 36 78 33 36 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 61 70 70 2f 41 4f 4c 2d 6c 6f 67 6f 2d 34 38 78 34 38 2e Data Ascii: { "name": "Aol", "icons": [ { "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-36x36.png", "sizes": "36x36", "type": "image/png" }, { "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-48x48.
2024-03-03 23:26:36 UTC	353	IN	Data Raw: 65 22 2c 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 41 6f 6c 22 2c 0a 20 20 22 70 72 65 66 65 72 5f 72 65 6c 61 74 65 64 5f 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 20 74 72 75 65 2c 0a 20 20 22 72 65 6c 61 74 65 64 5f 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 70 6c 61 74 66 6f 72 6d 22 3a 20 22 70 6c 61 79 22 2c 0a 20 20 20 20 20 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 3f 69 64 3d 63 6f 6d 2e 61 6f 6c 2e 6d 6f 62 69 6c 65 2e 61 6f 6c 61 70 70 22 2c 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 63 6f 6d 2e 61 6f 6c 2e 6d 6f 62 69 6c 65 2e 61 6f 6c 61 70 70 22 0a 20 20 20 20 7d 2c 0a 20 20 Data Ascii: e", "short_name": "Aol", "prefer_related_applications": true, "related_applications": [ { "platform": "play", "url": "https://play.google.com/store/apps/details?id=com.aol.mobile.aolapp", "id": "com.aol.mobile.aolapp" },

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49914	151.101.65.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	637	OUT	GET /libtrc/impl.20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=9
2024-03-03 23:26:36 UTC	762	IN	HTTP/1.1 200 OK Connection: close Content-Length: 878128 x-amz-id-2: RISkoVNUQnSriY1AmTTsJPpW/TqhofLgXR/o8ad+uEfp1q7u0wGeol9GxTO7VL1xN1oJx+G4fe8= x-amz-request-id: 16FKD0R2DSRH12CC x-amz-replication-status: FAILED Last-Modified: Sun, 03 Mar 2024 10:50:08 GMT ETag: "678c536a2d099400e6f115fa2c83e403" x-amz-server-side-encryption: AES256 x-amz-version-id: uHk1Sv7VjLZicwpjETz6S81k.0Y1gDJv Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:36 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-ewr18140-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508396.223242,VS0,VE111 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 39 Access-Control-Allow-Origin: *
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 30 33 30 33 2d 31 30 5f 62 34 2d 50 52 2d 36 38 31 39 37 2d 44 45 56 2d 31 35 35 33 39 36 2d 6d 61 67 61 7a 69 6e 65 2d 74 68 65 2d 66 65 65 64 2d 62 65 6c 6f 77 2d 74 68 65 2d 70 70 2d 69 73 2d 68 61 6c 66 2d 64 69 73 70 6c 61 79 65 64 2d 37 31 62 61 32 38 33 34 63 33 35 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 54 52 43 3d 65 2e 54 52 43 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e Data Ascii: /! 20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35 /!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 63 6f 6e 73 74 20 6f 3d 76 28 69 2e 74 61 72 67 65 74 7c 7c 69 2e 73 72 63 45 6c 65 6d 65 6e 74 2c 22 41 22 29 3b 69 26 26 72 2e 64 6f 6d 2e 73 74 6f 70 45 76 65 6e 74 28 69 29 2c 63 7c 7c 68 28 29 3b 63 6f 6e 73 74 20 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 62 6c 45 6e 61 62 6c 65 73 53 63 72 6f 6c 6c 69 6e 67 22 29 3b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 66 28 6f 2e 68 72 65 66 2c 6e 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6c 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 6f 6e Data Ascii: tNode;return e},C=function(i){const o=v(i.target\|\|i.srcElement,"A");i&&r.dom.stopEvent(i),c\|\|h();const n=o.getAttribute("tblEnablesScrolling");s.innerHTML=f(o.href,n),r.dom.removeClass(l,"trc_modal_hidden"),r.dom.removeClass(s,"trc_modal_hidden"),r.dom.on
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 20 23 30 30 30 3b 20 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 35 30 29 3b 20 7d 24 7b 65 7d 20 2e 74 72 63 5f 6d 6f 64 61 6c 5f 63 6c 6f 73 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 77 69 64 74 68 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 Data Ascii: kground: #000; opacity: 0.5; filter: alpha(opacity=50); }${e} .trc_modal_close { font-family: sans-serif !important; width: 30px !important; height: 30px !important; font-size: 30px !important; font-weight: bold !important; line-height: 28px !important; c
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 74 65 64 20 6f 6e 20 64 69 76 20 77 69 74 68 20 63 6c 61 73 73 3a 20 22 2b 65 2e 63 6c 61 73 73 4e 61 6d 65 29 2c 21 31 29 3a 28 54 52 43 2e 70 43 6f 6e 73 6f 6c 65 28 22 70 61 67 65 22 2c 22 77 61 72 6e 22 2c 22 41 64 42 6c 6f 63 6b 50 6c 75 73 20 64 65 74 65 63 74 65 64 20 6f 6e 20 64 69 76 20 77 69 74 68 20 63 6c 61 73 73 3a 20 22 2b 65 2e 63 6c 61 73 73 4e 61 6d 65 29 2c 21 30 29 7d 2c 69 73 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 4f 6e 43 6c 61 73 73 4e 61 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 65 5b 74 5d 29 7b 69 3d 74 68 69 73 2e 63 72 65 61 74 65 42 6c 6f 63 6b 44 65 74 65 63 74 69 6f 6e 44 69 76 28 65 5b 74 5d 29 3b 74 72 79 Data Ascii: ted on div with class: "+e.className),!1):(TRC.pConsole("page","warn","AdBlockPlus detected on div with class: "+e.className),!0)},isBlockDetectedOnClassNames:function(e){var t,r=e.length,i;for(t=0;t<r;t++)if(e[t]){i=this.createBlockDetectionDiv(e[t]);try
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 74 2e 67 6c 6f 62 61 6c 5b 22 61 6d 70 2d 6f 6e 72 65 6e 64 65 72 22 5d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3b 65 2e 67 65 74 41 4d 50 43 6f 6e 74 61 69 6e 65 72 28 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 62 6c 2d 61 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 54 52 43 2e 65 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 73 75 62 73 63 72 69 62 65 28 22 6f 6e 72 65 6e 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 64 3d 7b 6e 65 67 61 74 69 76 65 3a 6e 2c 70 6f 73 69 74 69 76 65 3a 61 7d 3b 69 66 28 21 63 28 74 29 7c 7c 6c 29 72 65 74 75 72 6e 21 31 3b 6e 75 6c 6c 3d 3d 3d 72 26 26 28 72 3d 21 28 21 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6c 61 63 65 6d 65 6e 74 44 61 74 61 7c 7c 21 74 2e 63 6f 6e 74 61 Data Ascii: t.global["amp-onrender"]:function(){return!0};e.getAMPContainer().classList.add("tbl-amp-container"),TRC.eventDelegator.subscribe("onrender",function(t){var d={negative:n,positive:a};if(!c(t)\|\|l)return!1;null===r&&(r=!(!t.container.placementData\|\|!t.conta
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 2c 67 65 74 47 6c 6f 62 61 6c 4b 65 79 3d 28 65 2c 74 29 3d 3e 5b 65 2c 74 5d 2e 6a 6f 69 6e 28 22 2d 22 29 3b 76 61 72 20 43 4f 4e 53 54 41 4e 54 53 24 32 3d 7b 53 48 4f 52 54 5f 4e 41 4d 45 3a 53 48 4f 52 54 5f 4e 41 4d 45 24 31 2c 4d 4f 44 55 4c 45 5f 4e 41 4d 45 3a 60 24 7b 50 52 45 46 49 58 24 31 7d 2d 24 7b 4d 4f 44 55 4c 45 24 31 7d 60 2c 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 2c 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 24 31 2c 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 24 31 2c 46 4f 52 43 45 5f 50 41 52 41 4d 3a 53 48 4f 52 54 5f 4e 41 4d 45 24 Data Ascii: ,getGlobalKey=(e,t)=>[e,t].join("-");var CONSTANTS$2={SHORT_NAME:SHORT_NAME$1,MODULE_NAME:`${PREFIX$1}-${MODULE$1}`,GLOBAL_PREFIX:GLOBAL_PREFIX,GLOBAL_FRAUD_PREFIX:GLOBAL_FRAUD_PREFIX$1,GLOBAL_DEFAULT_PREFIX:GLOBAL_DEFAULT_PREFIX$1,FORCE_PARAM:SHORT_NAME$
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 6e 63 65 54 69 6d 65 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 7d 7d 73 74 61 74 69 63 20 63 6c 65 61 72 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 21 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 69 73 45 6e 61 62 6c 65 64 28 65 29 7c 7c 21 74 7c 7c 21 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 29 72 65 74 75 72 6e 3b 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 3d 6e 75 6c 6c 7d 63 61 74 63 68 28 65 29 7b 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 63 6c 65 61 72 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 7d 7d 73 74 61 74 69 63 20 67 65 74 41 70 70 65 61 72 61 6e Data Ascii: nceTime - ${e.message}`,e)}}static clearAppearanceTime(e,t){try{if(!ItemMeasurements.isEnabled(e)\|\|!t\|\|!t.appearanceTime)return;t.appearanceTime=null}catch(e){__trcError(`Error in ItemMeasurements.clearAppearanceTime - ${e.message}`,e)}}static getAppearan
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 74 2e 69 6e 64 65 78 4f 66 28 22 26 76 63 74 3d 22 29 3e 2d 31 29 72 65 74 75 72 6e 20 74 3b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 67 65 74 56 69 73 69 62 6c 65 54 6f 43 6c 69 63 6b 54 69 6d 65 28 72 2c 69 2c 6f 29 2c 61 3d 60 24 7b 74 7d 26 76 63 74 3d 24 7b 6e 7d 60 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 68 6f 75 6c 64 49 67 6e 6f 72 65 4c 6f 67 67 65 72 55 72 6c 50 72 65 66 69 78 28 65 2c 61 2e 6c 65 6e 67 74 68 29 3f 74 3a 61 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 61 64 64 56 69 73 69 62 6c 65 54 6f 43 6c 69 63 6b 54 69 6d 65 54 6f 50 61 72 61 6d 55 52 4c 20 2d 20 24 Data Ascii: string"!=typeof t\|\|t.indexOf("&vct=")>-1)return t;const n=this.getVisibleToClickTime(r,i,o),a=`${t}&vct=${n}`;return this.shouldIgnoreLoggerUrlPrefix(e,a.length)?t:a}catch(e){return __trcError(`Error in ItemMeasurements.addVisibleToClickTimeToParamURL - $
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 6d 65 56 61 6c 75 65 3a 74 68 69 73 2e 67 65 74 42 6c 6f 63 6b 46 61 73 74 43 6c 69 63 6b 73 54 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 4b 45 59 53 2e 46 41 53 54 5f 4b 45 59 29 2c 72 65 63 75 72 72 69 6e 67 43 6c 69 63 6b 44 65 6c 61 79 3a 74 68 69 73 2e 67 65 74 42 6c 6f 63 6b 46 61 73 74 43 6c 69 63 6b 73 54 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 4b 45 59 53 2e 52 45 43 55 52 52 49 4e 47 5f 4b 45 59 29 7d 7d 73 74 61 74 69 63 20 67 65 74 42 6c 6f 63 6b 43 6c 69 63 6b 73 46 72 6f 6d 52 65 73 70 6f 6e 73 65 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 72 63 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 54 52 43 2e 55 52 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 2e 63 61 6c 6c Data Ascii: meValue:this.getBlockFastClicksTimeoutInMilliseconds(KEYS.FAST_KEY),recurringClickDelay:this.getBlockFastClicksTimeoutInMilliseconds(KEYS.RECURRING_KEY)}}static getBlockClicksFromResponse(t){if(!t\|\|!t.trc)return;const r=TRC.URL.prototype.getParameter.call
2024-03-03 23:26:36 UTC	1378	IN	Data Raw: 75 6c 6c 7d 7d 69 73 45 6e 61 62 6c 65 64 42 79 44 65 66 61 75 6c 74 28 29 7b 63 6f 6e 73 74 7b 67 6c 6f 62 61 6c 3a 65 7d 3d 74 68 69 73 2e 74 72 63 4d 61 6e 61 67 65 72 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 54 72 75 65 28 65 5b 47 4c 4f 42 41 4c 5f 4b 45 59 53 2e 44 45 46 41 55 4c 54 5f 45 4e 41 42 4c 45 44 5d 29 7d 73 74 61 74 69 63 20 69 73 42 6c 6f 63 6b 43 6c 69 63 6b 73 41 63 74 69 6f 6e 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 42 43 41 5b 4b 45 59 53 2e 42 4c 4f 43 4b 5f 43 4c 49 43 4b 53 5f 44 49 53 41 42 4c 45 44 5d 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 46 61 6c 73 65 28 74 29 7d 63 68 65 63 6b 49 73 46 72 61 75 64 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 7b 67 6c 6f 62 61 6c 3a 65 7d Data Ascii: ull}}isEnabledByDefault(){const{global:e}=this.trcManager;return TRC.util.isTrue(e[GLOBAL_KEYS.DEFAULT_ENABLED])}static isBlockClicksActionEnabled(){const t=e.BCA[KEYS.BLOCK_CLICKS_DISABLED];return TRC.util.isFalse(t)}checkIsFraudEnabled(){const{global:e}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49921	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	396	OUT	GET /aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	860	IN	HTTP/1.1 200 OK x-amz-id-2: g8vEF35ysIOvOx/HHDoxiN2qN1bZIp69SBlTex8q/og6y34gqzjEbE3NY824dU0CxAHyY+JHu7Sy4wdubWtANpUUSxVPyW2GEn7/3m+21fA= x-amz-request-id: S2MCETD8X8SP8H8P Date: Sun, 03 Mar 2024 23:19:47 GMT Last-Modified: Mon, 11 Sep 2023 19:32:23 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 x-amz-version-id: Ku5dtK7t_rO0fjr.MzhvSNwYCSW9LhxS Accept-Ranges: bytes Content-Type: image/jpeg Server: ATS Content-Length: 12180 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "74f7c49c7421783a21f05158e9de7cd7" Age: 410 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: ff d8 ff ee 00 21 41 64 6f 62 65 00 64 80 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 00 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 64 03 41 03 01 22 00 02 11 01 03 11 01 ff c4 00 e7 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 08 02 01 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 10 00 01 04 02 01 03 02 04 05 04 Data Ascii: !AdobeddA"
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 7f ff da 00 08 01 02 00 01 05 00 fc b5 a4 2f 7a e9 af 3a 6b ce 9a f3 a6 bc e9 af 3a 6b ce 9a f3 a6 bc e9 af 3a 6b ce 9a fe 95 0f fb 7c 4a d2 af 97 4a d6 fe 57 3f 9f d2 21 ff 00 6f 89 88 e2 51 ed 57 bd fb 67 77 bd 47 77 f7 3a c3 cb 71 31 9c d6 d6 c3 8a 5f b5 77 7a 65 0a 4a 31 cf e7 f4 88 e4 59 6d ae 55 8c e5 58 ce 55 8c e5 58 ce 55 8c e5 58 ce 55 8c e5 58 ce 55 8c e5 58 ce 55 8c 5e ff 00 55 7e 6d ff da 00 08 01 03 00 01 05 00 fc b5 b5 a7 59 d4 46 75 11 9d 44 67 51 19 d4 46 75 11 9d 44 67 51 19 d4 46 75 11 9d 44 7a 5f a7 d0 25 ff 00 5f 14 95 27 e5 de b7 af 95 bf e1 f4 89 7f d7 cd ca 6d 4b f7 28 d6 bd c3 5a d7 5d af da d3 cd 25 Data Ascii: 9TuSGU9TuSGU9TuSGU9TuSGU9TuSGU9TuSGU9T/z:k:k:k\|JJW?!oQWgwGw:q1_wzeJ1YmUXUXUXUXUXU^U~mYFuDgQFuDgQFuDz_%_'mK(Z]%
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 2d 7b 61 aa 98 d8 b8 ac e1 64 88 f6 c0 e3 29 c5 68 60 e9 04 55 29 12 80 13 6e 24 81 c0 99 8c a8 be d2 09 0d 3a 88 93 23 a6 10 c4 bc 66 13 23 e0 fc 45 7d af d3 b7 19 e1 6b e0 03 bc 70 c7 fa 69 39 65 04 e8 02 fe c9 77 9a 18 c3 76 0a b4 c2 66 ac 16 a9 b4 ca ca ab c0 29 df e5 3e 54 30 6a 31 6f 1c 11 26 42 b5 f2 af 4a da 7b 72 1f 0c e0 59 e9 54 38 0c 46 8f 00 7f b3 18 90 09 48 17 44 3d 36 0c 08 f3 da 53 22 58 4c a4 d7 9c 61 11 46 c9 dc f0 42 4c 8a 8d 20 73 72 65 44 ac fb 78 ec 56 df 6d 5b 03 fa ba 54 5b b3 5e 60 16 da 69 15 f7 a3 b6 e0 07 df 87 db 2d a5 f9 02 65 cb 9d 67 fd 64 45 74 36 d9 5e eb cf fb 71 c3 a4 c6 96 e8 97 1c 9a c0 69 fb 76 68 ef 77 32 48 19 8e 21 42 e6 c7 99 24 0c e5 a8 98 49 93 e1 12 1d a9 d0 e5 00 96 41 97 47 f5 24 11 83 25 f7 e4 83 eb 8c 74 Data Ascii: -{ad)h`U)n$:#f#E}kpi9ewvf)>T0j1o&BJ{rYT8FHD=6S"XLaFBL sreDxVm[T[^`i-egdEt6^qivhw2H!B$IAG$%t
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 08 e6 3e 57 68 b0 8b e4 c1 8a ae 56 2d 01 64 52 51 05 15 45 61 d9 2c 58 ec 2d 5b 4a eb 71 12 34 98 c0 ca e2 02 0c 8b 54 88 c5 9e 6f b0 b3 f7 0b f6 6e 56 df 1a d4 4d c8 b2 20 74 a8 8a f8 64 eb d4 af 97 e8 bf 2e e3 b6 db ad c0 ed ad 90 a7 93 42 90 29 9c fb 93 ce 6a 1e 1e d5 1e 5f 77 f9 ab f4 da 2d c0 5b 6b a6 dd d2 e0 a2 24 a3 3e 95 16 65 58 f0 fd 27 cd f3 17 f9 2d 9d 7a b6 b0 6e de 36 cb 84 c0 94 c1 94 11 09 1e a1 ab 83 83 fd bb b8 06 fd b4 0e e3 b2 6e 17 12 cf c4 80 05 92 30 73 90 ad e0 c8 9e 1f 9a 66 9f 33 ba d5 c5 83 2d 37 bf c0 ed 1f 41 5b 31 0b 86 1b 11 03 94 5b db db d0 4d 0e b2 bb b0 e4 e0 f6 1f c4 6e 77 1d ba e6 d8 9a a6 de 26 52 f5 9c 46 7c 3a 80 a3 21 f8 54 51 8f 69 ed 37 cb 89 b8 dc 76 42 22 43 59 48 d6 27 1a 36 b1 14 79 6e 15 9f fe a7 16 97 7b Data Ascii: >WhV-dRQEa,X-[Jq4TonVM td.B)j_w-[k$>eX'-zn6n0sf3-7A[1[Mnw&RF\|:!TQi7vB"CYH'6yn{
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 0d 4c f2 fb 1f 39 c1 be fb 31 b8 de 55 b8 6d 85 45 be e8 b1 81 29 aa 4e 16 66 bc a8 e5 90 01 7f 97 84 7b 18 0c d0 df d7 74 6a bc dc b8 4a 21 2b e3 d4 11 a4 46 aa 6a fe 1a bc b7 70 02 a4 c9 b2 03 03 2c 3e 92 29 88 eb 9f c2 2f cb 00 f7 ad 47 31 9c 09 98 8c e5 fa 72 29 c7 ae 23 eb 43 e5 63 d7 11 f5 a1 f2 b1 eb 88 fa d0 f9 58 f5 c4 7d 68 7c ac 7a e2 3e b4 3e 56 3d 71 1f 5a 1f 2b 1e b8 8f ad 0f 95 8f 5c 47 d6 87 ca c7 ae 23 eb 43 e5 63 d7 11 f5 a1 f2 b1 eb 88 fa d0 f9 58 f5 c4 7d 68 7c ac 7a e2 3e b4 3e 56 3d 71 1f 5a 1f 2b 1e b8 8f ad 0f 95 8f 5c 47 d6 87 ca c7 ae 23 eb 43 e5 63 d7 11 f5 a1 f2 b1 eb 88 fa d0 f9 58 f5 c4 7d 68 7c ac 7a e2 3e b4 3e 56 3d 71 1f 5a 1f 2b 1e b8 8f ad 0f 95 88 30 98 20 28 89 12 89 ce 26 27 de 98 9f ce b6 e9 e5 4a 50 04 c6 17 e8 11 Data Ascii: L91UmE)Nf{tjJ!+Fjp,>)/G1r)#CcX}h\|z>>V=qZ+\G#CcX}h\|z>>V=qZ+\G#CcX}h\|z>>V=qZ+0 (&'JP
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 80 ca 9a 94 2e da a1 2d 5e 6b cd 8e 36 9a b1 bb ef cd 62 8a d7 71 5a c1 20 32 52 c8 90 85 89 6a 89 00 af cd f6 18 7f 93 da 9b 66 b5 12 7b f1 5c 15 a4 89 1c c0 c3 85 c0 bf 11 9a 86 8e f8 6b d3 d5 c1 7b 2c 4d 44 df 4a d8 1a 90 47 a3 99 bc ee 47 8f 4f 57 a8 7e 87 1b 26 c4 17 09 4b f6 d6 28 ae 1f 99 e5 48 01 ac ca db 25 d6 6c e3 a9 7a 9a 38 db ef fd a5 bb b5 6d 96 ce 55 db 0d b0 98 93 0a 24 4c 58 d0 38 a5 64 66 a4 93 b9 94 72 f4 c3 cb c3 fd a3 f6 5a e2 dc 1f 7a b8 5d e5 ad dc 16 99 65 02 3a 8b 25 41 7a 30 fe 7c 18 dd 6f e2 e5 17 3e d2 ee d3 51 38 ea 1b 75 96 65 4d 34 ac 98 54 6a 19 f7 3e 8d 78 b5 75 8d d2 c3 da 9b 7b 8f 16 7b 81 11 50 66 53 cc 51 1e 99 b4 94 3d 8e 57 19 ea 7a 7c 2a 6e e0 06 e6 98 d6 85 4c 90 41 e5 c7 a6 46 2b 32 0a ba b5 07 e5 57 d0 0f ef b7 Data Ascii: .-^k6bqZ 2Rjf{\k{,MDJGGOW~&K(H%lz8mU$LX8dfrZz]e:%Az0\|o>Q8ueM4Tj>xu{{PfSQ=Wz\|*nLAF+2W
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 9a d4 df 5a 23 03 b6 4f a3 f3 98 b3 53 6d e0 2e 5f 7a 5b 7d ca e1 95 42 98 29 75 ee a0 32 88 d7 59 ad 0b d3 e0 47 2d fd 8e eb 17 56 74 53 e1 45 45 5e 79 d5 ab 07 3d 5c b8 68 d3 c6 e3 17 09 40 ed 7b 7c 41 31 fa c5 aa 23 0a f1 35 8d bf 86 d3 3a bb 7f 7b 0d 3f 87 8b 3f c4 2d 02 dd 3b 89 50 89 06 cb 0c 0e 40 de a5 dd 0e 92 c0 35 14 af 36 c6 00 3f 93 f3 b8 da 6c ed 16 b6 ae ee e8 85 cb 63 8d 10 70 bb 7b 9b 91 49 b1 28 b9 31 55 69 d6 e1 ed ab 47 bb 61 e2 ea e6 da cc 19 b6 ed 92 4b 69 ea 96 a9 68 46 57 73 6e 9d 23 d4 f0 f4 d0 3a 8e 06 bc d6 ce a7 06 ab 2d b6 c4 29 c1 6e 20 4e 73 9b 2b 8a 99 10 d5 a5 42 b4 dc 11 72 67 51 8c 3a 3a ea ef 7c de ee cd 1c bf 09 69 ab 2a bb ca 10 8b da ba bc af 58 d2 f3 9d 4c 2e ce d9 28 86 9a 41 e0 37 2e 95 4b 20 fa e1 6b 4a 1d ad a3 Data Ascii: Z#OSm._z[}B)u2YG-VtSEE^y=\h@{\|A1#5:{??-;P@56?lcp{I(1UiGaKihFWsn#:-)n Ns+BrgQ::\|i*XL.(A7.K kJ
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 2b d3 09 0d 4c b2 cf 3c fa 68 cc bf 4f 95 8b 1d a7 5b 99 b7 2e dc 53 73 44 65 a9 6d 00 20 c2 41 11 72 d9 47 31 5a 9d d9 f7 be 73 0e b5 dc 0d 39 99 2c d4 76 ea 90 a0 d4 42 f5 30 b5 58 fd 4a 5e b0 3c 14 dd 9d b9 c4 8c 40 f8 74 92 a7 3e 9a c8 c8 dc fe 12 e0 a1 7d 8f 48 cc 5d 5d 5c 40 dc b6 e8 c4 a2 4c 23 81 60 22 b5 a0 33 ab 84 4a 18 df a4 73 31 6c 56 77 50 ab 8b 13 77 85 32 5c 10 c2 1e 5a 85 60 e5 89 2e b4 06 4a d3 25 b1 2c fb ba 3e 1e a4 6e 3b 83 81 ef 5a c9 36 e0 a0 95 ad 60 72 26 e2 e3 63 8d 8e 76 92 aa 65 7d 45 f7 7d e6 a5 a5 83 2f ad ae 2c 6c d4 29 81 1b 53 5b 48 40 68 5f 3e 6f 9e a1 2a a9 af ee d8 d6 6c c1 28 ad d9 6c 69 98 e8 21 6c ac 8b 8b 3f 25 74 f5 71 b6 a8 ae 89 cd b0 ba 9b b6 bc c2 2b 79 4a ae 2d 32 3a 48 45 74 ae e0 38 fe 63 00 b9 b8 56 82 ae Data Ascii: +L<hO[.SsDem ArG1Zs9,vB0XJ^<@t>}H]]\@L#`"3Js1lVwPw2\Z`.J%,>n;Z6`r&cve}E}/,l)S[H@h_>o*l(li!l?%tq+yJ-2:HEt8cV
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 94 bc c4 84 b2 ae 60 06 08 b2 e9 1a 8c 46 ac 1c db 1c 0c 36 32 31 28 82 89 88 f7 b3 12 89 c2 9c 6f 99 62 33 d2 2c 86 32 ab ad ef 0f 10 e0 81 ae cd 67 23 32 10 23 11 98 cd 43 31 c3 e5 60 92 d6 45 07 96 a4 08 88 c9 65 e5 c8 0c 61 ca 49 d2 17 03 43 63 28 9c e3 a7 a3 8a 38 7a dd 9c 21 3a 93 0b b6 29 24 c4 44 44 8c cc d7 25 54 45 7d 6c 68 3d b9 ae 72 aa 20 60 6a cb cb a6 38 b0 ab 42 6c ca 12 55 ac 32 8e 89 e9 e9 ab 2a fb 58 87 5d 33 51 90 30 31 39 44 74 46 73 96 41 02 3d af 71 67 f4 0a fd c1 fc e5 2c 01 31 cf 3c 8a 22 63 3f ed c5 4b 50 01 7e 91 18 89 ff 00 77 e4 a9 8b 03 2f 7b 32 18 99 cb fb 71 30 b0 10 89 f7 e0 62 23 fb b1 11 7b 6a 9b a8 1f 7a 1c b1 66 5f 58 25 89 8b 2b 54 da c1 7b f0 95 8a f3 fa b1 1f c9 04 29 01 28 e9 89 81 88 98 ff 00 76 21 77 b6 ea b9 01 Data Ascii: `F621(ob3,2g#2#C1`EeaICc(8z!:)$DD%TE}lh=r `j8BlU2*X]3Q019DtFsA=qg,1<"c?KP~w/{2q0b#{jzf_X%+T{)(v!w
2024-03-03 23:26:36 UTC	480	IN	Data Raw: 6a e5 af 13 57 85 70 45 00 c6 5c a4 da 65 50 db 8e 8e a0 5b 05 e7 2d 5e 6b 0f b9 aa 16 76 51 17 6a 61 4d 23 04 8e 77 19 f4 d2 0c 10 d2 67 cd b3 1b 76 e3 a3 2f bb 5d cb 2f 6e ed f3 1a e6 6e 56 e5 98 24 8e 54 ad 5b 30 7a 92 ba cb b8 4e 9e 37 1b c8 b6 24 b1 ed b2 24 5a 19 05 64 16 2f 1b b2 32 a4 c9 0b 6d d7 1a d7 ce f4 3a da 78 f1 cc b4 3b 6b 51 b5 24 8c b4 82 b9 39 60 32 79 6a 36 d2 14 8f 0f 17 fe 1e a3 77 35 db 32 f1 37 76 aa b7 91 54 85 6b 34 1b da 3d fb 13 ca 7f 8b ec f5 0d 58 b0 bf 75 a4 b1 d6 e7 b8 ad d6 8a 20 22 10 bd ba f1 8a 7a 48 cd 6a 3a 41 2a a8 2b d4 d2 6f a4 0d 2c 36 e9 88 d3 3b cd d1 17 d3 6d 32 19 a9 4a 1b 7b 7c d9 22 64 a2 75 36 9a e7 a4 67 d7 c5 d5 f4 86 56 cd b2 b6 48 33 38 e9 62 db 7a c6 85 39 d7 c2 17 09 ec e3 77 64 5a b1 eb bd 30 ba 43 Data Ascii: jWpE\eP[-^kvQjaM#wgv/]/nnV$T[0zN7$$Zd/2m:x;kQ$9`2yj6w527vTk4=Xu "zHj:A*+o,6;m2J{\|"du6gVH38bz9wdZ0C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49913	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=2a26e46583bfd12678b081b69fb7cca425c39052 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1491	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 410425 Cache-Control: public, max-age=604800 Cache-Tag: 491159898302368516984374933222855513569,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000063-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 81 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 491159898302368516984374933222855513569,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "240376984777de46ce8374cd30907a1a" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 19:22:44 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/79DA) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=696,owidth=400,oheight=400,obytes=109294,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000063-IAD X-Timer: S1706505972.814028,VS0,VE81 Content-Length: 696 Connection: close
2024-03-03 23:26:36 UTC	696	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 71 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 06 01 02 03 08 10 00 02 01 02 05 04 03 01 00 00 00 00 00 00 00 00 01 02 03 04 11 00 05 12 21 31 13 22 41 61 06 14 15 51 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 Data Ascii: JFIF %%-))-969KKd++&.%#%.&D5//5DNB>BN_UU_wqw q!1"AaQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49915	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=177ac960ba64a8abb0f463dbe9e209b3d20d649d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1142	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 420442 Cache-Control: public, max-age=2592000 Cache-Tag: 352991030521014136013954760138177611573,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100087-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 61 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 352991030521014136013954760138177611573,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "782119761d9a9ef7b0e1a43cfa75091c" Expiration: expiry-date="Fri, 09 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 10 Feb 2024 20:48:09 GMT Server: ECAcc (nya/79B1) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=849,owidth=400,oheight=400,obytes=35383,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100087-IAD X-Timer: S1709087954.136969,VS0,VE61 Content-Length: 849 Connection: close
2024-03-03 23:26:36 UTC	849	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 72 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 06 07 08 05 10 00 02 01 03 02 06 02 03 01 00 00 00 00 00 00 00 01 02 03 04 05 06 00 12 07 11 21 31 41 61 13 22 14 42 71 15 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 Data Ascii: JFIF %%-))-969KKd %%-))-969KKd "r!1Aa"Bq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49916	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fdce58b70-6994-11ec-bbce-f76baafa31ca&client=76f99bdb8f78cd44cc0b&signature=8b20bbd0531958d16c29ca2e9e8e661d182b0bdb HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 978490 Cache-Control: public, max-age=2592000 Cache-Tag: 274736506822183680507373023557343399468,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000166-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 146 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 274736506822183680507373023557343399468,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "c83d881a3d5ce5c56127203830586f67" Expiration: expiry-date="Mon, 22 Apr 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 24 Oct 2023 15:23:51 GMT Server: ECAcc (nya/7923) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=684,owidth=400,oheight=400,obytes=5198 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100065-IAD X-Timer: S1700753900.576050,VS0,VE102 Content-Length: 684 Connection: close
2024-03-03 23:26:36 UTC	684	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 0b 08 00 20 00 20 01 01 11 00 ff c4 00 3d 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 07 09 00 01 03 08 10 00 01 03 03 03 04 03 01 01 00 00 00 00 00 00 00 02 01 03 04 05 06 07 00 11 12 08 13 42 61 22 23 31 21 32 ff da 00 08 01 01 00 00 3f 00 e8 8e ac fa b3 8f 83 a3 b7 6e 5b 8d b1 36 eb 9a c7 77 ed f9 33 01 92 fc 75 d1 f2 32 f0 0d 25 fb d3 29 e4 5c 87 39 c9 97 3d cf 54 aa 38 65 bf 07 a4 17 68 3d 03 43 b0 02 7a 14 d5 d9 79 4f 22 e3 c9 cd cc b6 2e 7a a5 2d c0 2d f8 33 20 bb 47 e8 Data Ascii: JFIFC&""&0-0>>T =Ba"#1!2?n[6w3u2%)\9=T8eh=CzyO".z--3 G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49918	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-04%2F761cfe70-deb2-11ed-8fff-6672c0d730ce&client=76f99bdb8f78cd44cc0b&signature=3e88644a0b664a16743aee5bc603aabc2307f5c2 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1032	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1646155 Cache-Control: public, max-age=2592000 Cache-Tag: 243695100740789414078494434444352384892,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 243695100740789414078494434444352384892,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "10b71b02100238269f906f7773ad889d" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 20:19:51 GMT Server: ECAcc (nya/797F) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=673,owidth=400,oheight=400,obytes=27550,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21944-LGA X-Timer: S1707862241.053788,VS0,VE2 Content-Length: 673 Connection: close
2024-03-03 23:26:36 UTC	673	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 0b 08 00 20 00 20 01 01 11 00 ff c4 00 3d 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 09 00 04 06 07 08 05 10 00 02 01 03 04 02 03 01 01 01 00 00 00 00 00 00 02 03 04 01 05 06 00 07 08 11 42 61 12 21 31 23 32 13 ff da 00 08 01 01 00 00 3f 00 d0 dc b3 e5 9a 36 3d 0b c6 f1 b5 a2 6e 57 35 14 6f 6d fb 4c 04 97 e3 18 3e 46 5e 01 a0 bf 9a 6e 86 e1 ee 24 e6 4c ca 32 5b 9d d5 8c 2e fe 2f 79 55 43 e8 15 4e 80 29 e8 69 a5 85 ee 86 e1 ed dc e5 cc c5 f2 5b 9d a9 8b 2e fe 28 79 51 45 e8 d5 Data Ascii: JFIFC&""&0-0>>T =Ba!1#2?6=nW5omL>F^n$L2[./yUCN)i[.(yQE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49917	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=ae507cb078909cbed31627771fd05c3f42bd428b HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1141	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 559822 Cache-Control: public, max-age=2592000 Cache-Tag: 491141387763699428533225341973349872950,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100074-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 491141387763699428533225341973349872950,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "3c40fbfdf168e3e082389cbefa1bc22e" Expiration: expiry-date="Wed, 17 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 18 Jan 2024 15:01:23 GMT Server: ECAcc (nya/78FC) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=952,owidth=400,oheight=400,obytes=44140,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000143-IAD X-Timer: S1706356574.240953,VS0,VE47 Content-Length: 952 Connection: close
2024-03-03 23:26:36 UTC	952	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 06 06 06 06 08 09 08 09 08 0c 0b 0a 0a 0b 0c 12 0d 0e 0d 0e 0d 12 1b 11 14 11 11 14 11 1b 18 1d 18 16 18 1d 18 2b 22 1e 1e 22 2b 32 2a 28 2a 32 3c 36 36 3c 4c 48 4c 64 64 86 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 75 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 07 08 00 03 01 04 06 10 00 02 02 02 01 03 04 03 01 01 00 00 00 00 00 00 01 02 03 04 05 06 11 00 07 42 12 21 22 61 13 14 16 31 32 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF+""+2(2<66<LHLdd, ,'/&$&/'F7117FQD@DQbXXb\|v\| uB!"a12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49923	76.13.32.141	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	821	OUT	GET /nex/modules/weather/v1?isXHR=true&m_mode=json HTTP/1.1 Host: www.aol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
2024-03-03 23:26:36 UTC	681	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:36 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept x-cached-cookies: weathergeo Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Vary: Accept-Encoding Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS Referrer-Policy: no-referrer-when-downgrade
2024-03-03 23:26:36 UTC	75	IN	Data Raw: 34 35 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 7d 2c 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 69 73 41 63 63 75 57 65 61 74 68 65 72 22 3a 66 61 6c 73 65 7d 7d 2c 22 68 74 6d 6c 22 3a 22 22 7d 0d 0a Data Ascii: 45{"data":{"metadata":{},"response":{"isAccuWeather":false}},"html":""}
2024-03-03 23:26:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49922	76.13.32.141	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	819	OUT	GET /nex/modules/news/v1/?m_mode=json&isXHR=true HTTP/1.1 Host: www.aol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
2024-03-03 23:26:36 UTC	681	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:36 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept x-cached-cookies: weathergeo Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Vary: Accept-Encoding Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS Referrer-Policy: no-referrer-when-downgrade
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 31 30 36 38 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 61 72 74 69 63 6c 65 73 22 3a 5b 7b 22 69 64 22 3a 22 39 35 35 34 34 34 30 62 2d 38 36 38 61 2d 33 63 65 32 2d 38 38 34 35 2d 63 32 33 61 35 61 34 33 64 61 35 36 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 4f 46 46 4e 45 54 22 2c 22 74 69 74 6c 65 22 3a 22 43 65 6c 65 62 72 61 74 69 6f 6e 20 6f 66 20 4c 69 66 65 20 66 6f 72 20 66 61 6c 6c 65 6e 20 46 69 72 65 66 69 67 68 74 65 72 20 54 72 65 76 6f 72 20 42 72 6f 77 6e 20 74 6f 20 62 65 20 68 65 6c 64 20 61 74 20 61 20 56 69 72 67 69 6e 69 61 20 63 68 75 72 63 68 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 54 68 65 20 63 65 72 65 6d 6f 6e 79 20 68 6f 6e 6f 72 69 6e 67 20 Data Ascii: 1068{"data":{"response":{"articles":[{"id":"9554440b-868a-3ce2-8845-c23a5a43da56","contentType":"OFFNET","title":"Celebration of Life for fallen Firefighter Trevor Brown to be held at a Virginia church","description":"","summary":"The ceremony honoring
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 65 2d 66 6f 72 2e 68 74 6d 6c 22 2c 22 70 72 6f 76 69 64 65 72 4c 6f 67 6f 49 6d 67 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 69 64 22 3a 22 64 35 34 30 39 33 61 63 2d 37 39 34 33 2d 33 38 37 62 2d 61 65 39 61 2d 30 30 34 31 39 31 32 39 63 31 63 65 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 4f 46 46 4e 45 54 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6d 6d 75 6e 69 74 79 20 6d 6f 75 72 6e 73 20 61 68 65 61 64 20 6f 66 20 4d 6f 6e 64 61 79 20 66 75 6e 65 72 61 6c 20 66 6f 72 20 66 61 6c 6c 65 6e 20 66 69 72 65 66 69 67 68 74 65 72 20 6b 69 6c 6c 65 64 20 69 6e 20 68 6f 6d 65 20 65 78 70 6c 6f 73 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 4e 65 69 67 68 62 6f 72 73 20 6c 69 76 69 6e 67 20 6e 65 61 72 Data Ascii: e-for.html","providerLogoImgUrl":null},{"id":"d54093ac-7943-387b-ae9a-00419129c1ce","contentType":"OFFNET","title":"Community mourns ahead of Monday funeral for fallen firefighter killed in home explosion","description":"","summary":"Neighbors living near
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 6e 74 65 65 72 2d 66 61 6c 6c 65 6e 2d 66 69 72 65 2d 66 69 67 68 74 65 72 22 2c 22 73 6f 75 72 63 65 22 3a 22 22 2c 22 70 6f 6c 6c 73 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 6d 2f 64 35 34 30 39 33 61 63 2d 37 39 34 33 2d 33 38 37 62 2d 61 65 39 61 2d 30 30 34 31 39 31 32 39 63 31 63 65 2f 63 6f 6d 6d 75 6e 69 74 79 2d 6d 6f 75 72 6e 73 2d 61 68 65 61 64 2d 6f 66 2e 68 74 6d 6c 22 2c 22 70 72 6f 76 69 64 65 72 4c 6f 67 6f 49 6d 67 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 69 64 22 3a 22 38 62 30 64 65 64 61 33 2d 66 66 35 36 2d 33 66 33 35 2d 39 66 64 65 2d 34 63 34 64 66 65 37 62 36 62 35 32 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 4f 46 46 4e 45 54 22 2c 22 74 69 74 6c 65 22 3a 22 Data Ascii: nteer-fallen-fire-fighter","source":"","polls":null,"link":"https://www.aol.com/m/d54093ac-7943-387b-ae9a-00419129c1ce/community-mourns-ahead-of.html","providerLogoImgUrl":null},{"id":"8b0deda3-ff56-3f35-9fde-4c4dfe7b6b52","contentType":"OFFNET","title":"
2024-03-03 23:26:36 UTC	313	IN	Data Raw: 61 6c 73 65 2c 22 63 61 74 65 67 6f 72 79 4c 61 62 65 6c 22 3a 22 55 2e 53 2e 22 2c 22 70 72 6f 76 69 64 65 72 43 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 62 63 77 61 73 68 69 6e 67 74 6f 6e 2e 63 6f 6d 2f 6e 65 77 73 2f 6c 6f 63 61 6c 2f 72 65 73 74 61 75 72 61 6e 74 2d 63 61 74 63 68 65 73 2d 66 69 72 65 2d 69 6e 2d 6e 6f 72 74 68 77 65 73 74 2d 64 63 2f 33 35 35 37 35 38 32 2f 22 2c 22 73 6f 75 72 63 65 22 3a 22 22 2c 22 70 6f 6c 6c 73 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 6d 2f 38 62 30 64 65 64 61 33 2d 66 66 35 36 2d 33 66 33 35 2d 39 66 64 65 2d 34 63 34 64 66 65 37 62 36 62 35 32 2f 72 65 73 74 61 75 72 61 6e 74 2d 63 61 74 63 68 65 73 2d 66 69 72 Data Ascii: alse,"categoryLabel":"U.S.","providerContentUrl":"https://www.nbcwashington.com/news/local/restaurant-catches-fire-in-northwest-dc/3557582/","source":"","polls":null,"link":"https://www.aol.com/m/8b0deda3-ff56-3f35-9fde-4c4dfe7b6b52/restaurant-catches-fir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49919	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=a55197107cb3e922d2624bc588f9c497bb452282 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1389	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 410381 Cache-Control: public, max-age=2592000 Cache-Tag: 242478970273792402798397858869058529945,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 242478970273792402798397858869058529945,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "89d3eccc7fa224aa00717aef439265b8" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 08:15:15 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7978) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1451,owidth=400,oheight=400,obytes=75663,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100122-IAD X-Timer: S1709098015.204286,VS0,VE94 Content-Length: 1451 Connection: close
2024-03-03 23:26:36 UTC	1451	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7f 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 06 08 00 05 02 07 09 10 00 02 02 01 03 04 02 02 03 01 00 00 00 00 00 00 01 02 03 05 04 00 06 12 07 11 31 41 21 22 13 71 14 15 23 52 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T 1A!"q#R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49924	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	603	OUT	GET /p2?c1=2&c2=1000009&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1709508393487 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=17F9765074314b78a30f4d41709508394
2024-03-03 23:26:36 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:26:36 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 fb71bc40c2ca2e3f3af674bf6527ac8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: 6Lm5JjugkLoVPr-7R7c56j48p1eidEnOZzxTcYu8pC2QCRTG7Qv7Tg==
2024-03-03 23:26:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49920	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=f96c8983d15c2cd551b47caf27cd710ec77e61ad HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1479	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 790204 Cache-Control: public, max-age=2592000 Cache-Tag: 455011173027560281408501159700854956092,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21976-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 39 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 455011173027560281408501159700854956092,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "c5072f4f3a2588f7b3c1e237a3a1a4b3" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 08:25:55 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/78E7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1414,owidth=400,oheight=400,obytes=12220,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21976-LGA X-Timer: S1708718192.168775,VS0,VE39 Content-Length: 1414 Connection: close
2024-03-03 23:26:36 UTC	1414	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 04 04 04 04 04 04 05 05 05 05 07 07 06 07 07 0a 09 08 08 09 0a 0f 0a 0b 0a 0b 0a 0f 16 0e 10 0e 0e 10 0e 16 14 18 13 12 13 18 14 23 1c 18 18 1c 23 29 22 20 22 29 31 2c 2c 31 3e 3b 3e 51 51 6d ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7a 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 09 03 05 08 06 10 00 02 02 02 00 06 03 01 01 00 00 00 00 00 00 00 01 02 03 04 05 06 00 07 08 11 12 42 13 22 61 31 14 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 07 00 01 03 Data Ascii: JFIF&""&0-0>>T##)" ")1,,1>;>QQm zB"a1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49925	34.95.69.49	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	336	OUT	GET /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	230	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Sun, 03 Mar 2024 23:26:36 GMT Content-Type: application/octet-stream Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49928	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	563	OUT	GET /rx/ev/builds/1.3.9/pframe.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	856	IN	HTTP/1.1 200 OK x-amz-id-2: 5iCIeqcGxmXUf8bZp1HTF7md7hXmZrxhg5oGtIL9P7XmujNbHQFfitobk2eANOStqbGwhww7MhI= x-amz-request-id: 90DET20C2Y74CW8E Date: Wed, 28 Feb 2024 17:25:05 GMT Last-Modified: Tue, 27 Feb 2024 19:48:07 GMT ETag: "6c49d081f68c8272b110412c4ad0418b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: dfIdNlG_3WhP8kyl8Lhu87OKcb9bTBRw Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 119287 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 367292 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 31 35 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 69 3d 30 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 3c 65 3b 69 2b 2b 29 74 2b 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 2e 6c 65 6e 67 74 68 3b 76 61 72 20 73 3d 41 72 72 61 79 28 74 29 2c 6e 3d 30 3b 66 6f 72 28 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 66 6f 72 28 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 2c 72 3d 30 2c 61 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 61 3b 72 2b 2b 2c 6e 2b 2b 29 73 5b 6e 5d 3d 6f 5b 72 5d 3b 72 65 74 75 72 Data Ascii: (()=>{var t={1556:function(t,i){"use strict";var e=this&&this.__spreadArrays\|\|function(){for(var t=0,i=0,e=arguments.length;i<e;i++)t+=arguments[i].length;var s=Array(t),n=0;for(i=0;i<e;i++)for(var o=arguments[i],r=0,a=o.length;r<a;r++,n++)s[n]=o[r];retur
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 28 65 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6f 2c 30 29 29 2c 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 7d 29 2c 74 68 69 73 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 62 6c 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 5b 65 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 69 66 28 74 68 69 73 2e 6c 29 7b 69 66 28 74 20 69 6e 20 74 68 69 73 2e 6c 29 7b 76 61 72 20 73 3d 74 68 69 73 2e 6c 5b 74 5d 3b 73 26 26 74 68 69 73 2e 5f 28 73 2c 74 2c 21 31 2c 69 29 7d 76 61 72 20 6e 3d 74 68 69 73 2e 6c 5b 22 2a 22 5d 3b 6e Data Ascii: (e,Array.prototype.slice.call(o,0)),s.removeEventListener(t,n)}),this);return n},t.prototype.publish=function(t){for(var i=[],e=1;e<arguments.length;e++)i[e-1]=arguments[e];if(this.l){if(t in this.l){var s=this.l[t];s&&this._(s,t,!1,i)}var n=this.l["*"];n
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 21 3d 3d 65 2e 67 26 26 65 2e 67 2e 77 69 6e 64 6f 77 3f 65 2e 67 2e 77 69 6e 64 6f 77 3a 7b 7d 2c 6e 3d 73 2e 6e 61 76 69 67 61 74 6f 72 3f 73 2e 6e 61 76 69 67 61 74 6f 72 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 3a 7b 7d 2c 6f 3d 6e 2e 75 73 65 72 41 67 65 6e 74 3f 6e 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 3c 5b 41 2d 5a 61 2d 7a 5d 2b 2e 2a 3f 28 5c 2f 3e 7c 3e 2e 2a 3f 3c 5c 2f 5b 41 2d 5a 61 2d 7a 5d 2b 3e 29 7c 6a 61 76 61 73 63 72 69 70 74 3a 2f 67 2c 22 22 29 3a 22 22 2c 72 3d 6e 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 2c 61 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ndow?window:void 0!==e.g&&e.g.window?e.g.window:{},n=s.navigator?s.navigator:"undefined"!=typeof navigator?navigator:{},o=n.userAgent?n.userAgent.toLowerCase().replace(/<[A-Za-z]+.?(\/>\|>.?<\/[A-Za-z]+>)\|javascript:/g,""):"",r=n.userAgentData,a=function
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 26 26 64 28 2f 66 69 72 65 66 6f 78 5c 2f 28 5b 5e 5c 73 5d 2a 29 2f 2e 65 78 65 63 28 6f 29 29 2c 69 2e 61 6e 64 72 6f 69 64 3d 6c 28 22 61 6e 64 72 6f 69 64 22 29 7c 7c 2f 61 6e 64 72 6f 69 64 2f 2e 74 65 73 74 28 6f 29 2c 69 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 69 2e 61 6e 64 72 6f 69 64 26 26 21 2f 6d 6f 62 69 6c 65 2f 2e 74 65 73 74 28 6f 29 2c 69 2e 68 74 63 5f 6f 6e 65 3d 2f 68 74 63 5f 6f 6e 65 2f 2e 74 65 73 74 28 6f 29 2c 69 2e 76 69 7a 69 6f 3d 2f 76 69 7a 69 6f 2f 2e 74 65 73 74 28 6f 29 7c 7c 22 76 69 7a 69 6f 22 3d 3d 3d 75 28 22 6d 61 6e 22 29 2c 69 2e 74 69 76 6f 3d 2f 74 69 76 6f 2f 2e 74 65 73 74 28 6f 29 2c 69 2e 70 72 65 73 74 6f 3d 69 2e 6f 70 65 72 61 26 26 2f 70 72 65 73 74 6f 2f 69 2e 74 65 73 74 28 6f 29 2c 69 2e 66 69 6f Data Ascii: &&d(/firefox\/([^\s]*)/.exec(o)),i.android=l("android")\|\|/android/.test(o),i.androidTablet=i.android&&!/mobile/.test(o),i.htc_one=/htc_one/.test(o),i.vizio=/vizio/.test(o)\|\|"vizio"===u("man"),i.tivo=/tivo/.test(o),i.presto=i.opera&&/presto/i.test(o),i.fio
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 21 3d 3d 68 3f 68 3a 76 6f 69 64 20 30 21 3d 3d 65 2e 67 26 26 65 2e 67 2e 74 76 3f 65 2e 67 2e 74 76 3a 7b 7d 3b 69 66 28 69 2e 63 6c 61 73 73 3d 69 2e 75 61 2c 69 2e 76 69 7a 69 6f 29 69 2e 6f 73 3d 22 76 69 7a 69 6f 22 2c 69 2e 63 6c 61 73 73 3d 75 28 22 63 6c 61 73 73 22 29 7c 7c 75 28 22 73 6f 63 22 29 2c 68 26 26 68 2e 74 74 73 26 26 28 69 2e 63 6c 61 73 73 2b 3d 22 2d 74 74 73 22 29 3b 65 6c 73 65 20 69 66 28 69 2e 74 69 76 6f 29 69 2e 6f 73 3d 22 74 69 76 6f 22 2c 2f 74 63 64 38 34 39 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 54 43 44 38 34 39 22 3a 2f 74 63 64 38 64 39 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 54 43 44 38 44 39 22 3a 2f 74 63 64 38 66 39 2f 2e 74 65 73 74 28 Data Ascii: ){var h=void 0!==h?h:void 0!==e.g&&e.g.tv?e.g.tv:{};if(i.class=i.ua,i.vizio)i.os="vizio",i.class=u("class")\|\|u("soc"),h&&h.tts&&(i.class+="-tts");else if(i.tivo)i.os="tivo",/tcd849/.test(o)?i.class="TCD849":/tcd8d9/.test(o)?i.class="TCD8D9":/tcd8f9/.test(
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 42 52 41 56 49 41 22 3a 69 2e 63 6c 61 73 73 3d 22 64 65 66 61 75 6c 74 22 29 3a 69 2e 70 6c 61 79 73 74 61 74 69 6f 6e 3f 28 69 2e 6f 73 3d 22 70 6c 61 79 73 74 61 74 69 6f 6e 22 2c 2f 34 70 72 6f 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 34 50 52 4f 22 3a 2f 70 6c 61 79 73 74 61 74 69 6f 6e 20 34 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 34 22 3a 2f 76 69 74 61 2f 69 2e 74 65 73 74 28 6f 29 26 26 28 69 2e 63 6c 61 73 73 3d 22 56 49 54 41 22 29 29 3a 69 2e 66 69 6f 73 3f 28 69 2e 6f 73 3d 22 66 69 6f 73 22 2c 2f 73 74 62 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 53 54 42 22 3a 2f 76 6d 73 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 56 4d 53 Data Ascii: /.test(o)?i.class="BRAVIA":i.class="default"):i.playstation?(i.os="playstation",/4pro/.test(o)?i.class="4PRO":/playstation 4/.test(o)?i.class="4":/vita/i.test(o)&&(i.class="VITA")):i.fios?(i.os="fios",/stb/.test(o)?i.class="STB":/vms/.test(o)?i.class="VMS
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 46 4f 3d 22 31 30 30 22 2c 69 2e 45 5f 57 41 52 4e 49 4e 47 3d 22 32 30 30 22 2c 69 2e 45 5f 59 56 41 50 3d 22 33 30 30 22 2c 69 2e 45 5f 50 4c 41 59 45 52 3d 22 34 30 30 22 2c 69 2e 45 5f 50 4c 41 59 45 52 5f 44 52 4d 3d 22 34 31 30 22 2c 69 2e 45 5f 53 41 50 49 5f 41 42 53 54 52 41 43 54 3d 22 35 30 30 22 2c 69 2e 45 5f 53 41 50 49 5f 53 54 52 45 41 4d 3d 22 35 30 31 22 2c 69 2e 45 5f 53 41 50 49 5f 4e 43 50 5f 4a 41 52 56 49 53 3d 22 35 30 36 22 2c 69 2e 45 5f 42 52 49 47 48 54 43 4f 56 45 3d 22 37 30 30 22 2c 69 2e 49 4e 46 4f 5f 43 4f 44 45 53 3d 7b 45 5f 53 41 50 49 5f 4c 49 43 45 4e 53 45 5f 45 52 52 4f 52 3a 22 32 30 30 22 2c 45 5f 53 41 50 49 5f 55 4e 41 56 41 49 4c 41 42 4c 45 5f 54 45 4d 50 3a 22 32 30 31 22 2c 45 5f 53 41 50 49 5f 47 45 4f 3a Data Ascii: FO="100",i.E_WARNING="200",i.E_YVAP="300",i.E_PLAYER="400",i.E_PLAYER_DRM="410",i.E_SAPI_ABSTRACT="500",i.E_SAPI_STREAM="501",i.E_SAPI_NCP_JARVIS="506",i.E_BRIGHTCOVE="700",i.INFO_CODES={E_SAPI_LICENSE_ERROR:"200",E_SAPI_UNAVAILABLE_TEMP:"201",E_SAPI_GEO:
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 3a 22 37 36 30 22 2c 45 5f 49 4e 54 45 52 4e 41 4c 5f 56 49 4f 4c 41 54 49 4f 4e 3a 22 36 30 30 22 2c 45 5f 53 45 54 55 50 5f 45 52 52 4f 52 3a 22 34 30 34 22 2c 45 5f 49 4e 56 41 4c 49 44 5f 43 4f 4e 46 49 47 3a 22 36 30 31 22 2c 45 5f 52 45 43 4f 56 45 52 59 5f 46 41 49 4c 55 52 45 3a 22 36 30 32 22 2c 45 5f 4e 4f 5f 52 45 4e 44 45 52 45 52 5f 46 4f 55 4e 44 3a 22 36 30 34 22 7d 2c 69 2e 50 4c 41 59 45 52 5f 44 52 4d 5f 43 4f 44 45 53 3d 7b 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 5f 4f 53 3a 22 31 22 2c 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 5f 42 52 4f 57 53 45 52 3a 22 32 22 2c 45 5f 45 4d 45 5f 4d 49 53 53 49 4e 47 3a 22 33 22 2c 45 5f 49 4e 49 54 3a 22 34 22 2c 45 5f 43 4f 4e 46 49 47 3a 22 35 22 2c 45 5f 43 45 52 54 50 41 54 48 5f 4d 49 53 53 49 4e Data Ascii: :"760",E_INTERNAL_VIOLATION:"600",E_SETUP_ERROR:"404",E_INVALID_CONFIG:"601",E_RECOVERY_FAILURE:"602",E_NO_RENDERER_FOUND:"604"},i.PLAYER_DRM_CODES={E_UNSUPPORTED_OS:"1",E_UNSUPPORTED_BROWSER:"2",E_EME_MISSING:"3",E_INIT:"4",E_CONFIG:"5",E_CERTPATH_MISSIN
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 58 48 52 5f 54 49 4d 45 4f 55 54 3d 69 2e 58 48 52 5f 43 4f 52 53 3d 69 2e 58 48 52 5f 45 52 52 4f 52 3d 76 6f 69 64 20 30 3b 76 61 72 20 73 3d 65 28 38 37 32 39 29 2c 6e 3d 65 28 39 30 30 35 29 2c 6f 3d 65 28 31 35 34 33 29 2c 72 3d 65 28 36 31 32 30 29 3b 69 2e 58 48 52 5f 45 52 52 4f 52 3d 22 58 48 52 20 65 72 72 6f 72 22 2c 69 2e 58 48 52 5f 43 4f 52 53 3d 22 58 48 52 20 43 4f 52 53 22 2c 69 2e 58 48 52 5f 54 49 4d 45 4f 55 54 3d 22 58 48 52 20 72 65 71 75 65 73 74 20 74 69 6d 65 64 20 6f 75 74 22 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 Data Ascii: rict";Object.defineProperty(i,"__esModule",{value:!0}),i.XHR_TIMEOUT=i.XHR_CORS=i.XHR_ERROR=void 0;var s=e(8729),n=e(9005),o=e(1543),r=e(6120);i.XHR_ERROR="XHR error",i.XHR_CORS="XHR CORS",i.XHR_TIMEOUT="XHR request timed out";var a=function(){function t(
2024-03-03 23:26:36 UTC	1300	IN	Data Raw: 26 62 21 3d 3d 77 29 7b 76 61 72 20 45 3d 69 2e 58 48 52 5f 43 4f 52 53 2b 22 3a 20 6f 72 69 67 69 6e 48 65 61 64 65 72 20 3d 22 2b 28 62 7c 7c 22 22 29 2b 22 3a 20 6d 79 4f 72 69 67 69 6e 20 3d 22 2b 77 3b 76 2e 63 61 6c 6c 28 6c 2c 6e 65 77 20 45 72 72 6f 72 28 45 29 2c 22 64 65 66 61 75 6c 74 22 2c 22 63 6f 72 73 22 29 7d 65 6c 73 65 7b 76 61 72 20 49 3d 6e 2e 74 69 6d 65 44 69 66 66 3e 3d 68 3f 69 2e 58 48 52 5f 54 49 4d 45 4f 55 54 3a 69 2e 58 48 52 5f 45 52 52 4f 52 3b 76 2e 63 61 6c 6c 28 6c 2c 6e 65 77 20 45 72 72 6f 72 28 49 2b 22 3a 20 74 69 6d 65 44 69 66 66 20 3d 22 2b 6e 2e 74 69 6d 65 44 69 66 66 29 2c 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 70 72 65 76 69 6f 75 73 53 74 61 74 65 29 7c 7c 28 6e 75 6c 6c 3d 3d 3d 28 75 3d 6e 75 Data Ascii: &b!==w){var E=i.XHR_CORS+": originHeader ="+(b\|\|"")+": myOrigin ="+w;v.call(l,new Error(E),"default","cors")}else{var I=n.timeDiff>=h?i.XHR_TIMEOUT:i.XHR_ERROR;v.call(l,new Error(I+": timeDiff ="+n.timeDiff),(null==n?void 0:n.previousState)\|\|(null===(u=nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49929	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-04%2F024bb600-bc29-11ec-be3f-c8aa85a55bda&client=76f99bdb8f78cd44cc0b&signature=b9513e72c8af6f42b1e2f462026b9e7c280d5a3a HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1142	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 999528 Cache-Control: public, max-age=2592000 Cache-Tag: 237237723639567054596299553358280076841,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000071-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 237237723639567054596299553358280076841,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "ecfb9d0fe05a55da841156c2e67f42c0" Expiration: expiry-date="Fri, 19 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 20 Jan 2024 18:30:55 GMT Server: ECAcc (nya/790E) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=967,owidth=400,oheight=400,obytes=109891,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100118-IAD X-Timer: S1705916869.612605,VS0,VE57 Content-Length: 967 Connection: close
2024-03-03 23:26:36 UTC	967	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 09 09 09 09 0a 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 15 13 11 11 13 15 1f 16 18 16 18 16 1f 30 1e 23 1e 1e 23 1e 30 2a 33 29 27 29 33 2a 4c 3b 35 35 3b 4c 57 49 45 49 57 6a 5f 5f 6a 85 7f 85 ae ae ea ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7c 00 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 08 05 06 07 04 10 00 02 01 03 03 02 06 01 05 00 00 00 00 00 00 00 01 02 03 04 05 11 00 06 12 07 13 21 31 41 42 51 61 71 14 16 22 32 81 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd0##03)')3L;55;LWIEIWj__j \|!1ABQaq"2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49931	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=5aa61d192ca3818eb6ba7e0db0dc91240b4ed0b6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 420996 Cache-Control: public, max-age=2592000 Cache-Tag: 309736351821732764899606652667715375266,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100078-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 105 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 309736351821732764899606652667715375266,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "33e862cd5bde2d44324a410ddc377898" Expiration: expiry-date="Wed, 29 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 30 Nov 2023 02:30:01 GMT Server: ECAcc (nya/78FC) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1057,owidth=400,oheight=400,obytes=9125 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000087-IAD X-Timer: S1703903400.014900,VS0,VE1 Content-Length: 1057 Connection: close
2024-03-03 23:26:36 UTC	1057	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7d 00 01 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 08 07 00 01 04 03 10 00 01 03 02 06 01 05 01 01 00 00 00 00 00 00 00 02 01 03 05 04 06 00 07 11 12 21 22 41 14 15 31 61 81 62 92 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 Data Ascii: JFIF&&,%#%,5//5C?CWWu, ,'/&$&/'F7117FQD@DQbXXb\|v\| }!"A1ab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49926	23.40.179.72	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	718	OUT	GET /ucreative.php?cv=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:36 UTC	342	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 7668 Content-Type: application/javascript x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Cache-Control: max-age=432000 Expires: Fri, 08 Mar 2024 23:26:36 GMT Date: Sun, 03 Mar 2024 23:26:36 GMT Connection: close
2024-03-03 23:26:36 UTC	3266	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 69 73 53 65 74 28 76 61 6c 29 20 7b 0a 20 20 20 20 73 77 69 74 63 68 20 28 74 79 70 65 6f 66 20 76 61 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 73 74 72 69 6e 67 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 76 61 6c 20 21 3d 3d 20 22 22 20 26 26 20 76 61 6c 20 21 3d 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 20 21 3d 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: function isSet(val) { switch (typeof val) { case "string": return val !== undefined && val !== "" && val !== null; case "object": return val !== null; case "number": case "boolean": r
2024-03-03 23:26:36 UTC	4402	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 63 74 69 6f 6e 49 64 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 61 75 63 74 69 6f 6e 49 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 69 64 64 65 72 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 62 69 64 64 65 72 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 45 78 74 65 72 6e 61 6c 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 69 73 45 78 74 65 72 6e 61 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 50 6d 70 3a 20 68 62 54 61 72 67 65 74 69 6e 67 50 61 72 61 6d 73 2e 69 73 50 6d 70 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 4f 62 6a 3a 20 68 62 43 75 73 74 6f 6d 50 61 72 61 6d 73 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 65 6c Data Ascii: auctionId: hbTargetingParams.auctionId, bidder: hbTargetingParams.bidder, isExternal: hbTargetingParams.isExternal, isPmp: hbTargetingParams.isPmp, customObj: hbCustomParams }); } el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49932	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-09%2Fc1ee04e0-4dcd-11ee-97bf-83c5420da580&client=76f99bdb8f78cd44cc0b&signature=914d0608eb4f953292a2fc317324e981b551aa42 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1360	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 944424 Cache-Control: public, max-age=2592000 Cache-Tag: 406919867905959836314769128516641827844,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100052-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 435cc8dffb0c89392c22a15dba823a3c cld_latency: 235 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 406919867905959836314769128516641827844,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "a1496da93a25b70bcec1511e3615d45a" Expiration: expiry-date="Thu, 07 Mar 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 08 Sep 2023 02:00:01 GMT Referrer-Policy: no-referrer-when-downgrade Server: ECAcc (nya/7915) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,owidth=429,oheight=429,obytes=13671 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Request-Id: 435cc8dffb0c89392c22a15dba823a3c X-Served-By: cache-iad-kjyo7100020-IAD X-Timer: S1700787973.731594,VS0,VE1 X-XSS-Protection: 1; mode=block Content-Length: 1047 Connection: close
2024-03-03 23:26:36 UTC	1047	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 07 07 07 07 07 07 08 08 08 08 0b 0b 0a 0b 0b 10 0e 0d 0d 0e 10 18 11 12 11 12 11 18 24 16 1a 16 16 1a 16 24 20 26 1f 1d 1f 26 20 39 2d 27 27 2d 39 42 37 34 37 42 4f 47 47 4f 64 5f 64 83 83 b0 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7b 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 08 01 02 05 06 07 04 10 00 02 01 03 03 04 02 02 03 00 00 00 00 00 00 00 01 02 03 04 05 06 00 07 12 11 21 31 61 22 42 08 13 14 41 81 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&""&0-0>>T$$ && 9-''-9B747BOGGOd_d {!1a"BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49930	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FubvamaAftyHAO5MJFd90Vw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20190508%2F500x500%2Fraptors_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=5adab5dab53001d1bf80a106504ad949370eff11 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1867250 Cache-Control: public, max-age=2592000 Cache-Tag: 223558022398393962449871848256016745169,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100112-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 223558022398393962449871848256016745169,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "b435160bc4ccd46db19623f36d954e5a" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (nya/1C75) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2178,owidth=50,oheight=50,obytes=2708,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100112-IAD X-Timer: S1707641146.223279,VS0,VE2 Content-Length: 2178 Connection: close
2024-03-03 23:26:36 UTC	2178	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff fe fe f7 da e2 ff ff ff ff ff ff ff ff ff fe f8 f9 ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb ec f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc f0 f3 ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 e0 e6 ff ff ff fa e9 ed ff ff ff f9 e4 e9 fc f0 f3 ff ff ff ff ff ff fd f5 f7 ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49927	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCFF0_QHZWgDjeadZBQlLag--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhornets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=69eddfe94a1ed0b365b7c3ed51b1ba0235428ce4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133417 Cache-Control: public, max-age=2592000 Cache-Tag: 317323384734751716278943720848056494077,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21945-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: d5e680baa07161e302e016743057565f cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 317323384734751716278943720848056494077,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "a46e72a8049d91128efc6cfd99da2fd9" Last-Modified: Wed, 07 Feb 2024 02:53:41 GMT Server: ECAcc (nya/7929) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2225,owidth=50,oheight=50,obytes=2931,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: d5e680baa07161e302e016743057565f X-Served-By: cache-lga21945-LGA X-Timer: S1707374979.314342,VS0,VE1 Content-Length: 2225 Connection: close
2024-03-03 23:26:36 UTC	2225	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 6f 6b 8a a1 a1 a4 a1 a1 a4 a1 a1 a4 a1 a1 a4 5d 56 81 a1 a1 a4 a1 a1 a4 71 6d 8b a1 a1 a4 a1 a1 a4 a1 a1 a4 a1 a1 a4 a0 a0 a4 a1 a1 a4 a1 a1 a4 9d 9d a2 6e 69 8a 8c 8a 99 91 8f 9c 79 76 8f a1 a1 a4 a1 a1 a4 98 97 9f a1 a1 a4 8c 8a 9a 54 4d 7c 92 91 9c a1 a1 a4 7f 7c 93 88 85 97 8f 8d 9a 70 6c 8b 7a 77 90 9f 9e a3 a0 a0 a4 a1 a1 a4 a1 a1 a4 8a 87 98 a1 a1 a4 a1 a1 a4 80 7d 93 a1 a1 a4 9a 9a a1 65 60 86 7c 79 92 6b 66 88 5e 58 82 67 62 86 69 64 87 67 62 87 8b 89 99 93 92 9d 87 85 97 a1 a1 a4 63 5d 84 66 61 86 a0 a0 a3 93 92 9d 8d 8b 9a 73 6e 8c 9b 9b a1 6b 66 88 95 93 9e a1 a1 a4 77 74 8f 9e 9e a3 81 7d 93 5b 54 80 72 6d 8c 80 Data Ascii: PNGIHDR22)xPLTEGpLok]VqmniyvTM\|\|plzw}e`\|ykf^Xgbidgbc]fasnkfwt}[Trm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49933	23.40.179.72	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	716	OUT	GET /ss/nes/player.js HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:36 UTC	372	IN	HTTP/1.1 200 OK Content-Length: 267811 Content-Type: text/javascript; charset=utf-8 ETag: "7167555196898040665" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Pragma: max-age=604800 Cache-Control: max-age=1800 Expires: Sun, 03 Mar 2024 23:56:36 GMT Date: Sun, 03 Mar 2024 23:26:36 GMT Connection: close
2024-03-03 23:26:36 UTC	3317	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-03-03 23:26:36 UTC	16384	IN	Data Raw: 2c 69 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 69 29 2c 61 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 3b 61 5b 74 5d 26 26 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 5b 74 5d 29 2c 61 2e 6c 65 6e 67 74 68 3f 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 61 5b 74 5d 29 3a 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 2e 63 73 73 2c 69 3d 6e 2e 6d 65 64 69 61 2c 6f 3d 6e 2e 73 6f 75 72 63 65 4d 61 70 3b 69 66 28 69 3f 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 65 64 69 61 22 2c 69 29 3a 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 6d 65 64 69 61 22 29 2c 6f 26 26 22 75 6e 64 65 66 69 Data Ascii: ,i);else{var o=document.createTextNode(i),a=e.childNodes;a[t]&&e.removeChild(a[t]),a.length?e.insertBefore(o,a[t]):e.appendChild(o)}}function p(e,t,n){var r=n.css,i=n.media,o=n.sourceMap;if(i?e.setAttribute("media",i):e.removeAttribute("media"),o&&"undefi
2024-03-03 23:26:36 UTC	16384	IN	Data Raw: 28 65 29 2c 74 29 7d 7d 2c 33 35 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 38 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 38 35 34 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 72 2e 63 6f 6e 73 6f 6c 65 3b 6e 26 26 6e 2e 65 72 72 6f 72 26 26 28 31 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 6e 2e 65 72 72 6f 72 28 65 29 3a 6e 2e 65 72 72 6f 72 28 65 2c 74 29 29 7d 7d 2c 34 39 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 35 30 30 35 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 28 22 64 6f 63 75 6d 65 6e 74 22 2c 22 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 22 29 7d 2c 34 36 36 34 Data Ascii: (e),t)}},3501:function(e){e.exports={}},842:function(e,t,n){var r=n(7854);e.exports=function(e,t){var n=r.console;n&&n.error&&(1==arguments.length?n.error(e):n.error(e,t))}},490:function(e,t,n){var r=n(5005);e.exports=r("document","documentElement")},4664
2024-03-03 23:26:36 UTC	4635	IN	Data Raw: 75 72 6e 20 65 2e 6c 61 73 74 49 6e 64 65 78 3d 32 2c 6e 75 6c 6c 21 3d 65 2e 65 78 65 63 28 22 73 74 72 22 29 7d 29 29 3b 65 2e 65 78 70 6f 72 74 73 3d 7b 42 52 4f 4b 45 4e 5f 43 41 52 45 54 3a 73 2c 4d 49 53 53 45 44 5f 53 54 49 43 4b 59 3a 61 2c 55 4e 53 55 50 50 4f 52 54 45 44 5f 59 3a 6f 7d 7d 2c 39 34 34 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 2c 69 3d 6e 28 37 38 35 34 29 2e 52 65 67 45 78 70 3b 65 2e 65 78 70 6f 72 74 73 3d 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 28 22 2e 22 2c 22 73 22 29 3b 72 65 74 75 72 6e 21 28 65 2e 64 6f 74 41 6c 6c 26 26 65 2e 65 78 65 63 28 22 5c 6e 22 29 26 26 22 73 22 3d 3d 3d 65 2e 66 6c 61 67 73 29 7d 29 29 7d 2c 37 31 36 38 3a 66 75 6e 63 74 Data Ascii: urn e.lastIndex=2,null!=e.exec("str")}));e.exports={BROKEN_CARET:s,MISSED_STICKY:a,UNSUPPORTED_Y:o}},9441:function(e,t,n){var r=n(7293),i=n(7854).RegExp;e.exports=r((function(){var e=i(".","s");return!(e.dotAll&&e.exec("\n")&&"s"===e.flags)}))},7168:funct
2024-03-03 23:26:36 UTC	16384	IN	Data Raw: 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 72 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 69 28 74 29 3f 74 3a 74 2b 22 22 7d 7d 2c 31 36 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 72 5b 6e 28 35 31 31 32 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 2c 65 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 72 29 7d 2c 31 33 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 34 38 29 2c 69 3d 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 53 79 6d 62 6f 6c 22 3d 3d 3d 72 28 65 29 29 74 68 72 6f 77 20 54 79 70 65 Data Ascii: );e.exports=function(e){var t=r(e,"string");return i(t)?t:t+""}},1694:function(e,t,n){var r={};r[n(5112)("toStringTag")]="z",e.exports="[object z]"===String(r)},1340:function(e,t,n){var r=n(648),i=String;e.exports=function(e){if("Symbol"===r(e))throw Type
2024-03-03 23:26:36 UTC	16384	IN	Data Raw: 69 22 29 7d 29 29 29 29 29 7b 66 6f 72 28 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 6c 2c 66 3d 75 28 50 2c 74 68 69 73 29 2c 76 3d 64 28 65 29 2c 6d 3d 76 6f 69 64 20 30 3d 3d 3d 74 2c 67 3d 5b 5d 2c 62 3d 65 3b 69 66 28 21 66 26 26 76 26 26 6d 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 46 29 72 65 74 75 72 6e 20 65 3b 69 66 28 28 76 7c 7c 75 28 50 2c 65 29 29 26 26 28 65 3d 65 2e 73 6f 75 72 63 65 2c 6d 26 26 28 74 3d 70 28 62 29 29 29 2c 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 68 28 65 29 2c 74 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 22 3a 68 28 74 29 2c 62 3d 65 2c 77 26 26 22 64 6f 74 41 6c 6c 22 69 6e 20 55 26 26 28 72 3d 21 21 74 26 26 52 28 74 2c 22 73 22 29 3e 2d 31 29 Data Ascii: i")}))))){for(var F=function(e,t){var n,r,i,o,a,l,f=u(P,this),v=d(e),m=void 0===t,g=[],b=e;if(!f&&v&&m&&e.constructor===F)return e;if((v\|\|u(P,e))&&(e=e.source,m&&(t=p(b))),e=void 0===e?"":h(e),t=void 0===t?"":h(t),b=e,w&&"dotAll"in U&&(r=!!t&&R(t,"s")>-1)
2024-03-03 23:26:36 UTC	7952	IN	Data Raw: 41 3b 45 41 43 41 2c 75 42 41 41 41 3b 45 41 43 41 2c 61 41 41 41 3b 45 41 43 41 2c 63 41 41 41 3b 45 41 43 41 2c 6d 42 41 41 41 3b 41 41 39 42 46 3b 41 41 69 43 41 3b 45 41 43 45 2c 57 41 41 41 3b 45 41 43 41 2c 59 41 41 41 3b 45 41 43 41 2c 6b 42 41 41 41 3b 45 41 43 41 2c 4f 41 41 41 3b 45 41 43 41 2c 4d 41 41 41 3b 45 41 43 41 2c 53 41 41 41 3b 45 41 43 41 2c 55 41 41 41 3b 45 41 43 41 2c 61 41 41 41 3b 45 41 43 41 2c 63 41 41 41 3b 45 41 43 41 2c 65 41 41 41 3b 41 41 2f 42 46 3b 41 41 6b 43 41 3b 45 41 43 45 2c 6b 42 41 41 41 3b 45 41 43 41 2c 63 41 41 41 3b 45 41 43 41 2c 65 41 41 41 3b 41 41 68 43 46 3b 41 41 6d 43 41 3b 45 41 43 45 2c 6b 42 41 41 41 3b 45 41 43 41 2c 51 41 41 41 3b 45 41 43 41 2c 59 41 41 41 3b 45 41 43 41 2c 59 41 41 41 3b 45 41 Data Ascii: A;EACA,uBAAA;EACA,aAAA;EACA,cAAA;EACA,mBAAA;AA9BF;AAiCA;EACE,WAAA;EACA,YAAA;EACA,kBAAA;EACA,OAAA;EACA,MAAA;EACA,SAAA;EACA,UAAA;EACA,aAAA;EACA,cAAA;EACA,eAAA;AA/BF;AAkCA;EACE,kBAAA;EACA,cAAA;EACA,eAAA;AAhCF;AAmCA;EACE,kBAAA;EACA,QAAA;EACA,YAAA;EACA,YAAA;EA
2024-03-03 23:26:36 UTC	16384	IN	Data Raw: 5d 2e 75 70 64 61 74 65 72 28 70 29 3b 65 6c 73 65 7b 76 61 72 20 66 3d 69 28 70 2c 72 29 3b 72 2e 62 79 49 6e 64 65 78 3d 73 2c 74 2e 73 70 6c 69 63 65 28 73 2c 30 2c 7b 69 64 65 6e 74 69 66 69 65 72 3a 64 2c 75 70 64 61 74 65 72 3a 66 2c 72 65 66 65 72 65 6e 63 65 73 3a 31 7d 29 7d 61 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 64 6f 6d 41 50 49 28 74 29 3b 72 65 74 75 72 6e 20 6e 2e 75 70 64 61 74 65 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 7b 69 66 28 74 2e 63 73 73 3d 3d 3d 65 2e 63 73 73 26 26 74 2e 6d 65 64 69 61 3d 3d 3d 65 2e 6d 65 64 69 61 26 26 74 2e 73 6f 75 72 63 65 4d 61 70 3d 3d 3d 65 2e 73 6f 75 72 63 65 4d 61 70 26 26 74 2e 73 75 70 70 Data Ascii: ].updater(p);else{var f=i(p,r);r.byIndex=s,t.splice(s,0,{identifier:d,updater:f,references:1})}a.push(d)}return a}function i(e,t){var n=t.domAPI(t);return n.update(e),function(t){if(t){if(t.css===e.css&&t.media===e.media&&t.sourceMap===e.sourceMap&&t.supp
2024-03-03 23:26:36 UTC	16384	IN	Data Raw: 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 74 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 72 65 74 75 72 6e 28 6e 3d 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 2e 69 6e 64 65 78 4f 66 28 22 70 78 22 29 3e 2d 31 26 26 28 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 22 70 78 22 2c 22 22 29 29 2c 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 6e 75 6c 6c 46 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 7b 6b 65 79 3a 22 63 72 65 61 74 65 53 74 64 45 76 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 69 66 28 74 29 74 72 79 7b 6e 3d 6e 65 77 20 45 76 65 6e 74 28 65 29 2c 74 2e 64 69 73 70 61 74 63 68 Data Ascii: .getPropertyValue(t)).toString().toLowerCase())}return(n=n.toString()).indexOf("px")>-1&&(n=n.replace("px","")),parseFloat(n)}},{key:"nullFn",value:function(){return null}},{key:"createStdEvent",value:function(e,t){var n;if(t)try{n=new Event(e),t.dispatch
2024-03-03 23:26:37 UTC	7952	IN	Data Raw: 63 6b 69 6e 67 55 72 6c 73 3b 69 2e 6c 65 6e 67 74 68 3e 30 26 26 69 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 75 72 6c 26 26 4f 2e 70 69 6e 67 55 52 49 2e 63 61 6c 6c 28 72 2c 65 2e 75 72 6c 29 7d 29 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 22 2e 63 6f 6e 63 61 74 28 6e 2e 63 6f 6e 73 6f 6c 65 50 72 65 70 65 6e 64 2c 22 20 49 63 6f 6e 56 69 65 77 54 72 61 63 6b 69 6e 67 20 66 6f 72 20 69 63 6f 6e 20 61 74 20 69 6e 64 65 78 20 22 29 2e 63 6f 6e 63 61 74 28 65 29 2c 6e 2e 63 6f 6e 73 6f 6c 65 53 74 79 6c 65 2c 4f 2e 70 69 6e 67 55 52 49 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 69 63 6f 6e 73 44 61 74 61 5b 65 5d 2e 69 63 6f 6e 56 69 65 77 54 72 61 63 6b 69 6e 67 55 72 6c 29 7d 2c 44 3d 66 75 6e 63 74 69 6f Data Ascii: ckingUrls;i.length>0&&i.forEach((function(e){e.url&&O.pingURI.call(r,e.url)}))},V=function(e){"".concat(n.consolePrepend," IconViewTracking for icon at index ").concat(e),n.consoleStyle,O.pingURI.call(this,this.iconsData[e].iconViewTrackingUrl)},D=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49934	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6sD.zWqcBkR1AuMMt3SD7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpistons_wbg.png&client=76f99bdb8f78cd44cc0b&signature=892e3f77c39c570076c33bd3d17c3a3d077eaff1 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1128	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133418 Cache-Control: public, max-age=2592000 Cache-Tag: 279566806893598736512993106461820309259,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21951-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 77 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 279566806893598736512993106461820309259,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "999d1b3ff54c1be003b5178bc20314a7" Expiration: expiry-date="Tue, 23 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 24 Jan 2024 16:39:49 GMT Server: ECAcc (nya/7988) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1727,owidth=50,oheight=50,obytes=2241,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21951-LGA X-Timer: S1707374978.078203,VS0,VE77 Content-Length: 1727 Connection: close
2024-03-03 23:26:36 UTC	1727	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 37 50 4c 54 45 47 70 4c b2 b1 b2 b5 b3 b3 9e a2 ad b5 b3 b3 b5 b3 b3 b5 b3 b3 b5 b3 b3 b5 b3 b3 b5 b3 b3 7b 88 a3 b4 b2 b3 94 9b aa 8b 94 a8 9a 9f ac b5 b3 b3 b5 b3 b3 b5 b3 b3 ac ac b0 b5 b3 b3 b5 b3 b3 84 8f a6 87 91 a6 af ae b1 a7 a9 af a8 a9 af 87 90 a6 c8 10 2e 1d 42 8a ff ff ff f4 cf d5 d3 3f 57 e2 82 91 cb 1b 38 ea a5 b1 d3 40 58 ce 2b 46 f9 e7 ea de 70 82 c9 12 30 ed b1 bb dd 6a 7c ce 29 44 c9 13 31 fa ea ed d5 4a 61 e1 7c 8c 47 61 95 5c 71 9b 3a 58 92 eb a7 b2 aa b8 d3 a0 b0 ce 4c 65 97 8b 9e c3 e7 ea f2 24 47 8c 6a 82 b2 a3 b1 ce 51 6d a4 fd f5 f6 50 68 98 22 46 8b 25 48 8c d4 da e8 3e 5b 93 5e 73 9c 66 7e af f6 d9 de 1e 42 8a fd f6 f7 ca Data Ascii: PNGIHDR22)x7PLTEGpL{.B?W8@X+Fp0j\|)D1Ja\|Ga\q:XLe$GjQmPh"F%H>[^sf~B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49935	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=0ce860f1e66ab33504feea849bdc56f9987a9c41 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1131	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 397604 Cache-Control: public, max-age=2592000 Cache-Tag: 457935326151757118911061591064955503832,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21968-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 126 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 457935326151757118911061591064955503832,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "e2ab0ea8c7fd54ba949c2fa993a91900" Expiration: expiry-date="Fri, 19 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 20 Jan 2024 15:13:42 GMT Server: ECAcc (nya/7917) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=802,owidth=400,oheight=400,obytes=158455,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21964-LGA X-Timer: S1705913992.363012,VS0,VE111 Content-Length: 802 Connection: close
2024-03-03 23:26:36 UTC	802	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 66 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 07 08 06 10 00 01 04 01 02 06 02 03 01 01 00 00 00 00 00 00 03 02 04 05 06 01 00 07 11 12 13 21 22 51 31 42 23 32 43 15 41 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 03 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T "f!"Q1B#2CA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49937	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F93412d20-245e-11eb-bfbb-1ba7d4a515e3&client=76f99bdb8f78cd44cc0b&signature=36aa3331b61a3ab35c58aca2ff4e86ae1c72c40c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1108	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 369628 Cache-Control: public, max-age=2592000 Cache-Tag: 325516298952848880504883450815467548634,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21970-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 165 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 325516298952848880504883450815467548634,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "349dd56de100c0b4f39353e016e1778f" Expiration: expiry-date="Thu, 07 Mar 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 08 Sep 2023 15:55:23 GMT Server: ECAcc (nya/797B) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,owidth=400,oheight=400,obytes=56855 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000062-IAD X-Timer: S1701362763.474650,VS0,VE1 Content-Length: 1456 Connection: close
2024-03-03 23:26:36 UTC	1456	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 84 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 09 00 04 08 06 10 00 01 04 01 02 06 01 04 03 00 00 00 00 00 00 00 02 01 03 04 05 06 00 11 07 08 12 22 42 61 31 13 15 21 23 14 51 72 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T "Ba1!#Qr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49936	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fbe863210-34b6-11eb-9fb7-2187cff1c470&client=76f99bdb8f78cd44cc0b&signature=cd7d9f6e5bc98fb19e3761f13bce648092a434ce HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1145	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1896931 Cache-Control: public, max-age=2592000 Cache-Tag: 231379971849977839629518286442517686114,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000047-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 4a17c8bf91d4b46f39d4e811d548d9db cld_latency: 212 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 231379971849977839629518286442517686114,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "b6b5e2b6a90bfe4cd91c383b3d33ef41" Last-Modified: Fri, 09 Feb 2024 13:56:19 GMT Server: ECAcc (nya/7982) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1022,owidth=400,oheight=400,obytes=50047,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 4a17c8bf91d4b46f39d4e811d548d9db X-Served-By: cache-iad-kiad7000047-IAD X-Timer: S1707611468.991737,VS0,VE212 Content-Length: 1022 Connection: close
2024-03-03 23:26:36 UTC	1022	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7f 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 06 08 00 09 04 05 07 10 00 02 01 03 03 04 02 02 02 03 00 00 00 00 00 00 01 02 03 04 05 06 00 07 11 12 21 42 61 13 31 22 41 14 17 23 32 71 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd++&.%#%.&D5//5DNB>BN_UU_wqw !Ba1"A#2q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49939	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-12%2Ff32d3a20-a01c-11ee-a4fb-2a31dca05260&client=76f99bdb8f78cd44cc0b&signature=d701f74e6d8efcc3b78ab05548e3fc9c7dc32afa HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 883538 Cache-Control: public, max-age=2592000 Cache-Tag: 407731474252756321647035230946744503184,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100160-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 118 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 407731474252756321647035230946744503184,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "94d97e37d6fae7ad498a7a43b6ee966d" Expiration: expiry-date="Sat, 22 Jun 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 24 Dec 2023 18:00:01 GMT Server: ECAcc (nya/79AD) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=693,owidth=400,oheight=400,obytes=6049,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21935-LGA X-Timer: S1703440801.873803,VS0,VE34 Content-Length: 693 Connection: close
2024-03-03 23:26:36 UTC	693	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 ff c0 00 11 08 00 20 00 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 79 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 08 00 01 04 05 07 09 10 00 01 04 01 03 03 01 05 09 00 00 00 00 00 00 00 02 01 03 04 05 11 00 06 12 07 14 31 21 13 15 17 22 51 23 55 56 71 83 93 95 d1 d2 01 00 02 03 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd %%-))-969KKd "y1!"Q#UVq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49938	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F05264ae0-2b91-11eb-b77b-425c560e375a&client=76f99bdb8f78cd44cc0b&signature=105afc7a48dc8079c60c5060c13a01867cea77cc HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:36 UTC	1101	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 708027 Cache-Control: public, max-age=2592000 Cache-Tag: 363170647456862273370535470905028584055,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21962-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 77 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:36 GMT Edge-Cache-Tag: 363170647456862273370535470905028584055,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "92071bfe197dadc7d6e4cbf61d9f1fd3" Expiration: expiry-date="Thu, 29 Feb 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 01 Sep 2023 05:44:57 GMT Server: ECAcc (nya/7891) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,owidth=400,oheight=400,obytes=29738 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21962-LGA X-Timer: S1708800369.486804,VS0,VE77 Content-Length: 1116 Connection: close
2024-03-03 23:26:36 UTC	1116	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 01 05 05 05 05 06 05 06 07 07 06 09 09 08 09 09 0d 0c 0b 0b 0c 0d 13 0e 0f 0e 0f 0e 13 1d 12 15 12 12 15 12 1d 1a 1f 19 17 19 1f 1a 2e 24 20 20 24 2e 35 2d 2a 2d 35 40 39 39 40 51 4d 51 6a 6a 8e ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 85 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 07 03 06 08 05 10 00 02 01 02 04 06 01 03 05 00 00 00 00 00 00 00 01 02 03 04 05 00 06 11 12 07 13 21 31 41 61 71 14 32 81 24 51 52 82 91 01 00 01 05 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&&,%#%,5//5C?CWWu.$ $.5-*-5@99@QMQjj !1Aaq2$QR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49940	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:36 UTC	768	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDSYNC=19cw~2h3b; A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:37 UTC	775	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:36 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2h3b:19e0~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:36 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:36 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:37 UTC	66	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 4a 4d 47 55 34 4c 6d 31 57 52 54 4a 31 52 31 39 78 53 6c 6c 54 61 45 77 31 5a 6b 6c 7a 52 6d 55 30 52 6d 46 43 63 55 74 77 57 6e 35 42 22 7d 0d 0a Data Ascii: 3c{"axid": "eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B"}
2024-03-03 23:26:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49941	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	1523	OUT	POST /p?_V=V&V_sec=pb&evt=p_init&t=0.9453199312432197&_sqno=0&ts=1&auto=false&bckt=none&ccode=&cdn=&cont=0&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=init&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=&pstaid_p=&pstcat=&psz=0x0&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=undefined&ar=&ver=td-app-aol&vid=&vidPos=&vlng=0&vs=+&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&view=&continuousPlay=0&loop=0&videoRecommendations=0&ff_ad=1&bcpVersion=7.14.0&brightcovePlayerId=8tDK7OitG&overlayPluginVersion=3.0.0&adPluginVersion=5.2.6&playlistUIPluginVersion=5.1.1&percentViewable=NaN HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:37 UTC	1057	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 141 date: Sun, 03 Mar 2024 23:26:36 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:37 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:37 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49943	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	1645	OUT	POST /p?s=1197803361&t=xVqJIQrhJPV1c0ft,0.22095220722361875&_I=&_AO=0&_NOL=1&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-aa-2%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03KjBZped2yRrWXXhX%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aolfrontpage%04site%03aolfrontpage%04mrkt%03us%04lang%03en-US%04colo%03us-east-1%04_yrid%0302r7skdiua1p4%04_rid%0302r7skdiua1p4%04abk%03%04A_pfb%03868%04A_pbp%03603%04A_psr%031107%04A_pdi%037143%04A_pdl%0381%04A_psh%03238%04A_psc%03240%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031709508394%04_ms%03612%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:37 UTC	730	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:26:37 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:37 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49942	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLX9izbkR2E3ylw0Xjvm9MA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2Fmagic_wbg.png&client=76f99bdb8f78cd44cc0b&signature=017c613f2f9352dfc32599f7308fc6338e568ab6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:37 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133419 Cache-Control: public, max-age=2592000 Cache-Tag: 398402101184439505225149956696141148672,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21969-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 106 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:37 GMT Edge-Cache-Tag: 398402101184439505225149956696141148672,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "05a539397b4dc91b238a9f42a747d792" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (nya/797D) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1725,owidth=50,oheight=50,obytes=2170,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21969-LGA X-Timer: S1707374978.347823,VS0,VE106 Content-Length: 1725 Connection: close
2024-03-03 23:26:37 UTC	1725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 69 77 7e c4 ce d3 c4 ce d3 c4 ce d3 c3 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c2 cc d1 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 6e 7c 83 c4 ce d3 9c a8 ae 73 81 88 c4 ce d3 c4 ce d3 77 85 8c 63 70 76 bb c6 cb aa b5 bb 79 87 8d c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 74 82 89 c4 ce d3 c4 ce d3 c4 ce d3 6f 7d 85 7d 8a 91 b6 c1 c6 c4 ce d3 aa b5 bb c1 cb d0 8d 99 9f c4 ce d3 c4 ce d3 a2 ad b3 b5 c0 c5 92 9e a4 a7 b2 b8 aa b5 bb 88 95 9b 6d 7b 82 c4 ce d3 b7 c2 c7 84 91 97 a2 ad b3 a5 b0 b6 a9 b4 ba a8 b4 b9 85 92 98 c1 cb d0 99 a5 ab be c8 cd c4 ce d3 54 63 6b af Data Ascii: PNGIHDR22)xPLTEGpLiw~n\|swcpvyto}}m{Tck

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49944	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	939	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLHd_1h13Yx5f.pZrF.YlPw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Ftrailblazers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bf7b50ac67ea7239e80e50d623f7202f3f25466d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:37 UTC	1111	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2136158 Cache-Control: public, max-age=2592000 Cache-Tag: 341385141819231340847914491332416382864,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21938-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 119 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:37 GMT Edge-Cache-Tag: 341385141819231340847914491332416382864,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "2d31c6a99e63d38b32aa0fdaa1100445" Expiration: expiry-date="Mon, 27 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 28 Nov 2023 22:21:25 GMT Server: ECAcc (nya/78C6) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1837,owidth=50,oheight=50,obytes=2357 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21982-LGA X-Timer: S1702188222.925869,VS0,VE139 Content-Length: 1837 Connection: close
2024-03-03 23:26:37 UTC	1837	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c 9c a4 a7 be c3 c5 ff ff ff ff ff ff ff ff ff b9 bf c1 72 7d 82 75 7f 84 ff ff ff aa b1 b4 ff ff ff ff ff ff ff ff ff ad b4 b6 bc c1 c3 e3 e5 e6 ff ff ff dc df e0 ff ff ff f6 f6 f7 ff ff ff a2 a9 ac 63 6f 75 97 9f a3 f0 f1 f2 de e1 e2 ff ff ff 89 92 97 93 9b 9f 7d 87 8c 75 80 85 d9 dc dd 82 8b 90 c7 cb cd 3c 4b 52 aa b1 b4 ff ff ff ff ff ff a9 b0 b3 5b 67 6d 93 9b 9f c0 c5 c7 a9 af b3 bf c4 c6 91 9a 9e 5c 69 6f fe fe fe c2 c7 c9 ff ff ff c3 c8 ca f3 f4 f5 8b 94 98 b9 be c1 f3 f4 f5 f6 f7 f7 b9 be c1 a4 ab ae a6 ad b0 80 8a 8e ff ff ff 87 90 94 a2 a9 ad 06 19 22 e0 3a 3e ff ff ff 08 1b 24 12 24 2d c4 c9 cb a2 a9 ad 09 19 22 16 Data Ascii: PNGIHDR22)xPLTEGpLr}ucou}u<KR[gm\io":>$$-"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49947	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	935	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh6tcrfyHgrC03ICBoahgsA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fgrizzlies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=8366ef9893f0d8b51d992acf051eec22695c38fe HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:37 UTC	1463	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133419 Cache-Control: public, max-age=2592000 Cache-Tag: 389512422149550829434017629323377100037,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21949-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:37 GMT Edge-Cache-Tag: 389512422149550829434017629323377100037,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "6cac3d75fd69eb47e5cac3bb799b4948" Expiration: expiry-date="Thu, 30 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 01 Dec 2023 22:21:23 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/78CE) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2059,owidth=50,oheight=50,obytes=2403 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100037-IAD X-Timer: S1702190899.135303,VS0,VE128 Content-Length: 2059 Connection: close
2024-03-03 23:26:37 UTC	2059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 71 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 6f 72 72 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 70 70 72 71 70 71 70 70 72 71 70 72 71 6f 71 70 6f 72 6f 70 72 71 70 72 71 6e 70 70 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 6d 6f 6f 6f 71 71 6e 70 70 70 72 71 70 72 71 70 72 71 6f 71 70 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 6b 6d 6e 70 72 71 70 72 71 70 72 71 70 Data Ascii: PNGIHDR22)xPLTEGpLprqprqprqprqprqprqpqqprqprqprqprqprqprqprqprqprqprqorrprqprqprqprqprqprqprqprqprqprqprqprpprqpqpprqprqoqporoprqprqnppprqprqprqprqprqprqprqprqprqmoooqqnppprqprqprqoqpprqprqprqprqprqprqprqprqprqprqprqkmnprqprqprqp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49948	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FiiEErhUHtBJPZhhygpVeqg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181213%2F500x500%2Fnuggets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fcc40ea3f7b1d9c1f531bd8610e1a332967f1696 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:37 UTC	1038	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133419 Cache-Control: public, max-age=2592000 Cache-Tag: 440185262663180471296379902392492361094,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:37 GMT Edge-Cache-Tag: 440185262663180471296379902392492361094,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "78a028b6bceb6f1c49ad89d6c4043dcc" Expiration: expiry-date="Wed, 10 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 11 Jan 2024 14:18:39 GMT Server: ECAcc (nya/7981) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2269,owidth=50,oheight=50,obytes=2916,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100179-IAD X-Timer: S1707374978.355430,VS0,VE83 Content-Length: 2269 Connection: close
2024-03-03 23:26:37 UTC	2269	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 0d 22 40 ff c6 27 8b 23 32 ff ff ff fc c2 27 9c 3a 30 8a 23 32 10 22 40 0e 23 40 fe c6 27 0f 24 40 4d 23 39 8c 96 a4 8f 27 32 3d 43 3b 70 23 35 6b 23 36 46 22 3a 1c 2c 3e fa c2 28 28 34 3d 98 34 31 82 23 33 13 22 3f 1b 22 3e 87 23 32 20 22 3e 17 29 3f bc 68 2d 56 23 38 f5 Data Ascii: PNGIHDR22)xPLTEGpL''''''''''''''''''''''''''''''''''''''''"@'#2':0#2"@#@'$@M#9'2=C;p#5k#6F":,>((4=41#3"?">#2 ">)?h-V#8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49945	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	924	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fu.pqfa2q7DS.luzuhXi7JQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230905%2F500px%2Flakers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=b5102b8c22200b7c733d98e776f08546f58e5154 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:37 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 414677 Cache-Control: public, max-age=2592000 Cache-Tag: 269569567698533729946868004275355481156,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100172-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 70 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:37 GMT Edge-Cache-Tag: 269569567698533729946868004275355481156,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "1af738852894064e68e3c5a45c88f036" Expiration: expiry-date="Tue, 02 Apr 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 04 Oct 2023 04:13:55 GMT Server: ECAcc (nya/7937) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1878,owidth=50,oheight=50,obytes=5451 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100088-IAD X-Timer: S1701317705.246176,VS0,VE106 Content-Length: 1878 Connection: close
2024-03-03 23:26:37 UTC	1878	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fb fb fd b9 27 ff ff ff 31 00 6f fe fe fe fc b8 27 c4 b6 d6 32 01 6f a9 6d 44 bc ac d1 48 15 67 fb b7 27 f9 f8 fb f0 ad 2c f7 b4 26 a3 67 47 c3 84 3b 7f Data Ascii: PNGIHDR22)xPLTEGpL'1o'2omDHg',&gG;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49946	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FP2Lcp4ZIzhVhuQjVqH9yJA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191021%2F500x500%2Frockets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=8339d7b537e79acc2460e70ee7938168423d4456 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:37 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133417 Cache-Control: public, max-age=2592000 Cache-Tag: 217873377608544582672260778069716442962,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000039-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:37 GMT Edge-Cache-Tag: 217873377608544582672260778069716442962,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "4eba1fba64296252e56327839fd1781f" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (nya/7887) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1785,owidth=50,oheight=50,obytes=2090,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000039-IAD X-Timer: S1707374980.315437,VS0,VE2 Content-Length: 1785 Connection: close
2024-03-03 23:26:37 UTC	1785	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff f3 c6 d1 fd f1 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 d1 da ff ff ff ff ff ff fa e3 e9 ff ff ff ff ff ff ff ff ff fe fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ea eb ec f4 f5 f5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 d3 dc f5 cf d8 ff ff ff ff fc fd ff ff ff ff ff ff fd eb f0 ff ff ff ff ff ff ee ef f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f8 e6 ea ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49950	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	1583	OUT	POST /p?s=1197803361&t=Ielwz1sf1Elf9ep8,0.4855611982310222&_I=&_AO=0&_NOL=1&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-aa-2%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03KjBZped2yRrWXXhX%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aolfrontpage%04site%03aolfrontpage%04mrkt%03us%04lang%03en-US%04colo%03us-east-1%04_yrid%0302r7skdiua1p4%04_rid%0302r7skdiua1p4%04abk%03%04A_utm%03%7B%22perf_fcp%22%3A2898%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031709508395%04_ms%03131%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:37 UTC	730	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:26:37 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:37 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49949	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	1583	OUT	POST /p?s=1197803361&t=oDsW5KhRsKhN5pue,0.4783500708178787&_I=&_AO=0&_NOL=1&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-aa-2%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03KjBZped2yRrWXXhX%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aolfrontpage%04site%03aolfrontpage%04mrkt%03us%04lang%03en-US%04colo%03us-east-1%04_yrid%0302r7skdiua1p4%04_rid%0302r7skdiua1p4%04abk%03%04A_utm%03%7B%22perf_ttfb%22%3A868%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031709508395%04_ms%03134%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:37 UTC	730	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:26:37 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:37 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49951	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FgEMEg05RG7EAyPYgeoCKEg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190318%2F500x500%2Fsuns_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1ac189c890b767dc5ba2fede62df019e6086e563 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2000922 Cache-Control: public, max-age=2592000 Cache-Tag: 345668930557361132189762443078746511971,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000111-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 345668930557361132189762443078746511971,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "347467d488ff05ad50b871325961e71d" Expiration: expiry-date="Wed, 15 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 16 Nov 2023 03:39:03 GMT Server: ECAcc (nya/797C) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2058,owidth=50,oheight=50,obytes=2830 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100099-IAD X-Timer: S1704905263.508611,VS0,VE89 Content-Length: 2058 Connection: close
2024-03-03 23:26:38 UTC	2058	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff fe e9 ca ff fe fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb c6 76 ff ff ff ff ff ff fe f4 e4 fc c7 7a ff f8 ee ff fd fa ff ff ff fe ef d9 ff f6 e9 fd d9 a3 fc d5 99 ff fd fb fa b7 51 ff f8 ee fe e9 c8 fd de b1 fd d8 a1 fc ca 80 fb c4 70 fb be 62 fb bb 5c fc cc 83 fc cc 85 fc c8 79 fd dd ad ff ff fe fc d3 94 ff ff ff fd e5 c2 fc ce 8a ff ff ff fe ed d4 ff ff ff ff ff ff fc d0 8e fd d7 9e ff ff ff ff fe fc fd d7 9f fc cd 87 ff f9 ef fe f4 e4 fd e5 c0 fd dd ac fe f1 dd fb bf 65 fc d5 99 fe ec d1 fd de af ff fb f4 fb c4 71 ff f8 ee fd e2 b9 fc d2 94 fb c3 6d ff ff fe fd e3 ba ff f5 e7 fe e9 c9 fb Data Ascii: PNGIHDR22)xPLTEGpLvzQpb\yeqm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49952	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FI6DaBWv57W5cAMSJrdUW0w--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2F76ers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=cae8d7c451f50d2dd6da30979cae9ae2c7f3e628 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1109	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133418 Cache-Control: public, max-age=2592000 Cache-Tag: 177830925880058681984052191033545713667,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21949-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 185 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 177830925880058681984052191033545713667,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "7332fbbf0729991568b70f28354aa9e6" Expiration: expiry-date="Wed, 29 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 30 Nov 2023 04:03:29 GMT Server: ECAcc (nya/7954) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2424,owidth=50,oheight=50,obytes=3390 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21926-LGA X-Timer: S1702190899.116522,VS0,VE1 Content-Length: 2424 Connection: close
2024-03-03 23:26:38 UTC	2424	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec f4 fa ff ff ff f2 f8 fc e9 f2 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff ff ff ff ff ff ff ff ff e3 ef f7 f6 fa fc ff ff ff ef f6 fb ff ff ff f4 f9 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f3 f8 fb ff ff ff ff ff ff ff ff ff fa fc fe f0 f6 fb ff ff ff ff ff ff ed f4 fa ff ff ff ff ff ff f9 fc fd ff ff ff ff ff ff ff ff ff 00 6b b6 ed Data Ascii: PNGIHDR22)xPLTEGpLk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49954	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	935	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1126	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 414681 Cache-Control: public, max-age=2592000 Cache-Tag: 229410569217829523079279784424792893620,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21940-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 59 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 229410569217829523079279784424792893620,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e416ced55ebb3d5700b8ba1db47af2c9" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 04:03:40 GMT Server: ECAcc (nya/78B9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2532,owidth=50,oheight=50,obytes=4125,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21940-LGA X-Timer: S1709093717.191318,VS0,VE59 Content-Length: 2532 Connection: close
2024-03-03 23:26:38 UTC	2532	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff 7d 87 8c ff ff ff ff ff ff ff ff ff e1 e3 e4 ff ff ff ff ff ff fb fb fb ff ff ff 90 99 9d 98 9f a3 6c 77 7d 64 70 76 ff ff ff c9 ce d0 d9 dc dd fb fc fc 94 9d a0 8b 94 98 ff ff ff c4 c8 cb ff ff ff 85 8e 93 ff ff ff f1 f2 f3 9d a4 a8 ff ff ff b6 bb be f7 f8 f8 b6 bc be ff ff ff a2 aa ad b7 bd bf d7 da db eb ec ed d0 d3 d5 ff ff ff fc fc fd ff ff ff fd fd fd eb ec ed e4 e6 e7 fa fa fa 61 6d 73 a9 b0 b3 91 9a 9e a6 ad b0 9b a2 a6 c9 cd cf c3 c7 c9 a1 a8 ac aa b1 b4 c3 c7 c9 bd c2 c5 b3 b8 bb ff ff ff ff ff ff fd fe fe fd fe fe ff ff ff b1 b7 ba d4 d7 d9 c7 cb cd e4 e6 e7 fe ff ff ba bf c1 ed ee ef 7f 89 8e fb fc fc 06 Data Ascii: PNGIHDR22)xPLTEGpL}lw}dpvams

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49953	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FhVlB1Dqn1zQNINKtkSF6Sg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191016%2F500x500%2Fwarriors_wbg.png&client=76f99bdb8f78cd44cc0b&signature=45837ce2b02ee90dac3330f0112247c56c9df4f9 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133420 Cache-Control: public, max-age=2592000 Cache-Tag: 416988394395869725397014919907494337164,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000095-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 416988394395869725397014919907494337164,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "b0ac2b682af25611fedc4d0983aac530" Expiration: expiry-date="Sat, 25 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 26 Nov 2023 06:28:36 GMT Server: ECAcc (nya/7898) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1910,owidth=50,oheight=50,obytes=2447 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000176-IAD X-Timer: S1702190899.128248,VS0,VE1 Content-Length: 1910 Connection: close
2024-03-03 23:26:38 UTC	1910	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 7f 50 4c 54 45 47 70 4c 1d 42 8a 1d 42 8a 1c 41 89 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a fd b9 27 2b 4a 84 1e 43 89 70 6e 65 eb b0 2f fb b8 28 33 4e 80 7e 76 5f 2b 49 84 e9 ae 30 f7 b6 2a f2 b3 2c 51 5e 73 5b 63 6e 8e 7e 58 cc 9f 3d 39 51 7e b6 94 46 3d 53 7c 49 59 77 26 47 86 74 70 63 94 81 55 25 46 87 d1 a2 3a dc a8 35 e9 af 30 23 45 87 b8 94 46 21 44 88 c5 9b 40 fa b7 28 ea af 2f 77 72 62 24 46 87 f8 b6 29 4c 5b 75 db a7 36 d0 a1 3b 2a 49 84 b8 94 45 ba 95 45 a5 8a 4e e3 ab 32 8f 7f 58 98 Data Ascii: PNGIHDR22)xPLTEGpLBBABBBBBBBBBBBBBBBBBBBBBB'+JCpne/(3N~v_+I0,Q^s[cn~X=9Q~F=S\|IYw&GtpcU%F:50#EF!D@(/wrb$F)L[u6;IEEN2X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49956	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	927	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1472	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2134793 Cache-Control: public, max-age=2592000 Cache-Tag: 496266717906369093199617723782445329917,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000147-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 122 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 496266717906369093199617723782445329917,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "6d934474b3e355893e0271151804839b" Expiration: expiry-date="Fri, 24 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 25 Nov 2023 05:13:51 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/797E) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2581,owidth=50,oheight=50,obytes=4621 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000070-IAD X-Timer: S1702189561.105061,VS0,VE81 Content-Length: 2581 Connection: close
2024-03-03 23:26:38 UTC	2581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 f4 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff f5 f6 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fc ec ee ee ff ff ff ed ee ef ff ff ff ff ff ff f8 f9 f9 ff ff ff f2 f3 f3 ff ff ff ff ff ff fe ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 82 48 05 18 21 06 19 21 a7 37 32 e7 e8 e9 c4 c7 c8 a7 ad b0 00 7f 47 b9 bd be cf d2 d3 02 69 3f 9e a4 a7 97 9f a1 ad b2 b4 00 7b 45 01 72 42 e1 e4 e5 cb cf d0 07 4c 36 23 4f 46 d3 d5 d6 02 59 39 d9 ec e3 86 Data Ascii: PNGIHDR22)xPLTEGpLH!!72Gi?{ErBL6#OFY9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49955	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:37 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FmYPNdnSol61pq90EZA9nxA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fclippers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=c32b7cbdae600a46f74e47f8b8b2ce729197d76c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1464	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2401878 Cache-Control: public, max-age=2592000 Cache-Tag: 375686507491724130108612114957520828278,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000032-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 116 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 375686507491724130108612114957520828278,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "10460caa4146b9d9a12aa9d195570901" Expiration: expiry-date="Fri, 24 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 25 Nov 2023 05:13:50 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/79B0) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2112,owidth=50,oheight=50,obytes=2621 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21936-LGA X-Timer: S1701317705.217733,VS0,VE0 Content-Length: 2112 Connection: close
2024-03-03 23:26:38 UTC	2112	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49869	34.120.63.153	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	609	OUT	POST /rtb/prebid?cid=8CUPH46U8 HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 1168 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1168	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 43 55 50 48 34 36 55 38 22 2c 22 70 72 65 62 69 64 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 67 64 70 72 5f 61 70 70 6c 69 65 73 22 3a 66 61 6c Data Ascii: {"site":{"domain":"www.aol.com","page":"https://www.aol.com/","ref":"","topMostLocation":"https://www.aol.com/","isTop":true,"canonical_url":"https://www.aol.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8CUPH46U8","prebid_version":1,"gdpr_applies":fal
2024-03-03 23:26:38 UTC	660	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Sun, 03 Mar 2024 23:26:38 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com content-type: application/json;charset=utf-8 date: Sun, 03 Mar 2024 23:26:38 GMT x-envoy-upstream-service-time: 332 vary: Accept-Encoding server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 35 36 64 0d 0a 7b 22 69 64 22 3a 22 32 33 34 35 30 39 33 32 38 37 38 30 33 37 38 31 36 31 37 30 39 35 30 38 33 39 36 38 34 37 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 5f 70 64 3d 31 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a Data Ascii: 56d{"id":"234509328780378161709508396847","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"image","url":"https://x.bidswitch.net/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1"},{"type":"image","url":
2024-03-03 23:26:38 UTC	149	IN	Data Raw: 32 43 34 36 32 25 32 43 32 32 32 25 32 43 38 30 25 32 43 31 30 38 26 69 74 79 70 65 3d 50 52 45 42 49 44 26 70 75 72 70 6f 73 65 31 3d 31 26 67 64 70 72 63 6f 6e 73 65 6e 74 3d 31 26 67 64 70 72 3d 30 26 63 6f 70 70 61 3d 30 26 75 73 70 5f 73 74 61 74 75 73 3d 31 26 75 73 70 5f 63 6f 6e 73 65 6e 74 3d 31 26 75 73 70 73 74 72 69 6e 67 3d 31 59 4e 4e 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 22 7d 5d 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1"}]}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49870	34.111.85.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	647	OUT	POST /rtb/yhb?cid=8YHB8F956 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive Content-Length: 3345 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:38 UTC	3345	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 59 48 42 38 46 39 35 36 22 2c 22 70 72 65 62 69 64 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 67 64 70 72 5f 61 70 70 6c 69 65 73 22 3a 66 61 6c Data Ascii: {"site":{"domain":"www.aol.com","page":"https://www.aol.com/","ref":"","topMostLocation":"https://www.aol.com/","isTop":true,"canonical_url":"https://www.aol.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8YHB8F956","prebid_version":1,"gdpr_applies":fal
2024-03-03 23:26:38 UTC	602	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Sun, 03 Mar 2024 23:26:38 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com content-type: application/json;charset=utf-8 date: Sun, 03 Mar 2024 23:26:37 GMT x-envoy-upstream-service-time: 217 server: istio-envoy via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-03-03 23:26:38 UTC	981	IN	Data Raw: 33 63 39 0d 0a 7b 22 69 64 22 3a 22 32 33 34 35 30 39 33 32 38 37 38 30 33 37 38 31 36 31 37 30 39 35 30 38 33 39 36 38 34 37 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 59 48 42 38 46 39 35 36 26 70 72 76 69 64 3d 32 35 32 36 38 25 32 43 32 35 32 32 34 25 32 43 32 35 30 32 35 25 32 43 32 35 31 34 36 25 32 43 32 35 32 32 33 25 32 43 32 35 33 30 30 25 32 43 32 35 30 32 38 25 32 43 32 35 30 32 37 25 32 43 32 35 33 30 32 25 32 43 32 35 32 Data Ascii: 3c9{"id":"234509328780378161709508396847","bidList":[],"ext":{"csUrl":[{"type":"iframe","url":"https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C252

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49957	74.6.143.22	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	931	OUT	GET /api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-aa-2&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage HTTP/1.1 Host: ncp-gw-video.media.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:38 UTC	1221	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 access-control-allow-origin: https://www.aol.com access-control-allow-credentials: true cache-control: public, stale-while-revalidate=900, max-age=60 vary: Accept-Encoding,Origin y-rid: 1kvt3ctiua1pe,1kvt3ctiua1pe x-yahoo-request-id: 1kvt3ctiua1pe,1kvt3ctiua1pe x-request-id: 0c1b9c87-239e-47a9-aba9-7fbe0afbd505,0c1b9c87-239e-47a9-aba9-7fbe0afbd505 x-envoy-upstream-service-time: 74 date: Sun, 03 Mar 2024 23:26:38 GMT server: ATS Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-03-03 23:26:38 UTC	787	IN	Data Raw: 31 36 30 39 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 63 75 72 61 74 65 64 56 69 64 65 6f 73 22 3a 7b 22 73 74 72 65 61 6d 49 6e 66 6f 22 3a 7b 22 72 65 74 75 72 6e 65 64 4c 69 73 74 43 6f 75 6e 74 22 3a 31 32 2c 22 72 65 71 75 65 73 74 65 64 43 6f 75 6e 74 22 3a 31 32 30 2c 22 73 74 72 65 61 6d 54 79 70 65 22 3a 22 6a 61 72 76 69 73 22 2c 22 73 6e 69 70 70 65 74 43 6f 75 6e 74 22 3a 31 32 2c 22 71 75 65 72 79 50 72 6f 66 69 6c 65 22 3a 22 61 73 73 65 74 6c 69 73 74 5f 73 69 6e 67 6c 65 5f 66 65 65 64 22 2c 22 69 64 22 3a 22 4a 41 52 56 49 53 3a 63 75 72 61 74 65 64 56 69 64 65 6f 73 3a 61 73 73 65 74 6c 69 73 74 5f 73 69 6e 67 6c 65 5f 66 65 65 64 3a 6e 75 6c 6c 22 2c 22 6a 61 72 76 69 73 46 65 65 64 4e 61 6d 65 22 3a 22 6d 61 69 6e 22 2c 22 70 61 72 61 6d 73 Data Ascii: 1609{"data":{"curatedVideos":{"streamInfo":{"returnedListCount":12,"requestedCount":120,"streamType":"jarvis","snippetCount":12,"queryProfile":"assetlist_single_feed","id":"JARVIS:curatedVideos:assetlist_single_feed:null","jarvisFeedName":"main","params
2024-03-03 23:26:38 UTC	1300	IN	Data Raw: 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4d 61 69 6e 20 50 6f 77 65 72 42 61 62 79 20 4d 6f 64 75 6c 65 20 6f 6e 20 41 4f 4c 2e 63 6f 6d 20 48 6f 6d 65 70 61 67 65 22 7d 7d 2c 22 73 74 72 65 61 6d 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 69 64 22 3a 22 33 63 61 63 61 34 63 61 2d 31 39 31 63 2d 33 39 33 33 2d 62 61 62 35 2d 35 39 35 63 61 31 64 31 34 39 35 61 22 2c 22 74 69 74 6c 65 22 3a 22 57 69 6e 74 65 72 20 73 74 6f 72 6d 20 77 72 65 61 6b 73 20 68 61 76 6f 63 20 61 63 72 6f 73 73 20 53 69 65 72 72 61 20 4e 65 76 61 64 61 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 20 77 69 6e 74 65 72 20 73 74 6f 72 6d 20 69 73 20 73 6c 61 6d 6d 69 6e 67 20 43 61 6c 69 66 6f 72 6e 69 61 2c 20 77 69 74 68 20 70 61 72 74 73 20 6f 66 20 74 68 65 Data Ascii: "description":"Main PowerBaby Module on AOL.com Homepage"}},"stream":[{"content":{"id":"3caca4ca-191c-3933-bab5-595ca1d1495a","title":"Winter storm wreaks havoc across Sierra Nevadas","description":"A winter storm is slamming California, with parts of the
2024-03-03 23:26:38 UTC	1300	IN	Data Raw: 37 61 44 30 78 4e 44 51 37 64 7a 30 79 4e 6a 41 37 59 58 42 77 61 57 51 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 63 6e 6e 5f 76 69 64 65 6f 73 5f 31 37 37 2f 37 35 35 62 34 32 63 65 37 32 39 35 31 33 32 62 34 64 32 37 38 64 36 63 64 35 37 62 38 39 31 66 22 2c 22 77 69 64 74 68 22 3a 32 36 30 2c 22 68 65 69 67 68 74 22 3a 31 34 34 2c 22 74 61 67 22 3a 22 32 36 30 78 31 34 34 22 7d 5d 7d 2c 22 76 69 65 77 65 72 43 6f 75 6e 74 22 3a 7b 22 69 64 22 3a 22 33 63 61 63 61 34 63 61 2d 31 39 31 63 2d 33 39 33 33 2d 62 61 62 35 2d 35 39 35 63 61 31 64 31 34 39 35 61 22 2c 22 76 69 65 77 65 72 43 6f 75 6e 74 22 3a 30 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 34 35 37 30 38 34 7d 7d 7d 2c Data Ascii: 7aD0xNDQ7dz0yNjA7YXBwaWQ9eXRhY2h5b24-/https://media.zenfs.com/en/cnn_videos_177/755b42ce7295132b4d278d6cd57b891f","width":260,"height":144,"tag":"260x144"}]},"viewerCount":{"id":"3caca4ca-191c-3933-bab5-595ca1d1495a","viewerCount":0,"viewCount":457084}}},
2024-03-03 23:26:38 UTC	1300	IN	Data Raw: 44 74 68 63 48 42 70 5a 44 31 35 64 47 46 6a 61 48 6c 76 62 67 2d 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 76 69 64 65 6f 2e 61 62 63 6e 65 77 73 70 6c 75 73 2e 63 6f 6d 2f 32 32 64 37 63 36 36 32 66 38 31 65 64 37 63 37 32 39 37 33 63 34 36 63 65 35 66 33 31 63 65 37 22 2c 22 77 69 64 74 68 22 3a 31 39 32 30 2c 22 68 65 69 67 68 74 22 3a 31 30 38 30 2c 22 74 61 67 22 3a 22 6f 72 69 67 69 6e 61 6c 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 30 6a 65 74 71 52 70 47 31 6d 36 78 63 51 59 79 49 6a 61 33 33 41 2d 2d 7e 42 2f 5a 6d 6b 39 63 33 52 79 61 57 30 37 61 44 30 78 4e 44 51 37 64 7a 30 79 4e 6a 41 37 59 58 42 77 61 57 Data Ascii: DthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/video.abcnewsplus.com/22d7c662f81ed7c72973c46ce5f31ce7","width":1920,"height":1080,"tag":"original"},{"url":"https://s.yimg.com/uu/api/res/1.2/0jetqRpG1m6xcQYyIja33A--~B/Zmk9c3RyaW07aD0xNDQ7dz0yNjA7YXBwaW
2024-03-03 23:26:38 UTC	1300	IN	Data Raw: 69 61 3a 63 61 74 65 67 6f 72 79 3d 31 30 30 30 30 30 30 30 32 22 2c 22 79 6d 65 64 69 61 3a 63 61 74 65 67 6f 72 79 3d 30 30 30 30 30 30 30 32 39 22 2c 22 63 61 70 74 69 6f 6e 2d 70 72 6f 63 65 73 73 6f 72 3d 33 70 6c 61 79 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 63 61 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 75 73 22 2c 22 79 6d 65 64 69 61 3a 63 61 74 65 67 6f 72 79 3d 31 30 30 30 30 30 30 30 38 22 2c 22 79 6d 65 64 69 61 3a 74 79 70 65 3d 63 61 76 69 64 65 6f 22 2c 22 79 6d 65 64 69 61 3a 70 72 6f 76 69 64 65 72 5f 63 61 74 65 67 6f 72 79 3d 77 65 62 5f 65 78 63 6c 75 73 69 76 65 73 22 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 7b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d Data Ascii: ia:category=100000002","ymedia:category=000000029","caption-processor=3play","ynews:region=ca","ynews:region=us","ymedia:category=100000008","ymedia:type=cavideo","ymedia:provider_category=web_exclusives"],"thumbnail":{"resolutions":[{"url":"https://s.yim
2024-03-03 23:26:38 UTC	1300	IN	Data Raw: 72 20 77 69 74 68 20 4d 65 78 69 63 6f 2e 20 3c 2f 70 3e 3c 70 3e 49 6e 20 72 65 73 70 6f 6e 73 65 2c 20 42 69 64 65 6e 27 73 20 63 61 6d 70 61 69 67 6e 20 70 6f 69 6e 74 65 64 20 74 6f 20 61 20 62 69 70 61 72 74 69 73 61 6e 20 62 6f 72 64 65 72 20 73 65 63 75 72 69 74 79 20 62 69 6c 6c 20 69 6e 20 43 6f 6e 67 72 65 73 73 20 74 68 61 74 20 54 72 75 6d 70 20 68 65 6c 70 65 64 20 74 6f 72 70 65 64 6f 20 6c 61 73 74 20 6d 6f 6e 74 68 20 62 79 20 75 72 67 69 6e 67 20 52 65 70 75 62 6c 69 63 61 6e 73 20 74 6f 20 76 6f 74 65 20 61 67 61 69 6e 73 74 20 69 74 2e 3c 2f 70 3e 3c 70 3e 49 6e 20 68 69 73 20 73 70 65 65 63 68 2c 20 54 72 75 6d 70 20 61 6c 73 6f 20 61 67 61 69 6e 20 72 65 66 65 72 72 65 64 20 74 6f 20 68 69 6d 73 65 6c 66 20 61 73 20 61 20 5c 22 70 6f Data Ascii: r with Mexico. </p><p>In response, Biden's campaign pointed to a bipartisan border security bill in Congress that Trump helped torpedo last month by urging Republicans to vote against it.</p><p>In his speech, Trump also again referred to himself as a \"po
2024-03-03 23:26:38 UTC	1300	IN	Data Raw: 33 22 2c 22 79 6d 65 64 69 61 3a 63 61 74 65 67 6f 72 79 3d 31 30 30 30 30 30 30 30 32 22 2c 22 79 66 69 6e 61 6e 63 65 3a 70 61 72 74 6e 65 72 3d 61 70 70 6c 65 22 2c 22 63 61 70 74 69 6f 6e 2d 70 72 6f 63 65 73 73 6f 72 3d 33 70 6c 61 79 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 63 61 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 75 73 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 61 75 22 2c 22 79 6d 65 64 69 61 3a 73 65 72 69 65 73 5f 6e 61 6d 65 3d 52 65 75 74 65 72 73 22 2c 22 79 6d 65 64 69 61 3a 74 79 70 65 3d 63 61 76 69 64 65 6f 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 6e 7a 22 2c 22 79 6d 65 64 69 61 3a 73 69 67 6e 61 6c 3d 73 75 6d 6d 61 72 79 5f 73 6f 75 72 63 65 3a 63 61 70 22 2c 22 79 6e 65 77 73 3a 72 65 67 Data Ascii: 3","ymedia:category=100000002","yfinance:partner=apple","caption-processor=3play","ynews:region=ca","ynews:region=us","yfrontpage:region=au","ymedia:series_name=Reuters","ymedia:type=cavideo","ynews:region=nz","ymedia:signal=summary_source:cap","ynews:reg
2024-03-03 23:26:38 UTC	1300	IN	Data Raw: 6f 6e 74 68 20 6f 66 20 52 61 6d 61 64 61 6e 2c 20 61 6e 64 20 73 68 65 20 68 61 64 20 68 6f 70 65 64 20 74 68 61 74 20 61 20 63 65 61 73 65 66 69 72 65 20 77 6f 75 6c 64 20 6d 61 74 65 72 69 61 6c 69 7a 65 20 62 65 66 6f 72 65 20 74 68 61 74 20 74 69 6d 65 2c 20 73 68 65 20 73 61 69 64 2e 3c 2f 70 3e 3c 70 3e 48 65 72 20 68 75 73 62 61 6e 64 20 68 61 64 20 70 6c 61 6e 73 20 74 6f 20 6c 65 61 76 65 20 47 61 7a 61 20 61 6e 64 20 77 61 73 20 69 73 73 75 65 64 20 61 20 70 61 73 73 70 6f 72 74 2c 20 62 75 74 20 74 68 65 20 77 61 72 20 73 74 6f 70 70 65 64 20 68 69 6d 2c 20 73 68 65 20 61 64 64 65 64 2e 3c 2f 70 3e 3c 70 3e 41 74 20 6c 65 61 73 74 20 31 34 20 50 61 6c 65 73 74 69 6e 69 61 6e 73 20 68 61 76 65 20 62 65 65 6e 20 6b 69 6c 6c 65 64 20 69 6e 20 74 Data Ascii: onth of Ramadan, and she had hoped that a ceasefire would materialize before that time, she said.</p><p>Her husband had plans to leave Gaza and was issued a passport, but the war stopped him, she added.</p><p>At least 14 Palestinians have been killed in t
2024-03-03 23:26:38 UTC	1300	IN	Data Raw: 6c 22 3a 7b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 6a 33 74 44 4c 36 72 48 75 30 76 74 65 48 53 6a 34 61 38 31 71 77 2d 2d 7e 42 2f 61 44 30 31 4e 44 41 37 64 7a 30 35 4e 6a 41 37 59 58 42 77 61 57 51 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 76 69 64 65 6f 2e 72 65 75 74 65 72 73 6e 65 77 73 2e 63 6f 6d 2f 64 66 64 61 30 37 66 37 34 64 37 31 61 30 62 35 61 37 64 61 38 36 39 39 37 63 61 36 31 66 61 31 22 2c 22 77 69 64 74 68 22 3a 39 36 30 2c 22 68 65 69 67 68 74 22 3a 35 34 30 2c 22 74 61 67 22 3a 22 6f 72 69 67 69 6e 61 6c 22 7d 2c 7b 22 75 72 Data Ascii: l":{"resolutions":[{"url":"https://s.yimg.com/uu/api/res/1.2/j3tDL6rHu0vteHSj4a81qw--~B/aD01NDA7dz05NjA7YXBwaWQ9eXRhY2h5b24-/https://media.zenfs.com/en/video.reutersnews.com/dfda07f74d71a0b5a7da86997ca61fa1","width":960,"height":540,"tag":"original"},{"ur
2024-03-03 23:26:38 UTC	1300	IN	Data Raw: 2c 22 79 6d 65 64 69 61 3a 74 79 70 65 3d 63 61 76 69 64 65 6f 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 6d 79 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 6e 7a 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 6d 79 22 2c 22 43 6f 6d 73 63 6f 72 65 43 36 3d 43 4e 4e 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 61 75 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 73 67 22 2c 22 79 6d 65 64 69 61 3a 70 72 6f 76 69 64 65 72 5f 63 61 74 65 67 6f 72 79 3d 75 73 22 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 7b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 64 70 69 45 4b 4b 6d 5a 44 64 36 49 58 33 47 32 4b 49 4a Data Ascii: ,"ymedia:type=cavideo","ynews:region=my","ynews:region=nz","yfrontpage:region=my","ComscoreC6=CNN","ynews:region=au","ynews:region=sg","ymedia:provider_category=us"],"thumbnail":{"resolutions":[{"url":"https://s.yimg.com/uu/api/res/1.2/dpiEKKmZDd6IX3G2KIJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49958	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	955	OUT	POST /p?s=1197803361&t=1709508396827&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=us-east-1&test=aol-aa-2&rid=02r7skdiua1p4&pd=unknown&pt=home&A_utm=%7B%22GAM_READY_TIME%22%3A9859%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:38 UTC	1117	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:26:38 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-03-03 23:26:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49959	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	542	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	371	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:38 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49965	34.111.85.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	647	OUT	POST /rtb/yhb?cid=8YHB8F956 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive Content-Length: 1502 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:38 UTC	1502	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 59 48 42 38 46 39 35 36 22 2c 22 70 72 65 62 69 64 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 67 64 70 72 5f 61 70 70 6c 69 65 73 22 3a 66 61 6c Data Ascii: {"site":{"domain":"www.aol.com","page":"https://www.aol.com/","ref":"","topMostLocation":"https://www.aol.com/","isTop":true,"canonical_url":"https://www.aol.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8YHB8F956","prebid_version":1,"gdpr_applies":fal
2024-03-03 23:26:38 UTC	601	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Sun, 03 Mar 2024 23:26:38 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com content-type: application/json;charset=utf-8 date: Sun, 03 Mar 2024 23:26:37 GMT x-envoy-upstream-service-time: 11 server: istio-envoy via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-03-03 23:26:38 UTC	651	IN	Data Raw: 33 63 39 0d 0a 7b 22 69 64 22 3a 22 32 39 31 33 30 33 33 31 39 30 34 39 30 34 38 39 33 31 37 30 39 35 30 38 33 39 36 39 32 35 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 59 48 42 38 46 39 35 36 26 70 72 76 69 64 3d 32 35 32 36 38 25 32 43 32 35 32 32 34 25 32 43 32 35 30 32 35 25 32 43 32 35 31 34 36 25 32 43 32 35 32 32 33 25 32 43 32 35 33 30 30 25 32 43 32 35 30 32 38 25 32 43 32 35 30 32 37 25 32 43 32 35 33 30 32 25 32 43 32 35 32 Data Ascii: 3c9{"id":"291303319049048931709508396925","bidList":[],"ext":{"csUrl":[{"type":"iframe","url":"https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C252
2024-03-03 23:26:38 UTC	330	IN	Data Raw: 43 32 35 30 30 32 25 32 43 32 35 32 38 38 25 32 43 32 35 30 30 31 25 32 43 32 35 32 38 30 25 32 43 32 35 30 35 39 25 32 43 32 35 31 33 36 25 32 43 32 35 31 33 35 25 32 43 32 35 30 31 37 25 32 43 32 35 31 33 37 25 32 43 32 35 32 31 37 25 32 43 32 35 30 31 39 25 32 43 32 35 30 31 38 25 32 43 32 35 32 31 39 25 32 43 32 35 32 31 38 25 32 43 32 35 32 39 32 25 32 43 32 35 30 35 33 25 32 43 32 35 30 39 37 25 32 43 32 35 30 35 32 25 32 43 32 35 30 39 36 25 32 43 32 35 32 39 34 25 32 43 32 35 32 39 36 25 32 43 32 35 31 33 34 25 32 43 32 35 32 39 38 25 32 43 32 35 30 39 31 25 32 43 32 35 30 39 30 25 32 43 32 35 32 39 30 26 69 74 79 70 65 3d 59 48 42 26 70 75 72 70 6f 73 65 31 3d 31 26 67 64 70 72 63 6f 6e 73 65 6e 74 3d 31 26 67 64 70 72 3d 30 26 63 6f 70 70 61 3d Data Ascii: C25002%2C25288%2C25001%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49962	34.111.85.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	647	OUT	POST /rtb/yhb?cid=8YHB8F956 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive Content-Length: 1539 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:38 UTC	1539	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 59 48 42 38 46 39 35 36 22 2c 22 70 72 65 62 69 64 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 67 64 70 72 5f 61 70 70 6c 69 65 73 22 3a 66 61 6c Data Ascii: {"site":{"domain":"www.aol.com","page":"https://www.aol.com/","ref":"","topMostLocation":"https://www.aol.com/","isTop":true,"canonical_url":"https://www.aol.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8YHB8F956","prebid_version":1,"gdpr_applies":fal
2024-03-03 23:26:38 UTC	602	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Sun, 03 Mar 2024 23:26:38 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com content-type: application/json;charset=utf-8 date: Sun, 03 Mar 2024 23:26:38 GMT x-envoy-upstream-service-time: 231 server: istio-envoy via: 1.1 google Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-03-03 23:26:38 UTC	650	IN	Data Raw: 33 63 39 0d 0a 7b 22 69 64 22 3a 22 33 35 30 35 34 33 33 39 35 31 32 34 34 39 37 31 31 31 37 30 39 35 30 38 33 39 36 39 32 39 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 68 65 63 6b 73 79 6e 63 2e 70 68 70 3f 76 73 53 79 6e 63 3d 31 26 63 73 3d 38 26 63 76 3d 33 31 26 68 74 74 70 73 3d 31 26 63 69 64 3d 38 59 48 42 38 46 39 35 36 26 70 72 76 69 64 3d 32 35 32 36 38 25 32 43 32 35 32 32 34 25 32 43 32 35 30 32 35 25 32 43 32 35 31 34 36 25 32 43 32 35 32 32 33 25 32 43 32 35 33 30 30 25 32 43 32 35 30 32 38 25 32 43 32 35 30 32 37 25 32 43 32 35 33 30 32 25 32 43 32 35 32 Data Ascii: 3c9{"id":"350543395124497111709508396929","bidList":[],"ext":{"csUrl":[{"type":"iframe","url":"https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C252
2024-03-03 23:26:38 UTC	331	IN	Data Raw: 32 43 32 35 30 30 32 25 32 43 32 35 32 38 38 25 32 43 32 35 30 30 31 25 32 43 32 35 32 38 30 25 32 43 32 35 30 35 39 25 32 43 32 35 31 33 36 25 32 43 32 35 31 33 35 25 32 43 32 35 30 31 37 25 32 43 32 35 31 33 37 25 32 43 32 35 32 31 37 25 32 43 32 35 30 31 39 25 32 43 32 35 30 31 38 25 32 43 32 35 32 31 39 25 32 43 32 35 32 31 38 25 32 43 32 35 32 39 32 25 32 43 32 35 30 35 33 25 32 43 32 35 30 39 37 25 32 43 32 35 30 35 32 25 32 43 32 35 30 39 36 25 32 43 32 35 32 39 34 25 32 43 32 35 32 39 36 25 32 43 32 35 31 33 34 25 32 43 32 35 32 39 38 25 32 43 32 35 30 39 31 25 32 43 32 35 30 39 30 25 32 43 32 35 32 39 30 26 69 74 79 70 65 3d 59 48 42 26 70 75 72 70 6f 73 65 31 3d 31 26 67 64 70 72 63 6f 6e 73 65 6e 74 3d 31 26 67 64 70 72 3d 30 26 63 6f 70 70 61 Data Ascii: 2C25002%2C25288%2C25001%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49960	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	542	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	371	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:38 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49868	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	753	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1084 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:38 UTC	1084	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 39 31 35 38 31 63 31 2d 38 30 64 38 2d 34 61 30 32 2d 38 62 62 31 2d 33 34 34 39 63 38 66 31 30 63 34 65 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 37 36 30 37 39 31 39 38 39 30 33 35 38 30 36 31 37 30 39 35 30 38 33 39 36 38 35 39 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 33 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b Data Ascii: {"id":"591581c1-80d8-4a02-8bb1-3449c8f10c4e","cur":["USD"],"imp":[{"id":"17607919890358061709508396859","secure":1,"bidfloor":0.35,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":600}]},"ext":{
2024-03-03 23:26:38 UTC	573	IN	HTTP/1.1 204 No Content Date: Sun, 03 Mar 2024 23:26:38 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49961	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	542	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	371	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:38 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49964	34.120.63.153	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	609	OUT	POST /rtb/prebid?cid=8CUPH46U8 HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 1163 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1163	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 61 62 74 65 22 3a 22 53 53 50 5f 43 4c 49 45 4e 54 22 2c 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 43 55 50 48 34 36 55 38 22 2c 22 70 72 65 62 69 64 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 67 64 70 72 5f 61 70 70 6c 69 65 73 22 3a 66 61 6c Data Ascii: {"site":{"domain":"www.aol.com","page":"https://www.aol.com/","ref":"","topMostLocation":"https://www.aol.com/","isTop":true,"canonical_url":"https://www.aol.com/"},"ext":{"abte":"SSP_CLIENT","customer_id":"8CUPH46U8","prebid_version":1,"gdpr_applies":fal
2024-03-03 23:26:38 UTC	659	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Sun, 03 Mar 2024 23:26:38 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com content-type: application/json;charset=utf-8 date: Sun, 03 Mar 2024 23:26:38 GMT x-envoy-upstream-service-time: 29 vary: Accept-Encoding server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 35 36 64 0d 0a 7b 22 69 64 22 3a 22 33 35 30 35 34 33 33 39 35 31 32 34 34 39 37 31 31 31 37 30 39 35 30 38 33 39 36 39 32 39 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 5f 70 64 3d 31 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a Data Ascii: 56d{"id":"350543395124497111709508396929","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"image","url":"https://x.bidswitch.net/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1"},{"type":"image","url":
2024-03-03 23:26:38 UTC	149	IN	Data Raw: 32 43 34 36 32 25 32 43 32 32 32 25 32 43 38 30 25 32 43 31 30 38 26 69 74 79 70 65 3d 50 52 45 42 49 44 26 70 75 72 70 6f 73 65 31 3d 31 26 67 64 70 72 63 6f 6e 73 65 6e 74 3d 31 26 67 64 70 72 3d 30 26 63 6f 70 70 61 3d 30 26 75 73 70 5f 73 74 61 74 75 73 3d 31 26 75 73 70 5f 63 6f 6e 73 65 6e 74 3d 31 26 75 73 70 73 74 72 69 6e 67 3d 31 59 4e 4e 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 22 7d 5d 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1"}]}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49972	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	611	OUT	POST /openrtb/pbjs?s=1057757 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 1395 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1395	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 34 35 34 30 31 38 30 38 38 39 34 32 38 32 30 31 37 30 39 35 30 38 33 39 36 38 37 32 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 74 72 75 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 33 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 2c 22 61 6c 6c 75 22 3a 33 2c 22 72 65 6e 22 3a 66 61 6c 73 65 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 2d 70 72 65 22 2c 22 75 73 65 72 49 64 73 22 3a 5b 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 76 70 64 22 3a 66 61 6c 73 65 Data Ascii: {"id":"94540180889428201709508396872","site":{"page":"https://www.aol.com/"},"ext":{"source":"prebid","ixdiag":{"ls":true,"mfu":0,"bu":3,"iu":0,"nu":0,"ou":0,"allu":3,"ren":false,"version":"8.13.0-pre","userIds":[],"url":"https://www.aol.com/","vpd":false
2024-03-03 23:26:38 UTC	889	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:38 GMT Content-Type: application/json Content-Length: 51 Connection: close CF-Ray: 85ed6482e8f6428e-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.aol.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:38 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BQBnSwspU1AfbqRtDzidWpK9k3t%2FSxnrrFXESoIM7Pz3z2nCwbdAjUue5iKp3cNV0fokeXo3%2FjSkLsVbKOhay7%2FyhqbGT%2FSVPcJHjbq2auoV0Lc9V2TyQFsvqIJ0BQcbBj1LoPYM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:26:38 UTC	51	IN	Data Raw: 7b 22 69 64 22 3a 22 39 34 35 34 30 31 38 30 38 38 39 34 32 38 32 30 31 37 30 39 35 30 38 33 39 36 38 37 32 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"94540180889428201709508396872","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49973	151.101.129.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	638	OUT	POST /OpenRTB/TaboolaHB/auction?publisher=1635762 HTTP/1.1 Host: display.bidder.taboola.com Connection: keep-alive Content-Length: 1046 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1046	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 31 31 30 37 33 32 36 35 38 34 32 31 33 32 35 31 37 30 39 35 30 38 33 39 36 38 37 31 22 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 31 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 22 41 4f 4c 20 2d 20 48 6f 6d 65 70 61 67 65 20 2d 20 44 65 73 6b 74 6f 70 20 2d 20 54 6f 70 5f 52 69 67 68 74 5f 43 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 65 78 74 22 3a 7b 22 67 70 69 64 22 3a 22 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 61 73 5f 74 6f 70 5f 72 69 67 68 74 5f 63 22 7d 7d 2c 7b 22 69 64 22 3a 32 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 Data Ascii: {"id":"21107326584213251709508396871","imp":[{"id":1,"banner":{"format":[{"w":300,"h":600}]},"tagid":"AOL - Homepage - Desktop - Top_Right_C","bidfloor":0,"bidfloorcur":"USD","ext":{"gpid":"us_aol_hp_dt_as_top_right_c"}},{"id":2,"banner":{"format":[{"w":3
2024-03-03 23:26:38 UTC	372	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: application/json;charset=utf-8 x-envoy-upstream-service-time: 12 Access-Control-Allow-Origin: https://www.aol.com Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:38 GMT Via: 1.1 varnish X-Served-By: cache-ewr18124-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508399.606623,VS0,VE16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49971	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	610	OUT	POST /openrtb/pbjs?s=1057752 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 843 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	843	OUT	Data Raw: 7b 22 69 64 22 3a 22 32 35 33 36 31 37 39 39 39 37 39 31 32 31 38 34 31 37 30 39 35 30 38 33 39 36 39 33 32 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 74 72 75 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 31 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 2c 22 61 6c 6c 75 22 3a 31 2c 22 72 65 6e 22 3a 66 61 6c 73 65 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 31 33 2e 30 2d 70 72 65 22 2c 22 75 73 65 72 49 64 73 22 3a 5b 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 76 70 64 22 3a 66 61 6c 73 65 Data Ascii: {"id":"25361799979121841709508396932","site":{"page":"https://www.aol.com/"},"ext":{"source":"prebid","ixdiag":{"ls":true,"mfu":0,"bu":1,"iu":0,"nu":0,"ou":0,"allu":1,"ren":false,"version":"8.13.0-pre","userIds":[],"url":"https://www.aol.com/","vpd":false
2024-03-03 23:26:38 UTC	891	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:38 GMT Content-Type: application/json Content-Length: 51 Connection: close CF-Ray: 85ed6482ebff421d-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.aol.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:38 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LF20KQ50a7NSwOC3VOZFZJddbs1SsnyyKbWsO9XC%2BkI1FsPaiBE8Vz%2B4%2FDEE%2FRh1leUz%2B0Zn2rSd047F5XtK6CcpVfiOUJikV1sUEU3W4eiuNnQLw0vvjF%2FPvHIRZoloA3D5jQ4V"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:26:38 UTC	51	IN	Data Raw: 7b 22 69 64 22 3a 22 32 35 33 36 31 37 39 39 39 37 39 31 32 31 38 34 31 37 30 39 35 30 38 33 39 36 39 33 32 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"25361799979121841709508396932","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49963	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	542	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	371	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:38 GMT Content-Length: 0 Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type,X-Openrtb-Version Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Age: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49974	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	780	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b"
2024-03-03 23:26:38 UTC	785	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:38 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:38 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:38 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:38 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 71 6e 61 34 5f 5a 46 45 32 75 4a 55 77 71 79 32 44 5a 56 38 47 42 61 55 6e 78 67 30 37 72 65 65 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A"}
2024-03-03 23:26:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49975	151.101.1.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	784	OUT	GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=9
2024-03-03 23:26:38 UTC	732	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5311 x-amz-id-2: PmeTwAvuuXRS7ssoFjYAo7ID71UWh2IgoflSOrF1nbb+1f9VC+LASk5SlJFsFbhZg52a0Dj1xuY= x-amz-request-id: 44KN9M8D4N4VFH24 x-amz-replication-status: COMPLETED Last-Modified: Thu, 30 Nov 2023 18:35:31 GMT ETag: "ba0777792ce6c88cb6ac61d50f5ed420" x-amz-server-side-encryption: AES256 x-amz-version-id: 7Bl.XaNXVuUlHrm3kacHfal8wWJB1784 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:38 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-ewr18142-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1709508399.668264,VS0,VE27 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 4 Access-Control-Allow-Origin: *
2024-03-03 23:26:38 UTC	1378	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: <!doctype html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content=
2024-03-03 23:26:38 UTC	1378	IN	Data Raw: 21 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 26 26 20 61 72 72 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 20 7c 7c 20 61 72 72 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 20 69 66 20 28 6e 75 6c 6c 20 21 3d 20 5f 69 29 20 7b 20 76 61 72 20 5f 73 2c 20 5f 65 2c 20 5f 78 2c 20 5f 72 2c 20 5f 61 72 72 20 3d 20 5b 5d 2c 20 5f 6e 20 3d 20 21 30 2c 20 5f 64 20 3d 20 21 31 3b 20 74 72 79 20 7b 20 69 66 20 28 5f 78 20 3d 20 28 5f 69 20 3d 20 5f 69 2e 63 61 6c 6c 28 61 72 72 29 29 2e 6e 65 78 74 2c 20 30 20 3d 3d 3d 20 69 29 20 7b 20 69 66 20 28 4f 62 6a 65 63 74 28 5f 69 29 20 21 3d 3d 20 5f 69 29 20 72 65 74 75 72 6e 3b 20 5f 6e 20 3d 20 21 31 3b 20 7d 20 65 6c 73 65 20 66 6f 72 20 28 3b 20 21 28 5f 6e 20 3d 20 28 5f 73 20 3d 20 5f 78 2e 63 61 6c Data Ascii: != typeof Symbol && arr[Symbol.iterator] \|\| arr["@@iterator"]; if (null != _i) { var _s, _e, _x, _r, _arr = [], _n = !0, _d = !1; try { if (_x = (_i = _i.call(arr)).next, 0 === i) { if (Object(_i) !== _i) return; _n = !1; } else for (; !(_n = (_s = _x.cal
2024-03-03 23:26:38 UTC	1378	IN	Data Raw: 6c 53 74 6f 72 61 67 65 3b 0a 20 20 20 20 76 61 72 20 72 65 61 64 46 72 6f 6d 4c 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 46 72 6f 6d 4c 73 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 75 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 69 66 20 28 6c 73 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6c 73 2e 67 65 74 49 74 65 6d 28 54 41 42 4f 4f 4c 41 5f 47 4c 4f 42 41 4c 5f 55 53 45 52 5f 4b 45 59 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 69 64 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 76 61 Data Ascii: lStorage; var readFromLs = function readFromLs() { var uid = null; if (ls) { try { uid = ls.getItem(TABOOLA_GLOBAL_USER_KEY); } catch (err) { uid = null; } } return uid; }; va
2024-03-03 23:26:38 UTC	1177	IN	Data Raw: 43 6f 6f 6b 69 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 76 61 72 20 75 69 64 46 72 6f 6d 54 52 43 20 3d 20 77 69 6e 64 6f 77 2e 54 52 43 20 3f 20 77 69 6e 64 6f 77 2e 54 52 43 2e 75 73 65 72 5f 69 64 20 3a 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 69 66 20 28 75 69 64 46 72 6f 6d 54 52 43 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 69 64 46 72 6f 6d 54 52 43 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 76 61 72 20 6c 6f 61 64 49 66 73 53 63 72 69 70 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 49 66 73 53 63 72 69 70 74 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 69 66 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: Cookie; } var uidFromTRC = window.TRC ? window.TRC.user_id : undefined; if (uidFromTRC) { return uidFromTRC; } return undefined; }; var loadIfsScript = function loadIfsScript() { var ifs = document.creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49970	104.36.115.111	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	622	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1345 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1345	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 39 35 30 38 33 39 36 39 31 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 37 33 36 37 32 38 33 30 38 32 38 37 36 30 31 32 31 37 30 39 35 30 38 33 39 36 38 37 35 22 2c 22 74 61 67 69 64 22 3a 22 35 35 33 37 33 30 30 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 61 73 5f 74 6f 70 5f 72 69 67 68 74 5f 63 22 7d 2c 22 67 70 69 64 22 3a 22 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 61 73 5f 74 6f 70 5f 72 69 67 68 74 5f 63 22 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 Data Ascii: {"id":"1709508396915","at":1,"cur":["USD"],"imp":[{"id":"73672830828760121709508396875","tagid":"5537300","secure":1,"ext":{"data":{"pbadslot":"us_aol_hp_dt_as_top_right_c"},"gpid":"us_aol_hp_dt_as_top_right_c"},"bidfloorcur":"USD","banner":{"w":300,"h":6
2024-03-03 23:26:38 UTC	225	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com Cache-Control: no-cache, no-store, must-revalidate Date: Sun, 03 Mar 2024 23:26:38 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49969	104.36.115.111	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	621	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 875 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	875	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 39 35 30 38 33 39 36 39 33 38 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 36 39 30 33 37 34 38 33 37 31 39 34 32 36 30 37 31 37 30 39 35 30 38 33 39 36 39 33 33 22 2c 22 74 61 67 69 64 22 3a 22 35 35 33 37 33 30 33 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 33 35 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 6d 69 64 5f 63 65 6e 74 65 72 22 7d 2c 22 67 70 69 64 22 3a 22 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 6d 69 64 5f 63 65 6e 74 65 72 22 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 39 Data Ascii: {"id":"1709508396938","at":1,"cur":["USD"],"imp":[{"id":"69037483719426071709508396933","tagid":"5537303","bidfloor":0.35,"secure":1,"ext":{"data":{"pbadslot":"us_aol_hp_dt_mid_center"},"gpid":"us_aol_hp_dt_mid_center"},"bidfloorcur":"USD","banner":{"w":9
2024-03-03 23:26:38 UTC	225	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com Cache-Control: no-cache, no-store, must-revalidate Date: Sun, 03 Mar 2024 23:26:37 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49977	142.251.40.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	816	OUT	GET /static/topics/topics_frame.html HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	710	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Content-Length: 104248 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 03 Mar 2024 23:04:14 GMT Expires: Sun, 03 Mar 2024 23:54:14 GMT Cache-Control: public, max-age=3000, stale-while-revalidate=3600 Age: 1344 Last-Modified: Mon, 26 Feb 2024 20:45:19 GMT Content-Type: text/html Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:38 UTC	542	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title>Topics Frame</title> <meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iO
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c Data Ascii: ){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof global
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 67 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 67 29 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 22 65 73 36 22 29 3b 77 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 28 30 2c 71 2e 53 79 6d 62 6f 6c 29 28 22 53 79 6d 62 6f 6c 2e 69 74 Data Ascii: comp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(g){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(g\|\|"")+"_"+d++,g)};return e},"es6");w("Symbol.iterator",function(a){if(a)return a;a=(0,q.Symbol)("Symbol.it
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6d 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 6e 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6f 61 3b 69 66 28 66 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: rguments[c];if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|ma},"es6");var na="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},oa;if(fa&&"function"==typeof
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 28 61 2c 62 29 7b 75 61 28 61 2e 67 29 3b 76 61 72 20 63 3d 61 2e 67 2e 69 3b 69 66 28 63 29 72 65 74 75 72 6e 20 7a 61 28 61 2c 22 72 65 74 75 72 6e 22 69 6e 20 63 3f 63 5b 22 72 65 74 75 72 6e 22 5d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 64 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 62 2c 61 2e 67 2e 72 65 74 75 72 6e 29 3b 61 2e 67 2e 72 65 74 75 72 6e 28 62 29 3b 72 65 74 75 72 6e 20 41 61 28 61 29 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 69 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c Data Ascii: (a,b){ua(a.g);var c=a.g.i;if(c)return za(a,"return"in c?c["return"]:function(d){return{value:d,done:!0}},b,a.g.return);a.g.return(b);return Aa(a)},za=function(a,b,c,d){try{var e=b.call(a.g.i,c);if(!(e instanceof Object))throw new TypeError("Iterator resul
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 61 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 61 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 2c 22 65 73 36 22 29 3b 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 29 7b 72 65 74 75 72 6e 20 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 66 3a 6e Data Ascii: nts.length;c++)b[c-a]=arguments[c];return b};w("Reflect.setPrototypeOf",function(a){return a?a:sa?function(b,c){try{return sa(b,c),!0}catch(d){return!1}}:null},"es6");w("Promise",function(a){function b(){this.g=null}function c(f){return f instanceof e?f:n
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 73 28 6b 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 79 61 28 68 2c 66 29 3a 74 68 69 73 2e 46 28 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 32 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 31 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 66 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 Data Ascii: then}catch(k){this.s(k);return}"function"==typeof h?this.ya(h,f):this.F(f)};e.prototype.s=function(f){this.W(2,f)};e.prototype.F=function(f){this.W(1,f)};e.prototype.W=function(f,h){if(0!=this.h)throw Error("Cannot settle("+f+", "+h+"): Promise already se
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 76 61 72 20 6c 2c 6e 2c 70 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6e 3d 74 7d 29 3b 74 68 69 73 2e 5a 28 6b 28 66 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 66 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 Data Ascii: var l,n,p=new e(function(r,t){l=r;n=t});this.Z(k(f,l),k(h,n));return p};e.prototype.catch=function(f){return this.then(void 0,f)};e.prototype.Z=function(f,h){function k(){switch(l.h){case 1:f(l.i);break;case 2:h(l.i);break;default:throw Error("Unexpected
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 66 28 66 29 7b 66 3d 78 28 66 29 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 21 63 28 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 6c 61 28 66 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 63 61 28 66 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 6c 61 28 66 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 66 29 3b 66 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 Data Ascii: f(f){f=x(f);for(var h;!(h=f.next()).done;)h=h.value,this.set(h[0],h[1])}};g.prototype.set=function(f,h){if(!c(f))throw Error("Invalid WeakMap key");if(!la(f,d)){var k=new b;ca(f,d,{value:k})}if(!la(f,d))throw Error("WeakMap key fail: "+f);f[d][this.g]=h;r
2024-03-03 23:26:38 UTC	1252	IN	Data Raw: 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 41 29 2c 74 68 69 73 5b 31 5d 2e 48 2e 6e 65 78 74 3d 6c 2e 41 2c 74 68 69 73 5b 31 5d 2e 48 3d 6c 2e 41 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 41 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 41 2e 48 2e 6e 65 78 74 3d 68 2e 41 2e 6e 65 78 74 2c 68 2e 41 2e 6e 65 78 74 2e 48 3d Data Ascii: :this[1],key:h,value:k},l.list.push(l.A),this[1].H.next=l.A,this[1].H=l.A,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.A&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.A.H.next=h.A.next,h.A.next.H=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49978	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	938	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1490	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2111258 Cache-Control: public, max-age=2592000 Cache-Tag: 224671364923081073303863540009142071981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100056-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 93 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 224671364923081073303863540009142071981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "42286ba6d6f057d86973c9e5d55cd1b0" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 03:55:30 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7962) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2443,owidth=50,oheight=50,obytes=3678,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100056-IAD X-Timer: S1707397140.157303,VS0,VE93 Content-Length: 2443 Connection: close
2024-03-03 23:26:38 UTC	2443	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 95 9a 9c 9d a1 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 93 98 9b 9e a2 a2 81 89 8f 9e a2 a2 9e a2 a2 86 8d 92 9e a2 a2 9e a2 a2 9e a2 a2 9d a1 a2 8f 95 98 9d a1 a1 9d a1 a1 9e a2 a2 8f 95 98 9e a2 a2 9e a2 a2 9e a2 a2 94 99 9b 83 8b 90 9e a2 a2 88 8f 93 9e a2 a2 9e a2 a2 9e a2 a2 9e a1 a1 0c 23 40 9e a2 a2 23 61 92 0d 24 41 0f 26 42 0e 25 41 0f 2b 4b 22 5f 8f 19 2f 49 82 8a 8f 20 35 4e 10 26 43 16 2c 48 1e 52 7f 1a 48 71 5a 67 75 4a 59 6a 35 46 5b 80 88 8e 1a 30 4a 0d 25 43 0e 27 46 25 38 51 75 7e 86 83 8b 90 38 4a 5e 14 3a 5f 1a 4a 73 0d 23 40 18 2d 48 3a 4b 5f 19 2f 4a 10 2d 4d 22 60 90 17 Data Ascii: PNGIHDR22)xPLTEGpL#@#a$A&B%A+K"_/I 5N&C,HRHqZguJYj5F[0J%C'F%8Qu~8J^:_Js#@-H:K_/J-M"`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49979	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	932	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 395095 Cache-Control: public, max-age=2592000 Cache-Tag: 299233884771220162348710421289867129232,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21935-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 107 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 299233884771220162348710421289867129232,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e1659a010543d3c34b4f66a24f826f40" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (nya/1C46) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1793,owidth=50,oheight=50,obytes=2022,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000096-IAD X-Timer: S1706521303.454254,VS0,VE157 Content-Length: 1793 Connection: close
2024-03-03 23:26:38 UTC	1793	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c be c0 c1 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bf bf c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bf bf c3 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bc be c1 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be bf c2 be c0 c2 be c0 c2 be c0 c2 be Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49981	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FaWeb9EeSRk2NKVma2xejiw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fspurs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ecb227b63dd07f6db6e9782edaa510816609967 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1142	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133421 Cache-Control: public, max-age=2592000 Cache-Tag: 490156191650674308233120232799611050023,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100029-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 77 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 490156191650674308233120232799611050023,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "04350280a37b2459937905a48569a857" Expiration: expiry-date="Thu, 25 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 26 Jan 2024 16:33:06 GMT Server: ECAcc (nya/799A) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1889,owidth=50,oheight=50,obytes=2297,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100029-IAD X-Timer: S1707374978.857792,VS0,VE77 Content-Length: 1889 Connection: close
2024-03-03 23:26:38 UTC	1889	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff 82 8c 90 ff ff ff ff ff ff ff ff ff cd d1 d3 ff ff ff ff ff ff ff ff ff cb cf d1 ff ff ff fe fe fe 8b 94 98 f3 f4 f4 f0 f1 f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 b8 bb ec ee ee ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e6 e8 e9 e7 e9 ea 9c a3 a7 bb c0 c3 e2 e5 e6 9f a6 a9 df e1 e2 ff ff ff ff ff ff ff ff ff d3 d6 d8 84 8d 92 65 71 76 6f 7a 7f ff ff ff e1 e3 e4 7c 87 8b 60 6c 72 ff ff ff 89 92 96 fb fb fb a0 a7 aa 9b a3 a6 cf d3 d5 ff ff ff ac b2 b5 c8 cc ce fe ff ff 70 7b 80 a6 ad b0 c1 c6 c8 d8 db dd fc fc fc fa fa fa ed ee ef f3 f4 f4 ff Data Ascii: PNGIHDR22)xPLTEGpLeqvoz\|`lrp{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49980	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	932	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuDR9Mwaq2Ewj20HNDbJCsg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fknicks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=425c28aa64f58f98097ebabb118cfcfeb80d8ffa HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 913528 Cache-Control: public, max-age=2592000 Cache-Tag: 203932418625427984763885456507068785729,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000116-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 203932418625427984763885456507068785729,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "a8a6107564c5f4ac3bb288f2deff0d0a" Expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 08 Feb 2024 05:07:34 GMT Server: ECAcc (nya/7921) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2128,owidth=50,oheight=50,obytes=3135,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000116-IAD X-Timer: S1708594870.110326,VS0,VE1 Content-Length: 2128 Connection: close
2024-03-03 23:26:38 UTC	2128	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c f8 fb fd f8 fb fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 fa fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff ff ff e2 ee f7 e8 f2 f9 ff ff ff fc fd fe ff ff ff ff ff ff ff ff ff ff ff ff fd fe ff ee f5 fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e9 f2 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 84 26 be c0 c2 00 6b b6 f4 84 26 df ec f6 eb 83 2c f0 83 29 9f 7b 58 8d 79 63 e0 Data Ascii: PNGIHDR22)xPLTEGpL&k&,){Xyc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49982	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	935	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh7O7IoQNTNmxvnzos4Dk_Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20220917%2F500x500%2Fcavaliers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=62839313912a33febdf193b8cf596ba44463a379 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1062254 Cache-Control: public, max-age=2592000 Cache-Tag: 274469423328619801018042047046980725494,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21945-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 149 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 274469423328619801018042047046980725494,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "02657a57715136e73df932a1baab26e7" Expiration: expiry-date="Thu, 25 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 26 Jan 2024 16:38:10 GMT Server: ECAcc (nya/7989) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1693,owidth=50,oheight=50,obytes=1742,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21945-LGA X-Timer: S1708446144.051726,VS0,VE149 Content-Length: 1693 Connection: close
2024-03-03 23:26:38 UTC	1693	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 88 50 4c 54 45 47 70 4c b4 96 5a b4 96 5a b4 96 59 b4 96 5a b4 96 5a b4 96 59 b4 96 59 b4 96 59 b4 96 59 b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 Data Ascii: PNGIHDR22)xPLTEGpLZZYZZYYYYZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49983	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FGZGEhZrM.ElkBBel7PyrkQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fthunder_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bbee72fc45aaf87f8593bcbf78061f6419c1c6f6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:38 UTC	1036	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 414679 Cache-Control: public, max-age=2592000 Cache-Tag: 414949990177836941899077680346253387921,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:38 GMT Edge-Cache-Tag: 414949990177836941899077680346253387921,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "acc901c1c48d9b5c70aa019ec7807ed4" Expiration: expiry-date="Sat, 10 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 11 Feb 2024 10:32:37 GMT Server: ECAcc (nya/7954) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1801,owidth=50,oheight=50,obytes=2534,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000061-IAD X-Timer: S1709093719.262943,VS0,VE7 Content-Length: 1801 Connection: close
2024-03-03 23:26:38 UTC	1801	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 02 2e 63 f7 a1 96 ff ff ff 00 2d 62 00 2d 62 00 2d 62 41 5b 82 01 2e 63 ff ff ff f9 b7 af be de f0 00 2d 62 00 2d 62 00 2d 62 97 ca e7 ff ff ff fe fe fe ff fd fd ff ff ff f8 ab a1 00 2d 62 00 2d 62 00 2d 62 00 2d 62 00 2d 62 00 2d 62 00 2d 62 f5 89 7c 00 2d 62 ff ff ff 00 2d 62 eb f5 fb 59 ab d8 0f 39 6b b6 da ee fa c6 bf fe f7 f6 ff ff ff 00 2d 62 fe f7 f6 57 a9 d7 39 58 81 00 2d 62 00 2d 62 75 b9 df 00 2d 62 ff ff ff c3 e1 f1 00 2d 62 ff fe fe 01 2e 63 f6 a3 9a f1 8f 84 fe f5 f3 fb cd c7 d6 ea f5 af d6 ec ff fd fd d6 ea f5 f6 fa fd f8 fb fd fe f8 f7 ab d4 eb 9d b6 cc 8d c5 e4 f8 aa a0 41 62 8a f5 82 74 b1 d7 ed 90 58 64 fd Data Ascii: PNGIHDR22)xPLTEGpL.c-b-b-bA[.c-b-b-b-b-b-b-b-b-b-b\|-b-bY9k-bW9X-b-bu-b-b.cAbtXd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49985	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	1680	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2602&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25014&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:38 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:38 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:38 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49988	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	1680	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2605&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25014&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:38 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:38 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:38 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49987	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	1701	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2606&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25014&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:38 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:38 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:38 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	49986	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:38 UTC	1691	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2610&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25082&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:38 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:38 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:38 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	49989	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	753	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1068 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:39 UTC	1068	OUT	Data Raw: 7b 22 69 64 22 3a 22 62 33 39 33 32 33 62 65 2d 62 62 36 64 2d 34 37 32 38 2d 61 66 32 35 2d 36 64 30 38 33 32 38 35 65 38 35 61 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 36 30 39 38 30 36 35 38 39 35 32 33 30 35 33 33 31 37 30 39 35 30 38 33 39 36 38 36 33 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b 22 64 66 70 5f 61 64 5f 75 6e 69 74 5f 63 6f 64 Data Ascii: {"id":"b39323be-bb6d-4728-af25-6d083285e85a","cur":["USD"],"imp":[{"id":"60980658952305331709508396863","secure":1,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250}]},"ext":{"dfp_ad_unit_cod
2024-03-03 23:26:39 UTC	573	IN	HTTP/1.1 204 No Content Date: Sun, 03 Mar 2024 23:26:39 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:39 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	49990	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	753	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1251 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:39 UTC	1251	OUT	Data Raw: 7b 22 69 64 22 3a 22 66 64 36 31 65 62 35 32 2d 30 63 63 37 2d 34 32 63 31 2d 61 63 39 64 2d 61 63 34 31 66 66 66 61 39 39 63 38 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 32 34 39 33 39 36 32 36 31 30 30 38 35 32 39 39 31 37 30 39 35 30 38 33 39 36 38 36 34 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 33 35 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 76 69 64 65 6f 22 Data Ascii: {"id":"fd61eb52-0cc7-42c1-ac9d-ac41fffa99c8","cur":["USD"],"imp":[{"id":"24939626100852991709508396864","secure":1,"bidfloor":0.35,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":300,"h":250}]},"video"
2024-03-03 23:26:39 UTC	573	IN	HTTP/1.1 204 No Content Date: Sun, 03 Mar 2024 23:26:39 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:39 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	49991	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	753	OUT	POST /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Content-Length: 1072 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json x-openrtb-version: 2.5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:39 UTC	1072	OUT	Data Raw: 7b 22 69 64 22 3a 22 63 35 63 66 61 63 33 32 2d 30 63 63 61 2d 34 65 64 39 2d 61 38 65 38 2d 34 66 62 35 35 64 30 31 63 32 61 38 22 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 39 39 38 30 39 33 31 31 34 32 38 34 39 37 32 34 31 37 30 39 35 30 38 33 39 36 39 33 31 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 33 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 6d 69 6d 65 73 22 3a 5b 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 22 69 6d 61 67 65 2f 6a 70 67 22 5d 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 65 78 74 22 3a 7b 22 Data Ascii: {"id":"c5cfac32-0cca-4ed9-a8e8-4fb55d01c2a8","cur":["USD"],"imp":[{"id":"99809311428497241709508396931","secure":1,"bidfloor":0.3,"banner":{"mimes":["text/html","text/javascript","application/javascript","image/jpg"],"format":[{"w":970,"h":250}]},"ext":{"
2024-03-03 23:26:39 UTC	573	IN	HTTP/1.1 204 No Content Date: Sun, 03 Mar 2024 23:26:39 GMT Server: ATS/9.1.10.94 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Methods: POST,GET,HEAD,OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Credentials: true Age: 0 Connection: close Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:39 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	49880	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	1315	OUT	GET /v1/video/sapi/streams/3caca4ca-191c-3933-bab5-595ca1d1495a?ad.pubfamily=aol&srid=2557576709&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=b9b3c6c5-2cd7-4937-8390-628222cda75f&region=US&site=aolhomepage&expb=aol-aa-2&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=bdud5hbm&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.3.9&try=1&failover_count=0&ads=ima&nad=0&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aolfrontpage&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1 Host: video-api.yql.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:39 UTC	971	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 ps: bdud5hbm cache-control: private access-control-allow-origin: https://www.aol.com access-control-allow-methods: GET, POST, HEAD, OPTIONS timing-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Content-Type access-control-expose-headers: Access-Control-Allow-Credentials, Access-Control-Allow-Headers, Access-Control-Allow-Origin, Content-Length, SKT y-rid: 4k2h6ptiua1pf x-yahoo-request-id: 4k2h6ptiua1pf x-request-id: 500dc45b-a453-472b-985c-5dc9db0e63c0 content-length: 6446 x-envoy-upstream-service-time: 25 date: Sun, 03 Mar 2024 23:26:38 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:39 UTC	1300	IN	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 72 65 73 75 6c 74 73 22 3a 7b 22 6d 65 64 69 61 4f 62 6a 22 3a 5b 7b 22 69 64 22 3a 22 33 63 61 63 61 34 63 61 2d 31 39 31 63 2d 33 39 33 33 2d 62 61 62 35 2d 35 39 35 63 61 31 64 31 34 39 35 61 22 2c 22 6d 65 74 61 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 20 77 69 6e 74 65 72 20 73 74 6f 72 6d 20 69 73 20 73 6c 61 6d 6d 69 6e 67 20 43 61 6c 69 66 6f 72 6e 69 61 2c 20 77 69 74 68 20 70 61 72 74 73 20 6f 66 20 74 68 65 20 53 69 65 72 72 61 20 4e 65 76 61 64 61 73 20 67 65 74 74 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 61 20 6d 65 74 65 72 20 6f 66 20 73 6e 6f 77 2e 20 41 20 62 75 73 79 20 69 6e 74 65 72 73 74 61 74 65 20 68 61 73 20 62 65 65 6e 20 73 68 75 Data Ascii: {"query":{"results":{"mediaObj":[{"id":"3caca4ca-191c-3933-bab5-595ca1d1495a","meta":{"attribution":"","description":"A winter storm is slamming California, with parts of the Sierra Nevadas getting more than a meter of snow. A busy interstate has been shu
2024-03-03 23:26:39 UTC	1300	IN	Data Raw: 5f 63 65 72 74 73 22 3a 7b 7d 2c 22 63 68 61 74 5f 63 68 61 6e 6e 65 6c 22 3a 7b 7d 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 7b 7d 2c 22 72 65 73 69 7a 65 64 5f 74 68 75 6d 62 6e 61 69 6c 73 22 3a 5b 5d 2c 22 63 6f 6e 63 75 72 72 65 6e 74 5f 76 69 65 77 65 72 5f 63 6f 75 6e 74 22 3a 30 2c 22 62 6c 6f 63 6b 5f 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 76 69 65 77 5f 63 6f 75 6e 74 22 3a 34 35 36 30 38 38 2c 22 6e 69 65 6c 73 65 6e 5f 62 65 61 63 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 75 70 6c 79 6e 6b 5f 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 69 76 65 5f 77 69 74 68 5f 61 64 73 22 3a 66 61 6c 73 65 7d 2c 22 73 74 72 65 61 6d 73 22 3a 5b 7b 22 68 6f 73 74 22 3a 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2e 61 70 69 2e 62 72 69 67 68 74 63 6f 76 Data Ascii: _certs":{},"chat_channel":{},"restrictions":{},"resized_thumbnails":[],"concurrent_viewer_count":0,"block_autoplay":false,"view_count":456088,"nielsen_beacons":false,"uplynk_live":false,"live_with_ads":false},"streams":[{"host":"https://edge.api.brightcov
2024-03-03 23:26:39 UTC	1300	IN	Data Raw: 74 65 72 2e 6d 33 75 38 3f 62 63 6f 76 5f 61 75 74 68 3d 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 32 4f 54 6b 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 4d 35 4f 58 30 2e 57 6f 4c 69 59 6a 6c 56 69 6f 41 65 61 6d 33 6a 7a 58 74 32 51 6c 42 Data Ascii: ter.m3u8?bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlB
2024-03-03 23:26:39 UTC	723	IN	Data Raw: 43 4f 4d 53 43 4f 52 45 5f 43 35 7d 26 43 41 36 3d 7b 43 4f 4d 53 43 4f 52 45 5f 43 36 7d 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 44 5f 53 54 41 52 54 22 2c 22 70 61 72 61 6d 22 3a 22 26 43 41 35 3d 30 39 26 43 41 36 3d 7b 43 4f 4d 53 43 4f 52 45 5f 43 36 7d 22 7d 5d 7d 5d 2c 22 70 73 70 69 64 22 3a 22 31 31 39 37 38 30 33 33 36 31 22 2c 22 69 73 72 63 22 3a 22 22 2c 22 6d 6d 41 63 74 69 76 69 74 79 49 64 22 3a 22 22 2c 22 6d 65 64 69 61 6d 65 74 72 69 65 22 3a 22 22 7d 2c 22 73 74 61 74 75 73 22 3a 7b 22 63 6f 64 65 22 3a 22 31 30 30 22 2c 22 6d 73 67 22 3a 22 72 65 61 64 79 22 7d 2c 22 69 6d 61 22 3a 7b 22 76 6d 61 70 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 74 62 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 76 31 2f 65 76 70 2f 61 73 73 65 74 3f Data Ascii: COMSCORE_C5}&CA6={COMSCORE_C6}"},{"name":"AD_START","param":"&CA5=09&CA6={COMSCORE_C6}"}]}],"pspid":"1197803361","isrc":"","mmActivityId":"","mediametrie":""},"status":{"code":"100","msg":"ready"},"ima":{"vmapTag":"https://tb.video.yahoo.com/v1/evp/asset?
2024-03-03 23:26:39 UTC	1300	IN	Data Raw: 69 74 6c 65 3d 57 69 6e 74 65 72 2b 73 74 6f 72 6d 2b 77 72 65 61 6b 73 2b 68 61 76 6f 63 2b 61 63 72 6f 73 73 2b 53 69 65 72 72 61 2b 4e 65 76 61 64 61 73 26 63 6f 6e 74 65 6e 74 5f 69 64 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6e 6e 2e 63 6f 6d 25 32 46 76 69 64 65 6f 73 25 32 46 77 65 61 74 68 65 72 25 32 46 32 30 32 34 25 32 46 30 33 25 32 46 30 33 25 32 46 65 78 70 2d 63 61 6c 69 66 6f 72 6e 69 61 2d 77 69 6e 74 65 72 2d 73 74 6f 72 6d 2d 72 64 72 2d 30 33 30 33 30 32 61 73 65 67 32 2d 63 6e 6e 69 2d 75 2d 73 2d 2e 63 6e 6e 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 70 76 65 72 3d 31 2e 33 2e 39 26 61 76 65 72 3d 5b 45 56 50 5f 41 44 53 44 4b 56 45 52 5d 26 63 6f 75 6e 74 72 79 3d 55 53 26 73 74 61 74 65 3d 4e Data Ascii: itle=Winter+storm+wreaks+havoc+across+Sierra+Nevadas&content_id=https%3A%2F%2Fwww.cnn.com%2Fvideos%2Fweather%2F2024%2F03%2F03%2Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn&gpp=DBAA&gpp_sid=-1&pver=1.3.9&aver=[EVP_ADSDKVER]&country=US&state=N
2024-03-03 23:26:39 UTC	523	IN	Data Raw: 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 32 4f 54 6b 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 4d 35 4f 58 30 2e 57 6f 4c 69 59 6a 6c 56 69 6f 41 65 61 6d 33 6a 7a 58 74 32 51 6c 42 68 6e 52 38 51 6b 5a 6f 2d 65 30 39 78 4f 6f 47 46 58 76 38 4b 71 79 2d 75 7a 5a 75 75 42 34 41 4d 46 34 65 4c 74 64 57 75 49 6d 43 66 77 6a 66 54 77 55 76 6c 5f 50 4d 36 33 41 41 48 32 77 64 66 79 78 68 78 49 56 45 4c 63 65 5a 45 57 65 59 48 4a 48 41 42 46 46 6d 49 39 67 7a 6a 49 7a 6d 54 6e 5a 4f 66 66 50 53 77 50 74 34 43 2d 6c 2d 58 37 41 73 6c 6c 48 48 52 5f 6e 49 53 2d 73 4d 36 51 68 43 74 72 5f 34 33 71 75 54 46 34 66 34 65 6c 2d 49 72 41 64 4e 46 49 50 2d 64 6a 4e 39 36 66 77 75 70 72 46 52 72 4b 78 59 4e 30 57 36 64 67 58 32 41 2d 42 39 42 71 49 61 79 31 30 Data Ascii: iOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	49992	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	1564	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25036%2C25278%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25033%2C25274%2C25276%2C25071%2C25202%2C25003%2C25245%2C25127%2C25006%2C25204%2C25126%2C25007%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:39 UTC	491	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 31364 Content-Type: text/html; charset=UTF-8 Set-Cookie: usp_status=1; Expires=Fri, 30 Aug 2024 23:26:39 GMT; domain=.hb.yahoo.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 Expires: Sun, 03 Mar 2024 23:26:39 GMT Cache-Control: max-age=0, no-cache Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:39 GMT Connection: close
2024-03-03 23:26:39 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-03-03 23:26:39 UTC	16384	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 32 36 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 31 35 35 35 32 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 65 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 22 2c 22 6c 6f 6f 6b Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":26,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":15552000,"cc":"US","zone":"e","coc":"NA"},"cs":"8","look
2024-03-03 23:26:39 UTC	14979	IN	Data Raw: 56 61 6c 75 65 46 72 6f 6d 55 72 6c 41 73 41 72 72 61 79 3a 6d 2c 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 3a 68 2c 73 65 74 43 6f 6f 6b 69 65 3a 78 2c 67 65 74 43 6f 6f 6b 69 65 3a 77 2c 67 65 74 44 6f 6d 61 69 6e 46 6f 72 43 6f 6f 6b 69 65 3a 50 2c 67 65 74 51 75 65 72 79 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 43 68 65 63 6b 53 79 6e 63 55 72 6c 3a 4f 2c 67 65 74 52 61 6e 64 6f 6d 3a 43 2c 62 36 34 65 6e 63 6f 64 65 3a 46 2c 69 73 53 65 74 3a 6b 2c 65 76 65 6e 74 4c 69 62 3a 58 2c 65 78 74 65 6e 64 3a 4e 2c 73 65 74 53 63 72 69 70 74 3a 6a 2c 73 65 74 46 72 61 6d 65 3a 54 2c 73 65 74 49 6d 61 67 65 3a 52 2c 67 65 74 50 72 6f 78 79 3a 4c 2c 67 65 74 50 72 6f 74 6f 63 6f 6c 3a 4d 2c 73 75 70 70 6f 72 74 53 74 6f 72 61 67 65 3a 49 2c Data Ascii: ValueFromUrlAsArray:m,GetParamValueFromUrl:h,setCookie:x,getCookie:w,getDomainForCookie:P,getQueryParamValueFromCheckSyncUrl:O,getRandom:C,b64encode:F,isSet:k,eventLib:X,extend:N,setScript:j,setFrame:T,setImage:R,getProxy:L,getProtocol:M,supportStorage:I,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	49999	142.251.35.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	3717	OUT	GET /gampad/ads?pvsid=3589207970860027&correlator=145139669414128&eid=31081519%2C31081350%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202402220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_as_top_right_c%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a%2Cus_aol_hp_dt_top_center%2Cus_aol_hp_dt_mid_center&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x600%2C300x250%2C300x250%2C728x90%7C970x250%7C3x1%2C970x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1709508398540&adxs=-9%2C855%2C855%2C268%2C197&adys=-9%2C721%2C733%2C0%2C1841&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1%7C0%7C0%7C0%7C1&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.aol.com%2F&vis=1&psz=0x-1%7C300x600%7C300x600%7C1263x0%7C1121x290&msz=0x-1%7C300x600%7C300x0%7C1263x0%7C1121x290&fws=2%2C4%2C4%2C4%2C4&ohw=0%2C300%2C300%2C1263%2C1263&ga_vid=167189262.1709508399&ga_sid=1709508399&ga_hid=2079726794&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X2FzX3RvcF9yaWdodF9jIixbXV0sWyIvMjI4ODgxNTIyNzkvdXMvYW9sL2hwL2R0L3VzX2FvbF9ocF9kdF9hc190b3BfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL2FvbC9ocC9kdC91c19hb2xfaHBfZHRfYXNfdG9wX3JpZ2h0X2EiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X21pZF9jZW50ZXIiLFtdXV1dLG51bGwsM10.&dlt=1709508388026&idt=8752&prev_scp=loc%3Dtop_right%26noads%3D1%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_center%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0&cust_params=bucket%3Daol-aa-2%26colo%3Dus-east-1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Daol%26ver%3Dtd-app-aol%26pct%3Daolfrontpage%26pt%3Dhome%26spaceid%3D1197803361%26yrid%3D02r7skdiua1p4%26bka%3D0%26y_bx%3D1&adks=2925883975%2C3459255604%2C1294450886%2C274640380%2C2523778429&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	1135	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -1,-1,6408219540,-2,-2 Google-Creative-Id: -1,-1,138453077217,-2,-2 Google-MediationGroup-Id: -2,-2,-2 Google-MediationTag-Id: -2 Access-Control-Expose-Headers: x-google-amp-ad-validated-version Date: Sun, 03 Mar 2024 23:26:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 03-Mar-2024 23:41:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-03 23:26:40 UTC	117	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 61 6f 6c 2f 68 70 2f 64 74 2f 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 61 73 5f 74 6f 70 5f 72 69 67 68 74 5f 63 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 36 30 30 2c 33 30 30 2c 30 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 5b 5b 22 Data Ascii: 8000{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_as_top_right_c":["html",0,null,null,0,600,300,0,1,null,null,null,1,[["
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 49 44 3d 35 66 37 35 34 31 30 36 34 31 30 63 64 65 66 31 3a 54 3d 31 37 30 39 35 30 38 33 39 39 3a 52 54 3d 31 37 30 39 35 30 38 33 39 39 3a 53 3d 41 4c 4e 49 5f 4d 59 6e 49 55 56 4d 56 6c 73 49 59 6b 46 48 41 2d 52 53 77 4a 4d 64 68 6b 6f 77 59 77 22 2c 31 37 34 33 32 30 34 33 39 39 2c 22 2f 22 2c 22 61 6f 6c 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 63 66 30 33 65 34 31 61 30 63 3a 54 3d 31 37 30 39 35 30 38 33 39 39 3a 52 54 3d 31 37 30 39 35 30 38 33 39 39 3a 53 3d 41 4c 4e 49 5f 4d 5a 53 77 65 48 78 31 44 6f 58 75 42 35 41 64 62 59 44 5a 30 41 59 49 65 65 39 69 41 22 2c 31 37 34 33 32 30 34 33 39 39 2c 22 2f 22 2c 22 61 6f 6c 2e 63 6f 6d 22 2c 32 5d 5d 2c 5b 30 5d 2c 5b 30 5d 2c 5b 30 5d 2c 5b 30 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: ID=5f754106410cdef1:T=1709508399:RT=1709508399:S=ALNI_MYnIUVMVlsIYkFHA-RSwJMdhkowYw",1743204399,"/","aol.com",1],["UID=00000dcf03e41a0c:T=1709508399:RT=1709508399:S=ALNI_MZSweHx1DoXuB5AdbYDZ0AYIee9iA",1743204399,"/","aol.com",2]],[0],[0],[0],[0],null,null
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 65 6d 62 65 64 64 65 64 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 20 70 69 6e 63 68 2d 7a 6f 6f 6d 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 20 70 69 6e 63 68 2d 7a 6f 6f 6d 7d 68 74 6d 6c 2e 69 2d 61 6d 70 68 74 6d 6c 2d 66 69 65 3e 62 6f 64 79 2c 68 74 6d 6c 2e 69 2d 61 6d 70 68 74 6d 6c 2d 73 69 6e 67 6c 65 64 6f 63 3e 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 68 74 6d 6c 2e 69 2d 61 6d 70 68 74 6d 6c 2d 66 69 65 3a 6e 6f 74 28 2e 69 2d 61 6d 70 68 74 6d 6c 2d 69 6e 61 62 6f 78 29 3e 62 6f 64 79 2c 68 74 6d 6c 2e 69 2d 61 6d 70 68 74 6d 6c 2d 73 69 6e 67 6c 65 64 6f 63 3a 6e 6f 74 28 2e 69 2d 61 6d 70 68 74 6d 6c 2d 69 6e 61 62 6f 78 29 3e 62 6f 64 79 7b 70 Data Ascii: embedded{-ms-touch-action:pan-y pinch-zoom;touch-action:pan-y pinch-zoom}html.i-amphtml-fie>body,html.i-amphtml-singledoc>body{overflow:visible!important}html.i-amphtml-fie:not(.i-amphtml-inabox)>body,html.i-amphtml-singledoc:not(.i-amphtml-inabox)>body{p
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 73 61 62 6c 65 64 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 61 6d 70 2d 69 6e 73 74 61 67 72 61 6d 7b 70 61 64 64 69 6e 67 3a 35 34 70 78 20 30 70 78 20 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 61 6d 70 2d 69 66 72 61 6d 65 20 69 66 72 61 6d 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 7d 5b 61 6d 70 2d 61 63 63 65 73 73 5d 5b 61 6d 70 2d 61 63 63 65 73 73 2d 68 69 64 65 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2d 64 69 61 6c 6f 67 5d 2c 62 6f 64 79 3a 6e 6f 74 28 Data Ascii: sabled{overflow-x:hidden!important;overflow-y:hidden!important}amp-instagram{padding:54px 0px 0px!important;background-color:#fff}amp-iframe iframe{box-sizing:border-box!important}[amp-access][amp-access-hide]{display:none}[subscriptions-dialog],body:not(
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 30 30 30 76 68 29 21 69 6d 70 6f 72 74 61 6e 74 7d 61 6d 70 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 61 6d 70 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3e 69 6e 70 75 74 2c 61 6d 70 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3e 74 65 78 74 61 72 65 61 7b 70 61 64 64 69 6e 67 3a 30 2e 35 72 65 6d 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 33 29 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 73 2c 61 6d 70 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3e 69 6e 70 75 74 2c 61 6d 70 2d 61 75 74 6f 63 6f Data Ascii: 000vh)!important}amp-autocomplete{position:relative!important;display:inline-block!important}amp-autocomplete>input,amp-autocomplete>textarea{padding:0.5rem;border:1px solid rgba(0,0,0,.33)}.i-amphtml-autocomplete-results,amp-autocomplete>input,amp-autoco
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 68 74 5d 3a 6e 6f 74 28 2e 69 2d 61 6d 70 68 74 6d 6c 2d 6c 61 79 6f 75 74 2d 69 6e 74 72 69 6e 73 69 63 29 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 6c 61 79 6f 75 74 2d 69 6e 74 72 69 6e 73 69 63 20 2e 69 2d 61 6d 70 68 74 6d 6c 2d 73 69 7a 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 69 6e 74 72 69 6e 73 69 63 2d 73 69 7a 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 6c 61 79 6f 75 74 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 69 2d 61 6d 70 68 74 6d 6c Data Ascii: ht]:not(.i-amphtml-layout-intrinsic){display:inline-block;position:relative;max-width:100%}.i-amphtml-layout-intrinsic .i-amphtml-sizer{max-width:100%}.i-amphtml-intrinsic-sizer{max-width:100%;display:block!important}.i-amphtml-layout-container,.i-amphtml
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 25 3b 77 69 64 74 68 3a 30 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 6c 61 79 6f 75 74 2d 73 69 7a 65 2d 64 65 66 69 6e 65 64 20 2e 69 2d 61 6d 70 68 74 6d 6c 2d 66 69 6c 6c 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 72 65 70 6c 61 63 65 64 2d 63 6f 6e 74 65 6e 74 2c 2e 69 2d 61 6d 70 68 74 6d 6c 2d 73 63 72 65 65 6e 2d 72 65 61 64 65 Data Ascii: lay:block;height:0;max-height:100%;max-width:100%;min-height:100%;min-width:100%;width:0;margin:auto}.i-amphtml-layout-size-defined .i-amphtml-fill-content{position:absolute;top:0;left:0;bottom:0;right:0}.i-amphtml-replaced-content,.i-amphtml-screen-reade
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 6e 6f 74 62 75 69 6c 74 3a 6e 6f 74 28 2e 69 2d 61 6d 70 68 74 6d 6c 2d 6c 61 79 6f 75 74 2d 63 6f 6e 74 61 69 6e 65 72 29 3e 2a 2c 5b 6c 61 79 6f 75 74 5d 3a 6e 6f 74 28 5b 6c 61 79 6f 75 74 3d 63 6f 6e 74 61 69 6e 65 72 5d 29 3a 6e 6f 74 28 2e 69 2d 61 6d 70 68 74 6d 6c 2d 65 6c 65 6d 65 6e 74 29 3e 2a 2c 5b 77 69 64 74 68 5d 5b 68 65 69 67 68 74 5d 5b 68 65 69 67 68 74 73 5d 3a 6e 6f 74 28 5b 6c 61 79 6f 75 74 5d 29 3a 6e 6f 74 28 2e 69 2d 61 6d 70 68 74 6d 6c 2d 65 6c 65 6d 65 6e 74 29 3e 2a 2c 5b 77 69 64 74 68 5d 5b 68 65 69 67 68 74 5d 5b 73 69 7a 65 73 5d 3a 6e 6f 74 28 5b 6c 61 79 6f 75 74 5d 29 3a 6e 6f 74 28 2e 69 2d 61 6d 70 68 74 6d 6c 2d 65 6c 65 Data Ascii: ransparent!important}.i-amphtml-notbuilt:not(.i-amphtml-layout-container)>,[layout]:not([layout=container]):not(.i-amphtml-element)>,[width][height][heights]:not([layout]):not(.i-amphtml-element)>*,[width][height][sizes]:not([layout]):not(.i-amphtml-ele
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 79 6f 75 74 2d 73 69 7a 65 2d 64 65 66 69 6e 65 64 3e 5b 66 61 6c 6c 62 61 63 6b 5d 2c 2e 69 2d 61 6d 70 68 74 6d 6c 2d 6c 61 79 6f 75 74 2d 73 69 7a 65 2d 64 65 66 69 6e 65 64 3e 5b 70 6c 61 63 65 68 6f 6c 64 65 72 5d 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 31 7d 61 6d 70 2d 69 6d 67 5b 69 2d 61 6d 70 68 74 6d 6c 2d 73 73 72 5d 3a 6e 6f 74 28 2e 69 2d 61 6d 70 68 74 6d 6c 2d 65 6c 65 6d 65 6e 74 29 3e 5b 70 6c 61 63 65 68 6f 6c 64 65 72 5d 7b 7a 2d 69 6e 64 65 78 3a 61 75 74 6f Data Ascii: yout-size-defined>[fallback],.i-amphtml-layout-size-defined>[placeholder]{position:absolute!important;top:0!important;left:0!important;right:0!important;bottom:0!important;z-index:1}amp-img[i-amphtml-ssr]:not(.i-amphtml-element)>[placeholder]{z-index:auto
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 7d 2e 61 6d 70 2d 62 6f 72 64 65 72 2d 62 6f 78 2c 2e 61 6d 70 2d 62 6f 72 64 65 72 2d 62 6f 78 20 2a 2c 2e 61 6d 70 2d 62 6f 72 64 65 72 2d 62 6f 78 20 3a 61 66 74 65 72 2c 2e 61 6d 70 2d 62 6f 72 64 65 72 2d 62 6f 78 20 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 61 6d 70 2d 70 69 78 65 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 61 6d 70 2d 61 6e 61 6c 79 74 69 63 73 2c 61 6d 70 2d 61 75 74 6f 2d 61 64 73 2c 61 6d 70 2d 73 74 6f 72 79 2d 61 75 74 6f 2d 61 64 73 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 21 69 6d 70 6f 72 74 61 6e 74 3b 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 70 78 21 Data Ascii: }.amp-border-box,.amp-border-box *,.amp-border-box :after,.amp-border-box :before{box-sizing:border-box}amp-pixel{display:none!important}amp-analytics,amp-auto-ads,amp-story-auto-ads{position:fixed!important;top:0!important;width:1px!important;height:1px!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	49995	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	1680	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2611&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25113&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:40 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	49998	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	1680	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2612&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25113&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:40 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	49997	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	1680	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2612&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25113&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:40 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	49996	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:39 UTC	1680	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2614&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25307&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10
2024-03-03 23:26:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:40 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50005	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FpT1ZXTGXyk96vcr3fKHXtA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181129%2F500x500%2Fnets3_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fd7a4e9572597087adb989684c757629a308c76a HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	994	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2111260 Cache-Control: public, max-age=2592000 Cache-Tag: 192383292334722526710999447282223933400,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:40 GMT Edge-Cache-Tag: 192383292334722526710999447282223933400,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "6814b14222bff2d882f811c571a57c6f" Last-Modified: Thu, 08 Feb 2024 12:59:01 GMT Server: ECAcc (nya/78DC) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2304,owidth=50,oheight=50,obytes=1900,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 28b1dc7faf6b3b077555aaa872662e1b X-Served-By: cache-iad-kjyo7100176-IAD X-Timer: S1707397140.219926,VS0,VE227 Content-Length: 2304 Connection: close
2024-03-03 23:26:40 UTC	2304	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c 00 00 00 00 00 00 01 01 01 00 00 00 06 06 06 00 00 00 00 00 00 2d 2d 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 24 24 00 00 00 03 03 03 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 0a 0a 00 00 00 00 00 00 16 16 16 14 14 14 00 00 00 00 00 00 06 06 06 00 00 00 0b 0b 0b 28 28 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 07 07 07 1f 1f 1f 25 25 25 06 06 06 19 19 19 2c 2c 2c 37 37 37 00 00 00 09 09 09 01 01 01 00 00 00 00 00 00 00 00 00 10 10 10 05 05 05 00 Data Ascii: PNGIHDR22)xPLTEGpL---$$$((("""%%%,,,777

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50001	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F51_f4QnCU8r4D1F_7XPNdQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fbucks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b6b15c2623764f5bc9deea68bb4e35729754770 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133420 Cache-Control: public, max-age=2592000 Cache-Tag: 322227869617563092129972873501378346770,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000083-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 109 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:40 GMT Edge-Cache-Tag: 322227869617563092129972873501378346770,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "232bfee11dc835e60363e3d23a3abf1a" Expiration: expiry-date="Fri, 24 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 25 Nov 2023 05:13:52 GMT Server: ECAcc (nya/7966) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2004,owidth=50,oheight=50,obytes=2269 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100028-IAD X-Timer: S1702190899.165607,VS0,VE169 Content-Length: 2004 Connection: close
2024-03-03 23:26:40 UTC	2004	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c e1 e1 c7 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 de df c4 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 ef eb d3 ef ea d2 f0 eb d2 be c9 ac f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 de df c4 f0 ea d2 f0 eb d2 c2 cb af f0 eb d2 f0 eb d2 cb d2 b6 e8 e5 cc ef eb d2 cf d5 b9 f0 eb d2 e6 e4 ca ad bd 9f d3 d7 bc f0 eb d2 ec e8 cf c8 d0 b4 f0 eb d2 c6 ce b2 f0 eb d2 96 ad 8d f0 eb d2 d1 d6 ba c0 ca ad b7 c4 a7 f0 eb d2 ea e7 cd f0 eb d2 f0 eb d2 eb e7 ce d0 d5 ba f0 eb d2 f0 eb d2 f0 eb d2 d6 d9 be f0 eb d2 ca d1 b5 f0 eb d2 f0 eb d2 d1 d6 ba ea e7 ce d5 d9 be eb Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50000	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6zBU_wJNcAFiGnGb.42RrQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fwizards_wbg.png&client=76f99bdb8f78cd44cc0b&signature=834585294cb63f27e5a56fca336a13289db2965b HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	1131	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 395229 Cache-Control: public, max-age=2592000 Cache-Tag: 290150206441684456702470793132869270842,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21981-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:40 GMT Edge-Cache-Tag: 290150206441684456702470793132869270842,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "d489df4119835883df2f9a9d101126a0" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 23:18:19 GMT Server: ECAcc (nya/7981) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2132,owidth=50,oheight=50,obytes=2752,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100130-IAD X-Timer: S1706521172.691346,VS0,VE7 Content-Length: 2132 Connection: close
2024-03-03 23:26:40 UTC	2132	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c cb d4 d9 d7 de e2 df e5 e8 c4 ce d4 c4 ce d4 c7 d0 d6 c4 ce d4 c4 ce d4 c4 ce d4 c4 ce d4 d3 da df c4 ce d4 da e0 e4 c8 d1 d7 ca d3 d8 c5 cf d5 cf d7 dc d6 dd e1 e2 e7 ea c4 ce d4 cd d6 db c4 ce d4 db e1 e5 db e1 e5 e2 e7 ea c8 d2 d7 c9 d3 d8 d6 dd e1 c5 cf d5 cf d7 dc c4 ce d4 00 2b 5c ff ff ff e3 18 37 c4 ce d4 c5 cf d5 f6 f8 f9 02 2d 5d f2 f4 f7 fd fd fe e7 eb ee ff fe fe fe fe fe f8 f9 fa fc fc fd fc e4 e7 e2 e7 ea 05 2f 5f 2b 4f 77 f5 f6 f8 f3 f6 f7 27 4c 75 f1 f3 f5 e4 21 3f f6 f7 f9 fd f1 f3 09 33 62 07 31 61 01 2c 5c 0a 34 63 0e 37 65 0d 36 65 67 81 9e eb 5a 70 e7 3c 56 cc d4 de 18 3f 6b dd e3 e9 48 67 8a 44 63 87 15 Data Ascii: PNGIHDR22)xPLTEGpL+\7-]/_+Ow'Lu!?3b1a,\4c7e6egZp<V?kHgDc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50004	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	924	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fs1b.xLIhAHSp5WYuo1r1mQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20231120%2F500x500%2Fjazz_wbg.png&client=76f99bdb8f78cd44cc0b&signature=36a5d8fe3c3121052fc12b91fcf57994a0b7f32c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	1114	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1136962 Cache-Control: public, max-age=2592000 Cache-Tag: 509195577405588095762923472499769928873,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100166-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 52d0987a64dc8a28858d82dd5d91d831 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:40 GMT Edge-Cache-Tag: 509195577405588095762923472499769928873,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "9a4101980859c21b2ffa8adcd6788916" Last-Modified: Tue, 21 Nov 2023 19:29:45 GMT Server: ECAcc (nya/7937) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=984,owidth=50,oheight=50,obytes=923 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 52d0987a64dc8a28858d82dd5d91d831 X-Served-By: cache-iad-kiad7000173-IAD X-Timer: S1700595410.518050,VS0,VE2 Content-Length: 984 Connection: close
2024-03-03 23:26:40 UTC	984	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 01 89 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50003	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	932	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FvxAd_migNyWyej2GLiLvRQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181212%2F500x500%2Fbulls_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=cff5d8d9a6572e4816d2fd3a3fb1bfa1900de6c2 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 395134 Cache-Control: public, max-age=2592000 Cache-Tag: 501724617890756827919658726096972277884,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100143-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:40 GMT Edge-Cache-Tag: 501724617890756827919658726096972277884,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "734c0f53f0bc346a49492a12a8817a12" Expiration: expiry-date="Thu, 08 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 09 Feb 2024 18:31:22 GMT Server: ECAcc (nya/7939) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1920,owidth=50,oheight=50,obytes=2528,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100143-IAD X-Timer: S1709113267.526545,VS0,VE1 Content-Length: 1920 Connection: close
2024-03-03 23:26:40 UTC	1920	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe fe fe fe fe fe fe ff ff ff ff ff ff bb c0 c3 ff ff ff f9 fa fa ff ff ff ff ff ff ff ff ff ff ff ff ab a3 a9 ff ff ff fd fd fe ff ff ff ff ff ff e8 ea eb 8a 94 98 ff ff ff af a7 ad ff ff ff f3 f4 f5 ff ff ff e6 e8 e9 cb cf d1 a5 ac b0 e0 e3 e4 ff ff ff 8e 97 9b ff ff ff 9f a7 ab cb cf d1 a8 af b2 9e 9f a4 b9 bc bf b4 ba bc f9 fa fa ff ff ff c7 cb cd aa b1 b4 a3 8a 95 f6 f6 f7 a6 94 9d fc fc fc a2 99 a0 e7 e9 ea aa ac b0 ff ff ff bf c4 c6 b6 bc be d3 d6 d8 b7 bc bf ff ff ff 6d 66 6f 9b 8c 95 aa b1 b4 a3 aa ad ff ff ff a9 b0 b3 9f a6 aa af 90 9c a4 9b a2 a8 Data Ascii: PNGIHDR22)xPLTEGpLmfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50002	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FKe39LUOwUzQN.gkOzB70lw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181220%2F500x500%2Fkings_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e6505ecf04d45160caf54563bd8e44f5b1ace420 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	1143	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 414680 Cache-Control: public, max-age=2592000 Cache-Tag: 447037762632325466587259649548813396100,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100135-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 125 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:40 GMT Edge-Cache-Tag: 447037762632325466587259649548813396100,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "d1db55c3575af5d237ebffe75de882a6" Expiration: expiry-date="Fri, 09 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 10 Feb 2024 02:38:54 GMT Server: ECAcc (nya/7960) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1972,owidth=50,oheight=50,obytes=2220,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100135-IAD X-Timer: S1709093720.187470,VS0,VE125 Content-Length: 1972 Connection: close
2024-03-03 23:26:40 UTC	1972	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 5b 2b 82 63 71 7a ff ff ff fc fb fc b9 a5 ca f7 f5 f9 de d5 e6 f3 ef f6 e0 e3 e4 a1 Data Ascii: PNGIHDR22)xPLTEGpL[+cqz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	49993	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	1159	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUPH46U8&prvid=2034%2C2033%2C2031%2C2030%2C550%2C233%2C2028%2C2027%2C236%2C313%2C237%2C117%2C319%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C126%2C203%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C70%2C77%2C20000%2C38%2C2023%2C2022%2C141%2C460%2C462%2C222%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	657	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 38196 Content-Type: text/html; charset=UTF-8 Set-Cookie: usp_status=1; Expires=Wed, 04 Sep 2024 23:26:40 GMT; domain=.media.net; Path=/; sameSite=none; secure=true Set-Cookie: visitor-id=3525100008919577000V10; Expires=Mon, 03 Mar 2025 23:26:40 GMT; domain=.media.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=172800 Expires: Tue, 05 Mar 2024 23:26:40 GMT Date: Sun, 03 Mar 2024 23:26:40 GMT Connection: close
2024-03-03 23:26:40 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-03-03 23:26:40 UTC	16384	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 34 34 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 65 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 22 2c 22 6c 6f 6f Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":144,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"e","coc":"NA"},"cs":"8","loo
2024-03-03 23:26:40 UTC	8192	IN	Data Raw: 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 67 70 70 22 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 6e 2e 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 67 70 70 5f 73 69 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 6e 2e 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 61 78 69 64 5f 65 22 29 7d 66 Data Ascii: mValueFromUrl(window.location.href);return t.getParam("gpp")}function C(){var t=new n.GetParamValueFromUrl(window.location.href);return t.getParam("gpp_sid")}function h(){var t=new n.GetParamValueFromUrl(window.location.href);return t.getParam("axid_e")}f
2024-03-03 23:26:40 UTC	13619	IN	Data Raw: 29 3b 5f 63 44 28 22 70 78 66 72 75 74 6c 22 2c 5b 77 69 6e 64 6f 77 2e 5f 6d 4e 43 6b 2e 75 74 69 6c 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 65 2e 73 65 74 46 72 61 6d 65 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 74 2c 69 29 7b 65 2e 73 65 74 53 63 72 69 70 74 28 6e 2c 74 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 65 2e 73 65 74 49 6d 61 67 65 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 65 2e 69 73 53 65 6e 64 42 65 61 63 6f 6e 28 29 3f 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 6e 29 3a 65 2e 73 65 74 49 6d 61 67 65 28 6e 29 7d 72 65 74 75 72 6e 7b 73 65 74 46 72 61 6d 65 3a 6e 2c 73 65 74 53 63 72 69 Data Ascii: );_cD("pxfrutl",[window._mNCk.util],function(e){"use strict";function n(n){e.setFrame(n)}function t(n,t,i){e.setScript(n,t,i)}function i(n){e.setImage(n)}function c(n){e.isSendBeacon()?window.navigator.sendBeacon(n):e.setImage(n)}return{setFrame:n,setScri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50006	142.251.41.1	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	855	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Sun, 03 Mar 2024 23:26:40 GMT Expires: Mon, 03 Mar 2025 23:26:40 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:40 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2024-03-03 23:26:40 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2024-03-03 23:26:40 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	49994	104.18.38.76	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	691	OUT	GET /um/ixmatch.html HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:40 UTC	442	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 25 Jul 2022 19:18:19 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 162 Expires: Mon, 04 Mar 2024 03:26:40 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 85ed648d5e457d16-EWR
2024-03-03 23:26:40 UTC	927	IN	Data Raw: 62 36 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: b68<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.def
2024-03-03 23:26:40 UTC	1369	IN	Data Raw: 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 65 74 20 72 3d 21 31 3b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 6c 65 74 20 69 2c 61 2c 6f 2c 63 3b 63 6f 6e 73 74 20 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 65 2c 72 2c 6e 3d 77 69 6e 64 6f 77 2c 69 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 22 3a 22 5f 5f 75 73 70 61 70 69 22 2c 61 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3a 22 5f 5f 75 73 70 61 70 69 4c 6f 63 61 74 6f 72 22 3b 66 6f 72 28 3b 6e 3b 29 7b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 29 7b 72 3d 6e 5b 69 5d 2c 65 3d 6e 3b 62 Data Ascii: ty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;const u={};function s(t){let e,r,n=window,i="TCF"===t?"__tcfapi":"__uspapi",a="TCF"===t?"__tcfapiLocator":"__uspapiLocator";for(;n;){try{if("function"==typeof n[i]){r=n[i],e=n;b
2024-03-03 23:26:40 UTC	631	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 74 29 2c Data Ascii: setAttribute("style","display:none;"),i.setAttribute("width","0"),i.setAttribute("height","0"),i.setAttribute("frameborder","0"),i.setAttribute("marginheight","0"),i.setAttribute("marginwidth","0"),i.setAttribute("scrolling","no"),i.setAttribute("src",t),
2024-03-03 23:26:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50007	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	1694	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2615&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25307&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:40 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50008	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:40 UTC	1705	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2616&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25307&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:40 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:40 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:40 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50009	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F41d3b880-3404-11eb-937b-3aacf54802f7&client=76f99bdb8f78cd44cc0b&signature=ab41e87f69cf3babf4095d9b8ba35b1a6bbdb360 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	1142	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 415237 Cache-Control: public, max-age=2592000 Cache-Tag: 232686577624863233903056574575834270471,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100153-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:42 GMT Edge-Cache-Tag: 232686577624863233903056574575834270471,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "62673eb3f4f65db0fd7b37ad94813b02" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 00:19:32 GMT Server: ECAcc (nya/7941) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1182,owidth=400,oheight=400,obytes=27838,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100153-IAD X-Timer: S1709093165.150696,VS0,VE2 Content-Length: 1182 Connection: close
2024-03-03 23:26:42 UTC	1182	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 05 05 05 05 05 05 06 06 06 06 08 09 08 09 08 0c 0b 0a 0a 0b 0c 12 0d 0e 0d 0e 0d 12 1b 11 14 11 11 14 11 1b 18 1d 18 16 18 1d 18 2b 22 1e 1e 22 2b 32 2a 28 2a 32 3c 36 36 3c 4c 48 4c 64 64 86 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 79 00 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 08 06 00 02 10 00 01 03 02 06 02 02 03 00 00 00 00 00 00 00 00 02 01 03 05 04 06 00 07 11 12 21 31 22 41 13 72 14 61 62 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 06 07 00 05 Data Ascii: JFIF&""&0-0>>T+""+2(2<66<LHLdd y!1"Arab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50014	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=ac1c86f1c864869accf8544da530e03be9b801e8 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 420448 Cache-Control: public, max-age=2592000 Cache-Tag: 417884516681699342842259125334062851322,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21963-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 66 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:42 GMT Edge-Cache-Tag: 417884516681699342842259125334062851322,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "f721cf57548e40cb0f7e8ed0934cf1f1" Expiration: expiry-date="Thu, 18 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 19 Jan 2024 00:16:01 GMT Server: ECAcc (nya/7962) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1233,owidth=400,oheight=401,obytes=176359,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100084-IAD X-Timer: S1706495954.157551,VS0,VE94 Content-Length: 1233 Connection: close
2024-03-03 23:26:42 UTC	1233	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7e 00 00 02 02 03 00 00 00 00 00 00 00 00 00 00 00 00 07 08 03 05 01 04 06 10 00 02 02 02 01 04 01 03 05 00 00 00 00 00 00 00 01 02 03 04 05 06 12 00 07 11 21 23 13 14 24 31 42 51 61 72 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd!!1&""&18/-/8D==DVQVpp ~!#$1BQar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50015	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2Fd50a9120-3411-11eb-97bb-1084c5a79300&client=76f99bdb8f78cd44cc0b&signature=2e380cbe938a1f4b6b57c6cdf936e0516050112f HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 420516 Cache-Control: public, max-age=2592000 Cache-Tag: 461969623020839103870209087167249109379,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000032-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 67 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:42 GMT Edge-Cache-Tag: 461969623020839103870209087167249109379,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "6a6eec9542309f83d565ce90ab410d25" Expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 08 Feb 2024 12:24:10 GMT Server: ECAcc (nya/799E) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1020,owidth=400,oheight=400,obytes=57208,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000032-IAD X-Timer: S1709087886.153014,VS0,VE67 Content-Length: 1020 Connection: close
2024-03-03 23:26:42 UTC	1020	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 09 09 09 09 09 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 14 12 11 11 12 14 1e 16 17 16 17 16 1e 2e 1d 21 1d 1d 21 1d 2e 29 31 28 25 28 31 29 49 39 33 33 39 49 54 47 43 47 54 66 5b 5b 66 81 7a 81 a8 a8 e2 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7e 00 00 01 04 03 00 00 00 00 00 00 00 00 00 00 00 00 08 04 05 06 09 00 03 07 10 00 02 01 03 04 01 04 03 00 03 00 00 00 00 00 00 01 02 03 04 05 06 00 07 11 12 42 13 21 41 61 14 31 71 16 22 23 01 00 01 05 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd.!!.)1(%(1)I9339ITGCGTf[[fz ~B!Aa1q"#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50013	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	1694	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2619&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25308&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:42 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:42 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:42 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50023	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FbCgWmLw50ojl92ZP0Q7KlQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181219%2F500x500%2Fheat_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=56444c2e5ec70e256d0295d87b9d4b83ec6307a8 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	1461	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133422 Cache-Control: public, max-age=2592000 Cache-Tag: 290163543635151748296268662389782359071,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000045-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: c3011237b9784b9edf9f89b4c68d41fe cld_latency: 132 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:42 GMT Edge-Cache-Tag: 290163543635151748296268662389782359071,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "424a00fbcf4278432f8f17c89da589e8" Last-Modified: Fri, 01 Dec 2023 01:31:02 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/1C61) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2146,owidth=50,oheight=50,obytes=3076 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: c3011237b9784b9edf9f89b4c68d41fe X-Served-By: cache-lga21926-LGA X-Timer: S1702190899.127168,VS0,VE54 Content-Length: 2146 Connection: close
2024-03-03 23:26:42 UTC	2146	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c 7e 88 8d fa fb fb f1 f2 f3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 82 8a 8f ff ff ff c1 c5 c8 a2 a9 ac d5 d8 da ff ff ff fe fe fe e8 e9 ea de e1 e2 ff ff ff af b6 b9 ff ff ff d7 da dc 9e a5 a9 ff ff ff ff ff ff f9 fa fa ab b1 b4 a5 ac b0 89 92 96 ff ff ff fc fc fc f2 f3 f4 93 9a 9f ec ee ee ff ff ff fe fe fe ff ff ff ff ff ff f3 f4 f4 d8 db dd ff ff ff a6 ad b0 c4 c9 cb a1 a6 a9 c1 c6 c8 ff ff ff ff ff ff ca ce d0 ff ff ff d3 d6 d8 95 94 97 ff ff ff e0 e2 e3 e3 e5 e6 ff ff ff 87 90 95 be c3 c5 f5 f6 f6 ff ff ff ff ff ff aa b0 b3 8c 89 90 c9 cd cf da dd de 8e 97 9b 9f a6 aa a3 aa ad 97 9f a3 cc d0 d2 b6 bb be b6 bc bf ff Data Ascii: PNGIHDR22)xPLTEGpL~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50010	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9ff3de001884e92d939ae40d08e9b7109e31ec24 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	1129	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1164617 Cache-Control: public, max-age=2592000 Cache-Tag: 437559623224935281181735502381789763861,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21974-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 68 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:42 GMT Edge-Cache-Tag: 437559623224935281181735502381789763861,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "b4515d9ec12c634f4b40abee83809012" Expiration: expiry-date="Sat, 03 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 04 Feb 2024 07:07:51 GMT Server: ECAcc (nya/79B8) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=806,owidth=400,oheight=400,obytes=38740,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21974-LGA X-Timer: S1708343785.056832,VS0,VE68 Content-Length: 806 Connection: close
2024-03-03 23:26:42 UTC	806	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 01 09 09 09 09 09 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 14 12 11 11 12 14 1e 16 17 16 17 16 1e 2e 1d 21 1d 1d 21 1d 2e 29 31 28 25 28 31 29 49 39 33 33 39 49 54 47 43 47 54 66 5b 5b 66 81 7a 81 a8 a8 e2 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 76 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 08 00 06 07 03 10 00 02 01 03 04 00 03 07 05 00 00 00 00 00 00 00 02 03 04 01 05 06 00 07 11 12 08 31 71 13 22 32 41 51 61 72 14 16 21 33 81 01 01 00 03 01 00 00 00 00 00 00 00 00 Data Ascii: JFIF&&,%#%,5//5C?CWWu.!!.)1(%(1)I9339ITGCGTf[[fz v1q"2AQar!3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50024	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FMHkI0ocTdEcipo8RUUVItA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhawks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2c0289aeb083f0491025b87ca62a5aa4ef58a39e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133425 Cache-Control: public, max-age=2592000 Cache-Tag: 269445152320704268982656905370323062447,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000165-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:42 GMT Edge-Cache-Tag: 269445152320704268982656905370323062447,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "c7fe143394f0ca830da15bd381fd532e" Expiration: expiry-date="Thu, 18 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 19 Jan 2024 21:45:07 GMT Server: ECAcc (nya/78B2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1999,owidth=50,oheight=50,obytes=2182,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000165-IAD X-Timer: S1707374978.836096,VS0,VE2 Content-Length: 1999 Connection: close
2024-03-03 23:26:42 UTC	1999	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50011	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	1694	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2617&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25308&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:42 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:42 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:42 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:42 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50025	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FADqUXlqn18KYlIyqLYgVQw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fpelicans_wbg.png&client=76f99bdb8f78cd44cc0b&signature=798c93b043435cd03be9ec1cd6c179c807780488 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	1144	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133425 Cache-Control: public, max-age=2592000 Cache-Tag: 187963072957179254593978396759819153775,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000145-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 189 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:42 GMT Edge-Cache-Tag: 187963072957179254593978396759819153775,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "c6db42f786c5549bc2bbf3588f87d728" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (nya/7983) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1502,owidth=50,oheight=50,obytes=1631,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000145-IAD X-Timer: S1707374978.577518,VS0,VE189 Content-Length: 1502 Connection: close
2024-03-03 23:26:42 UTC	1502	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 91 50 4c 54 45 47 70 4c 86 7b 5a b4 97 5a b4 97 5a b4 97 5a b4 97 5a b4 96 5a b4 97 5a a7 8f 5a b4 97 5a b3 96 5a ad 93 5a b4 97 5a a5 8e 5a 90 81 5a b4 97 5a b4 97 5a 8b 7e 5a b4 97 5a b3 97 5a b2 96 5a b4 97 5a a8 90 5a 8c 7f 5a ae 93 5a a9 91 5a b4 97 5a b4 97 5a b4 97 5a a0 8b 5a 9e 8a 5a 6d 6d 5b 5d 63 5b ae 93 5a 6b 6b 5b b1 95 5a 76 72 5b b4 97 5a 99 87 5a 58 60 5b b4 97 5a 61 65 5b b4 97 5a 92 83 5a 6b 6b 5b 9b 88 5a b4 97 5a 6f 6d 5b b4 97 5a b4 97 5a b4 97 5a a8 90 5a b0 95 5a b4 97 5a 91 82 5a 80 78 5b 99 87 5a 89 7d 5a 9b 88 5a 53 5d 5b 54 5d 5b 00 2b 5c b4 97 5a 4e 5a 5b 01 2c 5c 0a 31 5c 1b 3b 5c 12 36 5c b2 bf ce 18 3f 6b 51 5c 5b 86 Data Ascii: PNGIHDR22)xPLTEGpL{ZZZZZZZZZZZZZZZZ~ZZZZZZZZZZZZZZmm[]c[Zkk[Zvr[ZZX`[Zae[ZZkk[ZZom[ZZZZZZZx[Z}ZZS][T][+\ZNZ[,\1\;\6\?kQ\[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50012	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-01%2Fc8e15350-aa80-11ee-bdbf-641468506b6f&client=76f99bdb8f78cd44cc0b&signature=1532bdc3ce1b36c5f1e1e6803f90c92ce686c25e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	1146	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2496116 Cache-Control: public, max-age=2592000 Cache-Tag: 241991630967237766322661541564215562872,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000131-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 93 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:42 GMT Edge-Cache-Tag: 241991630967237766322661541564215562872,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "8e9f49d1e5a7f4193370bb3b1571436f" Expiration: expiry-date="Thu, 04 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 05 Jan 2024 02:04:48 GMT Server: ECAcc (nya/1C48) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1404,owidth=400,oheight=400,obytes=27293,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000131-IAD X-Timer: S1707012286.149982,VS0,VE93 Content-Length: 1404 Connection: close
2024-03-03 23:26:42 UTC	1404	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 86 00 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 07 03 06 08 05 10 00 01 04 01 03 03 04 02 02 03 00 00 00 00 00 00 02 01 03 04 05 06 00 07 11 12 21 41 14 22 31 42 13 51 15 32 53 61 81 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd) )/'%'/9339GDG]]} !A"1BQ2Sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50026	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	648	OUT	GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	585	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 4604836 Cache-Control: max-age=365000000, immutable Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:42 GMT Etag: "530bcb090a875c0f904c395456a90b43" Last-Modified: Tue, 12 Dec 2023 15:45:13 GMT Server: ECAcc (nya/78CD) x-amz-id-2: TLKSALyw2Dh5owsOg36VJ1hly7QgQv5pfKzI1KBb4QiMoAG4PLzfk69+guvFFB1G0PL942U4BuE= x-amz-replication-status: COMPLETED x-amz-request-id: KX38QTQHKFWKNG98 x-amz-server-side-encryption: AES256 x-amz-version-id: h_VPUIxbxwcQ3eXjG.3FC4NkfDv2h.bT X-Cache: HIT Content-Length: 14835 Connection: close
2024-03-03 23:26:42 UTC	14835	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5c 00 00 01 32 08 06 00 00 00 b6 e8 68 06 00 00 39 ba 49 44 41 54 78 01 ed 9d 5f 8c 1c d7 75 e6 4f 55 0f 65 4b d1 9f 91 2d 05 96 25 98 25 c5 ce 4a 32 b2 1c c9 88 ec 00 0a 54 1c 92 8e 9f 56 94 8c bc c4 01 34 04 36 41 f2 10 8b 42 80 78 03 7b 41 0a 49 60 78 81 05 45 19 58 ef c6 01 48 01 d1 be 04 16 47 d9 17 c7 a2 86 45 c4 40 22 65 65 8e 16 b1 28 c4 81 55 34 24 d8 88 fc 67 38 94 a5 98 9c ae da 73 aa ea 0e ef 54 df 5b 5d d5 5d d5 5d 5d fd fd 80 66 77 df 5b 5d d3 ec ae fe ea d4 77 cf 3d d7 21 00 66 84 fd fe 7e 3f a2 e8 a1 98 1c 9f 28 5e e2 a6 c5 ac 2b 24 72 42 87 e2 e7 23 ba 66 35 08 be 19 12 00 2d c4 21 00 5a 8e 08 6d 9f e2 23 2c b2 7e 99 ed 1d 72 4e 46 b4 eb 49 08 2f 68 1b 10 5c d0 6a 7c 7f f9 08 1f a4 Data Ascii: PNGIHDR\2h9IDATx_uOUeK-%%J2TV46ABx{AI`xEXHGE@"ee(U4$g8sT[]]]]fw[]w=!f~?(^+$rB#f5-!Zm#,~rNFI/h\j\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50019	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	589	OUT	GET /ups/58784/sync?format=json&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b"
2024-03-03 23:26:42 UTC	681	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:42 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:42 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:42 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:42 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 57 48 32 55 32 5f 6c 45 32 75 4a 34 54 51 4a 5a 79 34 45 74 5a 64 32 6b 4e 42 6c 4a 47 6c 34 67 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A"}
2024-03-03 23:26:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50016	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=2a26e46583bfd12678b081b69fb7cca425c39052 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	1143	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 410431 Cache-Control: public, max-age=604800 Cache-Tag: 491159898302368516984374933222855513569,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000063-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 81 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:42 GMT Edge-Cache-Tag: 491159898302368516984374933222855513569,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "240376984777de46ce8374cd30907a1a" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 19:22:44 GMT Server: ECAcc (nya/79DA) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=696,owidth=400,oheight=400,obytes=109294,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000063-IAD X-Timer: S1706505972.814028,VS0,VE81 Content-Length: 696 Connection: close
2024-03-03 23:26:42 UTC	696	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 71 00 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 06 01 02 03 08 10 00 02 01 02 05 04 03 01 00 00 00 00 00 00 00 00 01 02 03 04 11 00 05 12 21 31 13 22 41 61 06 14 15 51 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 Data Ascii: JFIF %%-))-969KKd++&.%#%.&D5//5DNB>BN_UU_wqw q!1"AaQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50018	151.101.65.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	397	OUT	GET /libtrc/tr5?abgroup=doc-client-width-4_var HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=9
2024-03-03 23:26:42 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3 Server: Varnish Retry-After: 0 Content-Type: text/html Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:42 GMT Via: 1.1 varnish X-Served-By: cache-lga21922-LGA X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1709508402.189622,VS0,VE0 Cache-Control: private,max-age=14400 Access-Control-Allow-Origin: *
2024-03-03 23:26:42 UTC	3	IN	Data Raw: 6c 6c 3b Data Ascii: ll;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50020	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	581	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b"
2024-03-03 23:26:42 UTC	681	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:42 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:42 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:42 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:42 UTC	66	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 4a 4d 47 55 34 4c 6d 31 57 52 54 4a 31 52 31 39 78 53 6c 6c 54 61 45 77 31 5a 6b 6c 7a 52 6d 55 30 52 6d 46 43 63 55 74 77 57 6e 35 42 22 7d 0d 0a Data Ascii: 3c{"axid": "eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B"}
2024-03-03 23:26:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50030	151.101.1.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	640	OUT	GET /scripts/ifs.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=9
2024-03-03 23:26:42 UTC	749	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2074 x-amz-id-2: MJv9GUKY4mQW0Wb886pAZNNf3zmivRsAFH/NKK6ThecyIt0NHxH/m6sMKa92ivxrQwtVrAOLklQ= x-amz-request-id: MFQ833E8X8B2NXSV x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Mar 2023 12:23:45 GMT ETag: "93d5bb91c9a48c4edbc164a65354b00c" x-amz-server-side-encryption: AES256 x-amz-version-id: hHYTz8VC1WtMBCSsI42K1YQZ3IXPhs3V Content-Type: application/javascript Server: AmazonS3 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:42 GMT Via: 1.1 varnish Age: 21986 X-Served-By: cache-lga21957-LGA X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1709508403.589304,VS0,VE1 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 99 Access-Control-Allow-Origin: *
2024-03-03 23:26:42 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 74 73 64 74 6f 63 6c 22 2c 65 3d 22 21 2d 23 40 22 2c 74 3d 22 75 6c 22 2c 69 3d 22 68 74 74 70 73 3a 22 2c 6f 3d 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 30 63 32 52 30 62 32 4e 73 4c 6d 4e 76 62 51 3d 3d 22 29 2c 72 3d 7b 7d 2c 61 3d 69 2c 64 3d 2d 31 2c 63 2c 75 3b 74 72 79 7b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 5b 65 2e 69 64 5d 26 26 28 72 5b 65 2e 69 64 5d 28 65 29 2c 64 65 6c 65 74 65 20 72 5b 65 2e 69 64 5d 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 69 3b 74 72 79 7b 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 2e 64 61 74 61 29 7d 63 61 74 63 68 28 6e 29 7b 7d 69 26 26 69 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 6e 26 26 73 28 69 29 Data Ascii: !function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)
2024-03-03 23:26:42 UTC	696	IN	Data Raw: 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 46 41 53 43 2e 74 66 61 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 74 3d 77 69 6e 64 6f 77 2e 54 52 43 26 26 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 69 3d 43 28 29 2c 6f 3d 62 28 29 3b 72 65 74 75 72 6e 20 65 7c 7c 74 7c 7c 69 7c 7c 6f 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: UserId.getUserId?window.TFASC.tfaUserId.getUserId():null,t=window.TRC&&window.TRC.pageManager&&"function"==typeof window.TRC.pageManager.getUserId?window.TRC.pageManager.getUserId():null,i=C(),o=b();return e\|\|t\|\|i\|\|o},T=function n(e){window.addEventListen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50027	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	657	OUT	GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 4604836 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Sun, 03 Mar 2024 23:26:42 GMT Etag: "e2c8e7f300b16a993657a04b82efe131" Last-Modified: Mon, 08 Jan 2024 12:18:05 GMT Server: ECAcc (nya/7971) x-amz-id-2: ol5RfGogTomJeYKq3xb0AX7LLX3r9MuaJqk6tyEz5YASwIanVGo21f1sk+1ivsCxBZz0f865A5E= x-amz-replication-status: COMPLETED x-amz-request-id: KX30BJ2B90PJEJ0P x-amz-server-side-encryption: AES256 x-amz-version-id: 0xHl7oxSGukOJcW58WD3cqF3_WBXxCUd X-Cache: HIT Content-Length: 14326 Connection: close
2024-03-03 23:26:42 UTC	14326	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 34 22 20 68 65 69 67 68 74 3d 22 31 35 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 34 20 31 35 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 39 31 36 5f 34 34 38 35 29 22 3e 0a 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 2e 32 35 22 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 30 35 22 20 64 3d 22 4d 39 31 2e 32 38 37 31 20 31 35 32 2e 38 39 39 43 31 33 35 2e 30 38 39 20 31 35 32 2e 38 39 39 20 31 37 30 2e 35 39 37 20 31 35 31 2e 34 20 31 37 30 2e 35 39 37 20 31 34 39 2e 35 35 43 31 37 30 2e 35 39 37 20 31 34 37 2e 37 Data Ascii: <svg width="174" height="153" viewBox="0 0 174 153" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_916_4485)"><g opacity="0.25"><path opacity="0.05" d="M91.2871 152.899C135.089 152.899 170.597 151.4 170.597 149.55C170.597 147.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50029	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	790	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b"
2024-03-03 23:26:42 UTC	795	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:42 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:42 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:42 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:42 UTC	59	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 32 4d 37 4c 7a 75 74 45 32 75 49 59 33 2e 45 65 6a 67 4b 39 79 4c 65 76 53 4e 63 66 38 58 2e 33 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30{"axid": "y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50028	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:42 UTC	638	OUT	GET /caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:42 UTC	583	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 453282 Cache-Control: max-age=365000000, immutable Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:42 GMT Etag: "1e91d02cf5a902f38f2923c006d79281" Last-Modified: Mon, 28 Nov 2022 10:20:33 GMT Server: ECAcc (nya/7995) x-amz-id-2: h0XHaiSJ6PBgfDTMa8yCY4BvQi70ammZV0zpRaoNmCcZL5xZI2vJUv/DgQ8dAApEGPddPnGY0uk= x-amz-replication-status: COMPLETED x-amz-request-id: 0E4455341JV6ZEHZ x-amz-server-side-encryption: AES256 x-amz-version-id: XT6LsdtqeTQbOJqBovI.LzXQgARxp1ek X-Cache: HIT Content-Length: 4904 Connection: close
2024-03-03 23:26:42 UTC	4904	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 86 00 00 00 fa 08 03 00 00 00 0b 2b 76 d8 00 00 01 dd 50 4c 54 45 47 70 4c 57 57 57 5e 5e 5e 66 66 66 6e 6e 6e 61 61 61 78 78 78 94 94 94 a6 a6 a6 8d 8d 8d 73 73 73 5c 5c 5c 9d 9d 9d 84 84 84 92 92 92 68 68 68 49 49 49 2a 2a 2a 15 15 15 00 00 00 1f 1f 1f 73 73 73 9c 9c 9c 34 34 34 7d 7d 7d 87 87 87 3e 3e 3e 53 53 53 59 59 59 6a 6a 6a 0a 0a 0a 7d 7d 7d 5e 5e 5e 20 20 20 40 40 40 70 70 70 10 10 10 80 80 80 60 60 60 30 30 30 50 50 50 07 15 0a 17 4a 24 1d 5f 2f 27 7e 3e 24 74 39 1a 54 2a 10 35 1a b3 b3 b3 e6 e6 e6 ea ea ea ff ff ff e2 e2 e2 91 91 91 dd dd dd f2 f2 f2 c5 c5 c5 ec ec ec f8 f8 f8 e3 e3 e3 ee ee ee d9 d9 d9 2a 89 44 34 a8 53 31 9e 4e 03 0b 05 d1 d1 d1 f3 f3 f3 9f 9f 9f d5 d5 d5 ef ef ef f7 Data Ascii: PNGIHDR+vPLTEGpLWWW^^^fffnnnaaaxxxsss\\\hhhIII**sss444}}}>>>SSSYYYjjj}}}^^^ @@@ppp```000PPPJ$_/'~>$t9T5*D4S1N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50031	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:43 UTC	1705	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2620&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25308&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:43 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:43 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:43 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50033	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:43 UTC	580	OUT	GET /rx/ev/builds/1.3.9/bcplayer.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:43 UTC	841	IN	HTTP/1.1 200 OK x-amz-id-2: Qt9SMjTy9sIicdWHoFQzXEia5EOOVtXdleMaqonSATglmdHf1AIkRWrdkJb41yUoH+HOJ5bMEgY= x-amz-request-id: YFD6ZJ6MQXCS5407 Date: Wed, 28 Feb 2024 17:25:06 GMT Last-Modified: Tue, 27 Feb 2024 19:48:06 GMT ETag: "a531c16f740b20532ccb2dac03724c6a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: doooLKY_l7NH.nPTtAXYP89h6R5UHir6 Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 20567 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 367298 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 2e 6a 73 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 76 6a 73 2d 6d 65 6e 75 20 3a 6e 6f 74 28 2e 76 6a 73 2d 73 65 6c 65 63 74 65 64 29 3a 66 6f 63 75 73 3a 6e 6f 74 28 2e 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 6d 65 6e 75 20 3a 6e 6f 74 28 2e 76 6a 73 2d 73 65 6c 65 63 74 65 64 29 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 35 31 62 31 37 7d 23 62 63 2d 70 6c 61 79 65 72 2e 76 6a 73 2d 76 70 61 69 64 2d 70 6c 61 79 69 6e 67 20 3e 20 2a 7b 7a 2d 69 6e 64 65 78 3a 31 7d 23 62 63 2d 70 6c 61 79 65 72 3a 6e 6f 74 28 2e 76 6a 73 2d 61 64 2d 70 6c 61 79 69 6e 67 29 20 2e 76 6a 73 2d 69 6d 61 33 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: .js-focus-visible .vjs-menu :not(.vjs-selected):focus:not(.focus-visible),.video-js .vjs-menu :not(.vjs-selected):focus:not(:focus-visible){background:#151b17}#bc-player.vjs-vpaid-playing > *{z-index:1}#bc-player:not(.vjs-ad-playing) .vjs-ima3-ad-containe
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 64 65 73 63 2d 6f 6e 2d 73 74 61 72 74 2d 73 63 72 65 65 6e 20 3a 6e 6f 74 28 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 29 20 2e 76 6a 73 2d 74 69 74 6c 65 2d 62 61 72 20 2e 76 6a 73 2d 74 69 74 6c 65 2d 62 61 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 76 70 2d 68 69 64 65 2d 64 65 73 63 2d 6f 6e 2d 68 6f 76 65 72 20 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 20 2e 76 6a 73 2d 74 69 74 6c 65 2d 62 61 72 20 2e 76 6a 73 2d 74 69 74 6c 65 2d 62 61 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 Data Ascii: desc-on-start-screen :not(.vjs-has-started) .vjs-title-bar .vjs-title-bar-description{display:none}#pframe-player-container.evp-hide-desc-on-hover .vjs-has-started .vjs-title-bar .vjs-title-bar-description{display:none}#pframe-player-container #bc-player
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 6f 6c 2d 62 61 72 20 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 62 61 72 7b 6d 61 72 67 69 6e 3a 31 2e 37 65 6d 20 2e 34 35 65 6d 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 76 6a 73 2d 63 6f 6e 74 72 6f 6c 2d 62 61 72 20 2e 76 6a 73 2d 74 72 61 63 6b 2d 73 65 74 74 69 6e 67 20 73 65 6c 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 39 29 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 76 6a 73 2d 63 6f 6e 74 72 6f 6c 2d 62 61 72 20 2e 76 6a 73 2d 6c 69 76 65 2d 63 6f 6e 74 72 6f 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 70 66 72 61 6d 65 2d 70 6c 61 Data Ascii: ol-bar .vjs-volume-bar{margin:1.7em .45em}#pframe-player-container #bc-player .vjs-control-bar .vjs-track-setting select{background-color:rgba(255,255,255,0.9)}#pframe-player-container #bc-player .vjs-control-bar .vjs-live-control{display:none}#pframe-pla
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 36 32 20 39 2e 39 39 33 39 37 33 31 36 2c 31 30 2e 36 38 32 35 34 38 34 20 31 30 2e 31 38 33 31 36 36 2c 31 30 2e 37 37 38 34 32 37 35 20 43 31 30 2e 35 34 30 39 36 36 2c 31 30 2e 39 35 39 35 38 36 20 31 30 2e 39 37 32 32 38 36 34 2c 31 30 2e 39 30 33 32 31 34 39 20 31 31 2e 32 35 39 35 30 36 37 2c 31 30 2e 36 32 36 31 37 37 32 20 43 31 31 2e 36 31 32 38 39 35 34 2c 31 30 2e 32 38 34 35 37 37 37 20 31 31 2e 35 35 33 30 39 38 37 2c 39 2e 37 30 31 35 39 34 30 35 20 31 31 2e 31 33 32 35 36 31 32 2c 39 2e 34 34 33 38 32 38 35 35 20 43 31 30 2e 35 31 35 34 37 38 38 2c 39 2e 30 36 36 30 39 33 36 39 20 39 2e 37 35 31 38 34 35 35 32 2c 38 2e 39 30 31 33 31 36 34 39 20 38 2e 39 33 35 32 37 37 34 32 2c 39 2e 30 36 30 33 31 32 30 33 20 43 37 2e 37 34 36 36 39 35 34 Data Ascii: 62 9.99397316,10.6825484 10.183166,10.7784275 C10.540966,10.959586 10.9722864,10.9032149 11.2595067,10.6261772 C11.6128954,10.2845777 11.5530987,9.70159405 11.1325612,9.44382855 C10.5154788,9.06609369 9.75184552,8.90131649 8.93527742,9.06031203 C7.7466954
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 20 31 37 2e 32 34 35 34 38 34 2c 31 33 2e 32 36 37 39 31 32 32 27 20 69 64 3d 27 46 69 6c 6c 2d 33 27 25 33 65 25 33 63 2f 70 61 74 68 25 33 65 25 33 63 70 61 74 68 20 64 3d 27 4d 32 31 2c 31 37 20 4c 33 2c 31 37 20 4c 33 2c 37 20 4c 32 31 2c 37 20 4c 32 31 2c 31 37 20 5a 20 4d 31 2c 31 38 2e 30 38 31 34 32 30 39 20 43 31 2c 31 38 2e 35 38 38 37 33 38 31 20 31 2e 34 31 39 38 33 34 33 38 2c 31 39 20 31 2e 39 31 37 33 30 33 34 31 2c 31 39 20 4c 32 32 2e 30 38 32 36 39 36 36 2c 31 39 20 43 32 32 2e 35 38 39 33 30 39 33 2c 31 39 20 32 33 2c 31 38 2e 35 39 36 31 30 35 36 20 32 33 2c 31 38 2e 30 38 31 34 32 30 39 20 4c 32 33 2c 35 2e 39 31 38 35 37 39 31 20 43 32 33 2c 35 2e 34 31 31 32 36 31 38 37 20 32 32 2e 35 38 30 31 36 35 36 2c 35 20 32 32 2e 30 38 32 36 Data Ascii: 17.245484,13.2679122' id='Fill-3'%3e%3c/path%3e%3cpath d='M21,17 L3,17 L3,7 L21,7 L21,17 Z M1,18.0814209 C1,18.5887381 1.41983438,19 1.91730341,19 L22.0826966,19 C22.5893093,19 23,18.5961056 23,18.0814209 L23,5.9185791 C23,5.41126187 22.5801656,5 22.0826
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 31 38 2e 35 38 38 37 33 38 31 20 31 2e 34 31 39 38 33 34 33 38 2c 31 39 20 31 2e 39 31 37 33 30 33 34 31 2c 31 39 20 4c 32 32 2e 30 38 32 36 39 36 36 2c 31 39 20 43 32 32 2e 35 38 39 33 30 39 33 2c 31 39 20 32 33 2c 31 38 2e 35 39 36 31 30 35 36 20 32 33 2c 31 38 2e 30 38 31 34 32 30 39 20 4c 32 33 2c 35 2e 39 31 38 35 37 39 31 20 43 32 33 2c 35 2e 34 31 31 32 36 31 38 37 20 32 32 2e 35 38 30 31 36 35 36 2c 35 20 32 32 2e 30 38 32 36 39 36 36 2c 35 20 4c 31 2e 39 31 37 33 30 33 34 31 2c 35 20 43 31 2e 34 31 30 36 39 30 37 33 2c 35 20 31 2c 35 2e 34 30 33 38 39 34 34 32 20 31 2c 35 2e 39 31 38 35 37 39 31 20 4c 31 2c 31 38 2e 30 38 31 34 32 30 39 20 5a 20 4d 31 31 2e 32 34 35 32 39 32 37 2c 31 33 2e 32 36 37 39 31 32 32 20 43 31 31 2e 30 30 30 37 31 34 34 Data Ascii: 18.5887381 1.41983438,19 1.91730341,19 L22.0826966,19 C22.5893093,19 23,18.5961056 23,18.0814209 L23,5.9185791 C23,5.41126187 22.5801656,5 22.0826966,5 L1.91730341,5 C1.41069073,5 1,5.40389442 1,5.9185791 L1,18.0814209 Z M11.2452927,13.2679122 C11.0007144
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 32 20 43 31 35 2e 37 37 39 39 31 35 36 2c 31 30 2e 36 32 38 35 38 36 32 20 31 35 2e 39 39 34 31 31 34 2c 31 30 2e 36 38 32 35 34 38 34 20 31 36 2e 31 38 33 33 31 34 35 2c 31 30 2e 37 37 38 34 32 37 35 20 43 31 36 2e 35 34 31 31 32 38 39 2c 31 30 2e 39 35 39 35 38 36 20 31 36 2e 39 37 32 34 36 36 38 2c 31 30 2e 39 30 33 32 31 34 39 20 31 37 2e 32 35 39 32 30 38 34 2c 31 30 2e 36 32 36 31 37 37 32 20 43 31 37 2e 36 31 33 31 30 31 36 2c 31 30 2e 32 38 34 35 37 37 37 20 31 37 2e 35 35 33 33 30 32 34 2c 39 2e 37 30 31 35 39 34 30 35 20 31 37 2e 31 33 32 37 34 38 2c 39 2e 34 34 33 38 32 38 35 35 20 43 31 36 2e 35 31 35 36 34 30 37 2c 39 2e 30 36 36 30 39 33 36 39 20 31 35 2e 37 35 31 39 37 36 36 2c 38 2e 39 30 31 33 31 36 34 39 20 31 34 2e 39 33 34 38 38 35 35 Data Ascii: 2 C15.7799156,10.6285862 15.994114,10.6825484 16.1833145,10.7784275 C16.5411289,10.959586 16.9724668,10.9032149 17.2592084,10.6261772 C17.6131016,10.2845777 17.5533024,9.70159405 17.132748,9.44382855 C16.5156407,9.06609369 15.7519766,8.90131649 14.9348855
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 65 76 70 2d 76 69 65 77 2d 63 6f 75 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 48 65 6c 76 65 74 69 63 61 4e 65 75 65 2d 42 6f 6c 64 27 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 30 66 33 66 35 3b 6f 70 61 63 69 74 79 3a 2e 39 35 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 Data Ascii: }#pframe-player-container #bc-player .evp-view-count-container{font-family:'HelveticaNeue-Bold',Helvetica,Arial,sans-serif;font-size:12px;color:#232a31;background:#f0f3f5;opacity:.95;padding:5px 10px;border-radius:4px;margin-left:5px}#pframe-player-contai
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 76 70 2d 75 73 65 72 2d 61 63 74 69 76 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 30 70 78 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 76 6a 73 2d 62 75 74 74 6f 6e 3e 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 76 6a 73 2d 62 75 74 74 6f 6e 3e 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 62 65 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 Data Ascii: label-container.evp-user-active{margin-top:60px}#pframe-player-container #bc-player .vjs-button>.vjs-icon-placeholder:hover{opacity:1}#pframe-player-container #bc-player .vjs-button>.vjs-icon-placeholder:before{font-size:2.4em;line-height:1.6}#pframe-play
2024-03-03 23:26:43 UTC	1300	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 23 30 31 31 38 33 32 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 23 30 31 31 38 33 32 20 30 25 2c 23 31 30 33 31 35 35 20 34 30 25 2c 23 30 31 31 38 33 32 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 23 30 31 31 38 33 32 20 30 25 2c 23 31 30 33 31 35 35 20 34 30 25 2c 23 30 31 31 38 33 32 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 23 30 31 31 38 33 32 20 30 25 2c 23 31 30 33 31 35 35 20 34 30 25 2c 23 30 31 31 38 33 32 20 31 30 30 25 29 3b 62 61 63 Data Ascii: ckground:#011832;background:-moz-linear-gradient(left,#011832 0%,#103155 40%,#011832 100%);background-image:-webkit-linear-gradient(left,#011832 0%,#103155 40%,#011832 100%);background-image:-o-linear-gradient(left,#011832 0%,#103155 40%,#011832 100%);bac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50032	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:43 UTC	1694	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2621&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25310&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:43 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:43 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:43 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50052	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:43 UTC	1694	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2621&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25310&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:43 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:43 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:43 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50053	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:43 UTC	1705	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2622&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25310&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:43 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:43 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:43 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:43 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50056	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCFF0_QHZWgDjeadZBQlLag--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhornets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=69eddfe94a1ed0b365b7c3ed51b1ba0235428ce4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133425 Cache-Control: public, max-age=2592000 Cache-Tag: 317323384734751716278943720848056494077,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21945-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: d5e680baa07161e302e016743057565f cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:44 GMT Edge-Cache-Tag: 317323384734751716278943720848056494077,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "a46e72a8049d91128efc6cfd99da2fd9" Last-Modified: Wed, 07 Feb 2024 02:53:41 GMT Server: ECAcc (nya/7929) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2225,owidth=50,oheight=50,obytes=2931,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: d5e680baa07161e302e016743057565f X-Served-By: cache-lga21945-LGA X-Timer: S1707374979.314342,VS0,VE1 Content-Length: 2225 Connection: close
2024-03-03 23:26:44 UTC	2225	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 6f 6b 8a a1 a1 a4 a1 a1 a4 a1 a1 a4 a1 a1 a4 5d 56 81 a1 a1 a4 a1 a1 a4 71 6d 8b a1 a1 a4 a1 a1 a4 a1 a1 a4 a1 a1 a4 a0 a0 a4 a1 a1 a4 a1 a1 a4 9d 9d a2 6e 69 8a 8c 8a 99 91 8f 9c 79 76 8f a1 a1 a4 a1 a1 a4 98 97 9f a1 a1 a4 8c 8a 9a 54 4d 7c 92 91 9c a1 a1 a4 7f 7c 93 88 85 97 8f 8d 9a 70 6c 8b 7a 77 90 9f 9e a3 a0 a0 a4 a1 a1 a4 a1 a1 a4 8a 87 98 a1 a1 a4 a1 a1 a4 80 7d 93 a1 a1 a4 9a 9a a1 65 60 86 7c 79 92 6b 66 88 5e 58 82 67 62 86 69 64 87 67 62 87 8b 89 99 93 92 9d 87 85 97 a1 a1 a4 63 5d 84 66 61 86 a0 a0 a3 93 92 9d 8d 8b 9a 73 6e 8c 9b 9b a1 6b 66 88 95 93 9e a1 a1 a4 77 74 8f 9e 9e a3 81 7d 93 5b 54 80 72 6d 8c 80 Data Ascii: PNGIHDR22)xPLTEGpLok]VqmniyvTM\|\|plzw}e`\|ykf^Xgbidgbc]fasnkfwt}[Trm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50058	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-04%2F024bb600-bc29-11ec-be3f-c8aa85a55bda&client=76f99bdb8f78cd44cc0b&signature=b9513e72c8af6f42b1e2f462026b9e7c280d5a3a HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1142	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 999536 Cache-Control: public, max-age=2592000 Cache-Tag: 237237723639567054596299553358280076841,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000071-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:44 GMT Edge-Cache-Tag: 237237723639567054596299553358280076841,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "ecfb9d0fe05a55da841156c2e67f42c0" Expiration: expiry-date="Fri, 19 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 20 Jan 2024 18:30:55 GMT Server: ECAcc (nya/790E) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=967,owidth=400,oheight=400,obytes=109891,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100118-IAD X-Timer: S1705916869.612605,VS0,VE57 Content-Length: 967 Connection: close
2024-03-03 23:26:44 UTC	967	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 05 05 04 06 06 06 06 06 09 08 07 07 08 09 0d 0a 0a 0a 0a 0a 0d 14 0d 0f 0d 0d 0f 0d 14 12 16 12 11 12 16 12 20 19 17 17 19 20 25 1f 1e 1f 25 2d 29 29 2d 39 36 39 4b 4b 64 01 09 09 09 09 0a 09 0a 0b 0b 0a 0e 0f 0d 0f 0e 15 13 11 11 13 15 1f 16 18 16 18 16 1f 30 1e 23 1e 1e 23 1e 30 2a 33 29 27 29 33 2a 4c 3b 35 35 3b 4c 57 49 45 49 57 6a 5f 5f 6a 85 7f 85 ae ae ea ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7c 00 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 08 05 06 07 04 10 00 02 01 03 03 02 06 01 05 00 00 00 00 00 00 00 01 02 03 04 05 11 00 06 12 07 13 21 31 41 42 51 61 71 14 16 22 32 81 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF %%-))-969KKd0##03)')3L;55;LWIEIWj__j \|!1ABQaq"2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50059	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=5aa61d192ca3818eb6ba7e0db0dc91240b4ed0b6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 421004 Cache-Control: public, max-age=2592000 Cache-Tag: 309736351821732764899606652667715375266,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100078-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 105 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:44 GMT Edge-Cache-Tag: 309736351821732764899606652667715375266,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "33e862cd5bde2d44324a410ddc377898" Expiration: expiry-date="Wed, 29 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 30 Nov 2023 02:30:01 GMT Server: ECAcc (nya/78FC) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1057,owidth=400,oheight=400,obytes=9125 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000087-IAD X-Timer: S1703903400.014900,VS0,VE1 Content-Length: 1057 Connection: close
2024-03-03 23:26:44 UTC	1057	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 05 04 05 06 06 05 07 08 07 08 07 0a 0a 09 09 0a 0a 10 0b 0c 0b 0c 0b 10 18 0f 11 0f 0f 11 0f 18 15 19 15 13 15 19 15 26 1e 1a 1a 1e 26 2c 25 23 25 2c 35 2f 2f 35 43 3f 43 57 57 75 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7d 00 01 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 08 07 00 01 04 03 10 00 01 03 02 06 01 05 01 01 00 00 00 00 00 00 00 02 01 03 05 04 06 00 07 11 12 21 22 41 14 15 31 61 81 62 92 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 Data Ascii: JFIF&&,%#%,5//5C?CWWu, ,'/&$&/'F7117FQD@DQbXXb\|v\| }!"A1ab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50021	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	958	OUT	GET /usermatch?s=183875&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Didx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D_UID_ HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-03-03 23:26:44 UTC	1369	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:44 GMT Content-Length: 0 Connection: close Location: /usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3525099948919525000V10%26type%3Didx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1 CF-Ray: 85ed64a64f32c439-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:44 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:26:44 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:26:44 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qrcTHzSEF9i4pkJopfXyMl78DLgDw4pOGOzez3JIoFKOuU55%2BOePeRKM06wOPOrsiRXlw2LD3FNm5Tq0FdTCairaGbWLu8tm0lS2yDz6y7A6BoZb8GDBxWqCzWdp6ZFRvuvhKckUIHus0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:26:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50055	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FubvamaAftyHAO5MJFd90Vw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20190508%2F500x500%2Fraptors_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=5adab5dab53001d1bf80a106504ad949370eff11 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1867258 Cache-Control: public, max-age=2592000 Cache-Tag: 223558022398393962449871848256016745169,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100112-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:44 GMT Edge-Cache-Tag: 223558022398393962449871848256016745169,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "b435160bc4ccd46db19623f36d954e5a" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (nya/1C75) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2178,owidth=50,oheight=50,obytes=2708,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100112-IAD X-Timer: S1707641146.223279,VS0,VE2 Content-Length: 2178 Connection: close
2024-03-03 23:26:44 UTC	2178	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff fe fe f7 da e2 ff ff ff ff ff ff ff ff ff fe f8 f9 ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb ec f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc f0 f3 ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 e0 e6 ff ff ff fa e9 ed ff ff ff f9 e4 e9 fc f0 f3 ff ff ff ff ff ff fd f5 f7 ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50037	35.244.159.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	831	OUT	GET /w/1.0/cm?id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dopx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	708	IN	HTTP/1.1 302 Found Set-Cookie: i=5d6b9c58-a994-466a-b137-621afa1e036d\|1709508404; Version=1; Expires=Mon, 03-Mar-2025 23:26:44 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dopx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D Date: Sun, 03 Mar 2024 23:26:44 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50034	151.101.65.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	617	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=[object%20Object] HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cdn.taboola.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cdn.taboola.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	987	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:44 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:44 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://cdn.taboola.com Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 16820 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:44 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-lga21927-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508404.213435,VS0,VE22 X-vcl-time-ms: 22 transfer-encoding: chunked
2024-03-03 23:26:44 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-03 23:26:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-03 23:26:44 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50060	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	637	OUT	GET /caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 39877045 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Sun, 03 Mar 2024 23:26:44 GMT Etag: "2928664fe1fc6aca88583a6f606d60ba" Last-Modified: Mon, 28 Nov 2022 10:20:33 GMT Server: ECAcc (nya/7890) x-amz-id-2: OBUAdsOmDd22tW19JaFueBSd60StdRsXIBbG3U1ZTetFBvJwR/Mbrr6AMc+dwHZGx6EcCRm9Hwk= x-amz-replication-status: COMPLETED x-amz-request-id: NHD6WF6F3P6HQTDB x-amz-server-side-encryption: AES256 x-amz-version-id: M3sCfyi28qgEfUQomdcrA9y7CjlgkNje X-Cache: HIT Content-Length: 10804 Connection: close
2024-03-03 23:26:44 UTC	10804	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 6c 69 76 65 74 79 70 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 39 2e 36 36 34 30 37 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 39 2e 36 36 34 30 37 20 34 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 5f 6f 6e 5f 74 68 65 5f 41 70 70 5f 53 74 6f 72 65 5f 42 61 64 67 65 5f 55 53 2d 55 4b 5f 52 47 42 5f 62 6c 6b 5f 34 53 56 47 5f 30 39 32 39 31 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 30 2e 31 33 34 37 37 2c 30 48 39 2e 35 33 34 36 38 63 2d 2e 33 36 36 37 Data Ascii: <svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40"> <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title> <g> <g> <g> <path d="M110.13477,0H9.53468c-.3667

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50054	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-09%2Fc1ee04e0-4dcd-11ee-97bf-83c5420da580&client=76f99bdb8f78cd44cc0b&signature=914d0608eb4f953292a2fc317324e981b551aa42 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1708	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 944432 Cache-Control: public, max-age=2592000 Cache-Tag: 406919867905959836314769128516641827844,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100052-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 435cc8dffb0c89392c22a15dba823a3c cld_latency: 235 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:44 GMT Edge-Cache-Tag: 406919867905959836314769128516641827844,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "a1496da93a25b70bcec1511e3615d45a" Expiration: expiry-date="Thu, 07 Mar 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 08 Sep 2023 02:00:01 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Referrer-Policy: no-referrer-when-downgrade Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7915) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,owidth=429,oheight=429,obytes=13671 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Request-Id: 435cc8dffb0c89392c22a15dba823a3c X-Served-By: cache-iad-kjyo7100020-IAD X-Timer: S1700787973.731594,VS0,VE1 X-XSS-Protection: 1; mode=block Content-Length: 1047 Connection: close
2024-03-03 23:26:44 UTC	1047	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 07 07 07 07 07 07 08 08 08 08 0b 0b 0a 0b 0b 10 0e 0d 0d 0e 10 18 11 12 11 12 11 18 24 16 1a 16 16 1a 16 24 20 26 1f 1d 1f 26 20 39 2d 27 27 2d 39 42 37 34 37 42 4f 47 47 4f 64 5f 64 83 83 b0 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 7b 00 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 08 01 02 05 06 07 04 10 00 02 01 03 03 04 02 02 03 00 00 00 00 00 00 00 01 02 03 04 05 06 00 07 12 11 21 31 61 22 42 08 13 14 41 81 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF&""&0-0>>T$$ && 9-''-9B747BOGGOd_d {!1a"BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50057	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6sD.zWqcBkR1AuMMt3SD7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpistons_wbg.png&client=76f99bdb8f78cd44cc0b&signature=892e3f77c39c570076c33bd3d17c3a3d077eaff1 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1128	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133426 Cache-Control: public, max-age=2592000 Cache-Tag: 279566806893598736512993106461820309259,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21951-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 77 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:44 GMT Edge-Cache-Tag: 279566806893598736512993106461820309259,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "999d1b3ff54c1be003b5178bc20314a7" Expiration: expiry-date="Tue, 23 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 24 Jan 2024 16:39:49 GMT Server: ECAcc (nya/7988) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1727,owidth=50,oheight=50,obytes=2241,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21951-LGA X-Timer: S1707374978.078203,VS0,VE77 Content-Length: 1727 Connection: close
2024-03-03 23:26:44 UTC	1727	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 37 50 4c 54 45 47 70 4c b2 b1 b2 b5 b3 b3 9e a2 ad b5 b3 b3 b5 b3 b3 b5 b3 b3 b5 b3 b3 b5 b3 b3 b5 b3 b3 7b 88 a3 b4 b2 b3 94 9b aa 8b 94 a8 9a 9f ac b5 b3 b3 b5 b3 b3 b5 b3 b3 ac ac b0 b5 b3 b3 b5 b3 b3 84 8f a6 87 91 a6 af ae b1 a7 a9 af a8 a9 af 87 90 a6 c8 10 2e 1d 42 8a ff ff ff f4 cf d5 d3 3f 57 e2 82 91 cb 1b 38 ea a5 b1 d3 40 58 ce 2b 46 f9 e7 ea de 70 82 c9 12 30 ed b1 bb dd 6a 7c ce 29 44 c9 13 31 fa ea ed d5 4a 61 e1 7c 8c 47 61 95 5c 71 9b 3a 58 92 eb a7 b2 aa b8 d3 a0 b0 ce 4c 65 97 8b 9e c3 e7 ea f2 24 47 8c 6a 82 b2 a3 b1 ce 51 6d a4 fd f5 f6 50 68 98 22 46 8b 25 48 8c d4 da e8 3e 5b 93 5e 73 9c 66 7e af f6 d9 de 1e 42 8a fd f6 f7 ca Data Ascii: PNGIHDR22)x7PLTEGpL{.B?W8@X+Fp0j\|)D1Ja\|Ga\q:XLe$GjQmPh"F%H>[^sf~B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50061	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	820	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2F462e6bf0-d9a6-11ee-8fdb-97e4a78cac99&client=76f99bdb8f78cd44cc0b&signature=80f3b8ccdec8c8efc49aee8b4ef4a62513d778c4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 6507 Cache-Control: public, max-age=2592000 Cache-Tag: 351572234921971056726209063309277148157,460042813648494421772122623019743714917,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21925-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 23a8ee532de2ecbd3115018db76cd731 cld_latency: 694 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:44 GMT Edge-Cache-Tag: 351572234921971056726209063309277148157,460042813648494421772122623019743714917,ae7a14591aaf8d474cdb3f92111c923e Etag: "f037c63994ad5d6119f36567caeaa070" Last-Modified: Sun, 03 Mar 2024 21:38:18 GMT Server: ECAcc (nya/78E7) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=800,height=450,bytes=32876,owidth=5485,oheight=3493,obytes=4424394,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 23a8ee532de2ecbd3115018db76cd731 X-Served-By: cache-lga21925-LGA X-Timer: S1709501897.029068,VS0,VE694 Content-Length: 32876 Connection: close
2024-03-03 23:26:44 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 01 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 ff c2 00 11 08 01 c2 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 32 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee 95 75 df 91 94 51 96 81 a3 a9 10 a0 a4 84 c9 Data Ascii: JFIF!!1&""&18/-/8D==DVQVpp!!1&""&18/-/8D==DVQVpp "2uQ
2024-03-03 23:26:44 UTC	1	IN	Data Raw: dc Data Ascii:
2024-03-03 23:26:44 UTC	16383	IN	Data Raw: 08 ab e8 48 76 06 a6 46 05 70 0f 28 06 dd 51 b1 68 eb 59 20 b1 c0 39 fd a8 d2 c9 31 04 bb 07 90 81 84 89 db 8c a2 e3 dc 69 94 31 6f 7c 36 bd e9 e3 88 ce 57 dc 4d 00 6e 40 01 6e 21 45 43 84 72 d1 a2 10 cf b8 84 62 ee 8c 4e 73 66 0a 5c c5 56 5a 95 92 5a c4 8c 61 d4 6c a4 1c 4d 30 8a e1 51 77 1b 58 9b fc 65 b5 58 e3 24 53 64 29 38 b7 9a 5b 4b b8 e2 0c f7 a8 18 09 21 b2 b9 b4 79 1d 63 94 30 fc ee 07 e7 70 1e 69 ae 14 10 02 ab 6e 1e 2b 22 8b 0f cc 97 31 a7 ca 5d 09 58 e1 7d 5e d7 0b 73 68 e9 46 8e 7a 0a c1 c7 43 c7 42 71 53 b6 78 a8 90 8e 45 7f 53 af c1 97 4e d3 d6 90 ae 5b 2b fd 34 bb 4b 6f 51 2c 46 55 39 14 3a 13 c5 76 11 b2 58 05 55 1c 00 7a 63 35 e2 b7 0a dd 59 a0 6b 34 4d 31 ad 84 fc 85 38 e6 99 03 a9 56 0a aa 80 28 06 89 34 18 d0 70 7e f1 f3 5b b3 e2 9f Data Ascii: HvFp(QhY 91i1o\|6WMn@n!ECrbNsf\VZZalM0QwXeX$Sd)8[K!yc0pin+"1]X}^shFzCBqSxESN[+4KoQ,FU9:vXUzc5Yk4M18V(4p~[
2024-03-03 23:26:44 UTC	109	IN	Data Raw: 89 52 b4 f7 55 c2 f8 c2 be e4 8e 1e 61 57 1b 95 bf 0f 5f 91 8f b9 0f 00 78 6b df 0a fe 40 fb 92 ab a7 0a e3 70 ac 22 38 44 72 f7 00 2b f9 a9 ef 88 f7 12 78 ed dc 11 c0 05 f8 22 78 4c ab f7 1a fb cb ef 52 07 88 9e 36 57 af ba 08 f1 91 f7 4d 65 ef 73 e1 bf 7f 7e ee e7 bb bf bd e7 dd df b9 b7 1d f8 6d c3 6e 1b f0 db ee 7f ff d9 Data Ascii: RUaW_xk@p"8Dr+x"xLR6WMes~mn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50040	195.244.31.11	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	865	OUT	GET /visitor/bsync?uid=4534c002537f77c2f55cc45a7f5f4c52&name=YAHOO&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dayl%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%5BUSERID%5D%26axid_e%3D HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	672	IN	HTTP/1.1 307 Temporary Redirect cache-control: no-cache, no-store, must-revalidate content-type: text/html; charset=UTF-8 expires: 0 location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3525099948919525000V10&type=ayl&refUrl=&vid=95083994863525099948919525000V10&ovsid=1c28c32b083001573fcc1989b44fa248&axid_e= p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=1c28c32b083001573fcc1989b44fa248; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff date: Sun, 03 Mar 2024 23:26:44 GMT content-length: 0 x-envoy-upstream-service-time: 2 server: ayl-lb-usa02 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50063	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	809	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_yahoo_sports_800%2F8dfffacdcd577e74bf580a75d703245c&client=76f99bdb8f78cd44cc0b&signature=3ba9c4ced0691ddc3ea96362f7352a2d0c1a2f4d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1152	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 5247 Cache-Control: public, max-age=2592000 Cache-Tag: 332638251107565655402585787143940510784,460042813648494421772122623019743714917,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100174-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 4ff431663e2ef27aeb3eb1d6e06eb6ce cld_latency: 1229 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:44 GMT Edge-Cache-Tag: 332638251107565655402585787143940510784,460042813648494421772122623019743714917,ae7a14591aaf8d474cdb3f92111c923e Etag: "b897c5425047a66f43134c6976885f72" Last-Modified: Sun, 03 Mar 2024 21:58:22 GMT Server: ECAcc (nya/7962) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=800,height=450,bytes=34936,owidth=3000,oheight=2013,obytes=1055953,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 4ff431663e2ef27aeb3eb1d6e06eb6ce X-Served-By: cache-iad-kjyo7100174-IAD X-Timer: S1709503157.498851,VS0,VE1229 Content-Length: 34936 Connection: close
2024-03-03 23:26:44 UTC	15233	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 01 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 ff c2 00 11 08 01 c2 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 00 01 06 07 08 09 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e7 84 31 e5 d0 c9 57 35 0e d4 c6 7a Data Ascii: JFIF!!1&""&18/-/8D==DVQVpp!!1&""&18/-/8D==DVQVpp "61W5z
2024-03-03 23:26:44 UTC	16383	IN	Data Raw: 51 63 a6 57 56 1a 21 d5 57 b5 95 b9 3e 08 b4 ec c5 65 23 73 99 3b 1c 54 9f 04 9f 30 12 7a 83 66 ec d2 06 1d 0e 9f 7d b3 12 d1 6d 5e 32 71 92 d0 36 1f 15 2a 66 24 7a ae 48 c6 c5 70 25 55 ee e4 f7 0d 7c 6b d8 ac 56 ee 87 64 fa c0 15 0a ec de 3d 6b 72 da ab 3f 8b 5e 2e f4 ec 3b 10 e4 a6 f7 32 28 d9 32 da 40 0d 2e 00 58 61 22 31 11 88 84 88 58 42 c2 73 10 58 20 b8 43 91 0e 41 fc ad c4 9f 28 e6 2b 98 ad 37 19 a3 b7 fe b0 83 e2 51 e6 52 65 70 41 f5 03 fd 94 0e c4 c7 1d 09 4a 6f 5d 57 5e f5 16 91 05 1b f8 14 7e bd a3 38 11 04 0f a8 b6 cf e4 59 48 70 fd 82 7f 8e a5 99 7e a9 ee 32 e4 29 2c 61 4f bc e8 32 71 07 45 89 6e 4a 23 63 b3 02 4a df 45 d4 0f 72 93 89 ea 46 c6 e2 d2 ab 14 e9 b6 1f bd 09 ee 9f 99 ee 43 67 dd b2 bc d7 5b 30 12 76 54 0b 95 5b 81 56 15 d9 17 92 Data Ascii: QcWV!W>e#s;T0zf}m^2q6*f$zHp%U\|kVd=kr?^.;2(2@.Xa"1XBsX CA(+7QRepAJo]W^~8YHp~2),aO2qEnJ#cJErFCg[0vT[V
2024-03-03 23:26:44 UTC	3320	IN	Data Raw: db 3d c1 fc 81 70 31 ea 88 76 26 33 a4 75 f2 8f b2 1e 5c 56 97 1d 25 c4 92 7d 1c ab 11 dc 53 c2 3e 6e 23 2c 39 16 e0 b0 c1 cb 77 38 a1 22 f2 49 28 9c 5c 57 b5 8c 68 b9 73 8c 00 a7 d9 b7 cc ef ea 71 a9 28 9e 11 c2 0a cd 1d 14 8e c2 8b 00 0b 4b 9e b0 b0 5b 79 61 30 98 f6 9b b9 cd c8 3b 5e 50 7c 6a 1d 28 1d c1 16 46 3f a4 ae a8 3c 69 b8 51 b9 52 15 0a 95 20 f0 8e 30 ed 0a f8 9d 54 26 e8 a2 06 90 85 81 81 ba f3 06 12 df ee 75 02 a7 b3 71 27 a9 0d 44 0c 0c 7c dd 72 99 74 7a 23 27 3e 27 73 24 a2 d6 bd ed b5 c0 2e 80 8c b9 80 9d 81 23 dc 0f 00 e0 7e 5d 01 ec 22 75 1c d1 6b 9a 4e 6d dc f2 9c 4b 89 11 04 99 17 08 b1 9f 87 c3 23 06 45 f1 5f 4f a0 f7 0f 27 66 95 88 46 f1 3f fb 56 77 69 3f 95 41 e1 95 ff 00 d4 28 81 d8 aa 8b f0 01 dc f8 09 d4 2a ea 11 89 43 c1 70 bc Data Ascii: =p1v&3u\V%}S>n#,9w8"I(\Whsq(K[ya0;^P\|j(F?<iQR 0T&uq'D\|rtz#'>'s$.#~]"ukNmK#E_O'fF?Vwi?A(*Cp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50051	104.36.115.113	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	668	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=75394303&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	897	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=5286816B-07A3-4831-82CF-92827DD7440E; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1710633600%3A201_263%7C1709510400%3A248%7C1710028800%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1710633600%3A104_220_21_54_71_13_250_3_166%7C1710028800%3A223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Sun, 03 Mar 2024 23:26:43 GMT Transfer-Encoding: chunked Connection: close
2024-03-03 23:26:44 UTC	2432	IN	Data Raw: 39 37 34 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 55 6f 61 42 61 77 65 6a 53 44 47 43 7a 35 4b 43 66 64 64 45 44 67 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 Data Ascii: 974PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=UoaBawejSDGCz5KCfddEDg%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50044	15.197.193.217	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	665	OUT	GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	529	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:44 GMT Content-Length: 267 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN set-cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; expires=Mon, 03 Mar 2025 23:26:44 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI5pKg6YP53TwQBTgB; expires=Mon, 03 Mar 2025 23:26:44 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-03 23:26:44 UTC	267	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 55 53 5f 50 52 49 56 41 43 59 3d 31 59 4e 4e 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 55 53 5f 50 52 49 56 Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN">https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50062	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	799	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_fox_news_text_745%2Fb024f429a6a4b2428f13a5458eb7adbc&client=76f99bdb8f78cd44cc0b&signature=5b0d6c665af85421414393b20dd9525d1315fce1 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2508 Cache-Control: public, max-age=2592000 Cache-Tag: 331913754444848513420536364211490576668,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100091-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 0530b0a187c780cb14ed3b0cc9db52de cld_latency: 386 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:44 GMT Edge-Cache-Tag: 331913754444848513420536364211490576668,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "1cd0aacd59a3d47ab715174a22f2ef21" Last-Modified: Sun, 03 Mar 2024 19:08:19 GMT Server: ECAcc (nya/78CC) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=17124,owidth=1280,oheight=720,obytes=79648,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 0530b0a187c780cb14ed3b0cc9db52de X-Served-By: cache-iad-kjyo7100091-IAD X-Timer: S1709505899.792896,VS0,VE386 Content-Length: 17124 Connection: close
2024-03-03 23:26:44 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 06 08 06 05 09 08 07 08 0a 09 09 0a 0d 16 0e 0d 0c 0c 0d 1a 13 14 10 16 1f 1c 21 20 1f 1c 1e 1e 23 27 32 2a 23 25 2f 25 1e 1e 2b 3b 2c 2f 33 35 38 38 38 21 2a 3d 41 3c 36 41 32 37 38 35 ff db 00 43 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c2 00 11 08 01 2c 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 02 07 ff c4 00 1a 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 02 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa 34 88 30 10 0c 00 Data Ascii: JFIFC! #'2#%/%+;,/35888!=A<6A2785C&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO,40
2024-03-03 23:26:44 UTC	741	IN	Data Raw: 64 23 7c 68 a8 d6 a2 c6 80 e7 bc cc 12 27 82 68 a9 9b 9e 48 90 75 1e 99 26 0a b5 1a 0c 65 26 34 0a 95 2a 05 e6 9c 11 91 1a cf 14 70 54 c4 5f 06 0b bf cb aa ac a6 f2 5a fa 62 48 6e e2 17 52 5e e0 4b c8 b3 42 a4 c7 d0 68 73 e1 b7 83 aa a6 ea a5 f7 00 cc f2 db 05 59 40 85 84 22 51 94 67 9a 70 4e 70 d1 16 30 2c 47 53 11 b0 89 45 b3 b8 04 e7 71 2a c9 84 0d 1e 53 43 1a 3b 2d 06 d0 80 7d 58 97 3a a4 cf 21 a2 a3 d6 38 46 27 38 df e8 a8 b9 8d 24 8a 74 98 47 d5 49 1b d0 65 ac 55 3a b4 2a d5 24 0e af 0b 83 72 de 9c fa b4 6b 37 ac 73 5c 04 34 e6 2f 9a ac c0 0f ea 39 a4 5f 81 44 74 8e ac 54 ed 1b 34 c6 70 8f fb aa d4 c1 0d 76 57 83 13 bf 96 f5 d2 71 f4 bc 34 c9 aa 06 06 b8 49 00 6a 27 2b e7 64 2a 55 d2 99 31 3c 50 35 69 40 61 26 43 60 cd 87 35 4d 8c a2 f0 ea cd 2e 25 Data Ascii: d#\|h'hHu&e&4pT_ZbHnR^KBhsY@"QgpNp0,GSEqSC;-}X:!8F'8$tGIeU:$rk7s\4/9_DtT4pvWq4Ij'+dU1<P5i@a&C`5M.%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50036	69.166.1.34	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	800	OUT	GET /us?gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&loc=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dson%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%5BUID%5D%26axid_e%3D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	852	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:44 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-6-133 x-xss-protection: 0 location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3525099948919525000V10&type=son&refUrl=&vid=95083994863525099948919525000V10&ovsid=22b49095-3dec-4c47-8a7b-1d7936dda128&axid_e= set-cookie: __uis=22b49095-3dec-4c47-8a7b-1d7936dda128; expires=Tue, 02 Apr 2024 23:26:43 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s86133\|ZeUHN; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50035	68.67.179.166	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	665	OUT	GET /getuid?https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dapx%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	1531	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Sun, 03 Mar 2024 23:26:44 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fhb.yahoo.net%252Fcksync.php%253Fcs%253D1%2526type%253Dapx%2526ovsid%253D%2524UID%2526axid_e%253D AN-X-Request-Uuid: ac56b398-a2e6-4b63-b21f-54c4a31774ab Set-Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:26:44 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 19-Feb-2034 23:26:44 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=2056953496763385149; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:26:44 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.203; 154.16.192.203; 575.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50043	52.223.22.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	793	OUT	GET /getuid?gdpr=0&cmp_cs=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dtlt%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	659	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:44 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dtlt%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%24UID%26axid_e%3D Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=205552980141694412277; Max-Age=7776000; Expires=Sat, 01 Jun 2024 23:26:44 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50038	34.206.105.187	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	715	OUT	GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	619	IN	HTTP/1.1 307 Temporary Redirect Date: Sun, 03 Mar 2024 23:26:44 GMT Content-Length: 0 Connection: close Location: https://ap.lijit.com/pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true Set-Cookie: ljt_reader=IQveALZHlnPGc8kXQNeadO_F;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50066	69.166.1.34	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	731	OUT	GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3525100008919577000V10&type=son&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=[UID] HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	860	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:44 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-5-175 x-xss-protection: 0 location: https://contextual.media.net/cksync.php?cs=8&vsid=3525100008919577000V10&type=son&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=2e1e420d-8454-4533-a1ab-2d47cb95dd71 set-cookie: __uis=2e1e420d-8454-4533-a1ab-2d47cb95dd71; expires=Tue, 02 Apr 2024 23:26:44 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s85175\|ZeUHN; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50067	35.244.159.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	847	OUT	GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dopx%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	716	IN	HTTP/1.1 302 Found Set-Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404; Version=1; Expires=Mon, 03-Mar-2025 23:26:44 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dopx%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D Date: Sun, 03 Mar 2024 23:26:44 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50086	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	366	OUT	GET /openrtb/pbjs?s=1057752 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:44 UTC	610	IN	HTTP/1.1 204 No Content Date: Sun, 03 Mar 2024 23:26:44 GMT Content-Type: application/json Connection: close CF-Ray: 85ed64a95cac42d2-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZNRO1tc%2BUz4NCYYUxcB%2FUzpjSb7qV%2FdgsqiSpN44B6YEkrAYDBD3bw2Lug6tcAxk%2FboqQAoINHB%2BZrWUjQQlcke4vGQZaN9tspevay8y1F9GiRmR4NteTIe1H6uUPFhZSoRVNDN6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50097	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:44 UTC	1463	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2605&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25014&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:44 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:44 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:44 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:44 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50069	74.119.119.139	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	608	OUT	GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	317	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Sun, 03 Mar 2024 23:26:44 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 transfer-encoding: chunked server-processing-duration-in-ticks: 331202 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-03 23:26:45 UTC	72	IN	Data Raw: 33 44 0d 0a 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 6d 6e 65 74 52 74 75 73 49 64 28 7b 22 73 74 61 74 75 73 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 75 73 65 72 69 64 22 3a 22 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 3Dwindow.advBidxc.mnetRtusId({"status":"Unknown","userid":""});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50073	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	840	OUT	GET /pixel?cs=8&google_nid=media&google_cm=1&google_hm=MzUyNTEwMDAwODkxOTU3NzAwMFYxMA%3D%3D&google_sc=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-03 23:26:45 UTC	1004	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cs.media.net/cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid=CAESEH9ooPefLktf1tmqMqyKXrY&google_cver=1 Date: Sun, 03 Mar 2024 23:26:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 330 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlvF55TF10IKxtblWMno_5peQiA8V0uxWyGn7IfWkgzTc-bL6Vjoayd_GLK-Og; expires=Tue, 03-Mar-2026 23:26:45 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:45 UTC	248	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 74 79 70 65 3d 67 26 61 6d 70 3b 63 73 3d 38 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 6f 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cs.media.net/cksync?type=g&cs=8&gdpr=0&gdpr_consent=&goo
2024-03-03 23:26:45 UTC	82	IN	Data Raw: 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 48 39 6f 6f 50 65 66 4c 6b 74 66 31 74 6d 71 4d 71 79 4b 58 72 59 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: gle_gid=CAESEH9ooPefLktf1tmqMqyKXrY&google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50090	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	1484	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2606&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25014&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:45 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:45 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50087	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	366	OUT	GET /openrtb/pbjs?s=1057757 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	610	IN	HTTP/1.1 204 No Content Date: Sun, 03 Mar 2024 23:26:45 GMT Content-Type: application/json Connection: close CF-Ray: 85ed64aee95642ac-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FXxR3dPhuD8WnP8n%2FfVWjKPWAbosnTy5%2Bz9Ys5e%2BBngJHyT4K%2FNBlnjVwu06nWjeUE3PNDqAyOVKGhgKY0bkkJCkOSf5ggMfdfveItysrtfScfgqHl3gxZJd01AhKQyH27qFQeRr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50100	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	1767	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2624&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=-3&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&pbAcid=234509328780378161709508396847&pbBidId=51788214373968621709508396881&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:45 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:45 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50085	34.120.63.153	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	421	OUT	GET /rtb/prebid?cid=8CUPH46U8 HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10
2024-03-03 23:26:45 UTC	357	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en Content-Length: 0 date: Sun, 03 Mar 2024 23:26:44 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50084	34.111.85.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	416	OUT	GET /rtb/yhb?cid=8YHB8F956 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:45 UTC	303	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en date: Sun, 03 Mar 2024 23:26:45 GMT x-envoy-upstream-service-time: 0 server: istio-envoy via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50091	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	1463	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2602&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25014&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:45 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:45 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50096	74.6.143.22	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	705	OUT	GET /api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-aa-2&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage HTTP/1.1 Host: ncp-gw-video.media.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:45 UTC	1131	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 cache-control: public, stale-while-revalidate=900, max-age=60 vary: Accept-Encoding,Origin y-rid: 7f2oquhiua1pl,7f2oquhiua1pl x-yahoo-request-id: 7f2oquhiua1pl,7f2oquhiua1pl x-request-id: d2a935ab-891f-4dcd-a93a-5a466e1f5a7f,d2a935ab-891f-4dcd-a93a-5a466e1f5a7f x-envoy-upstream-service-time: 38 date: Sun, 03 Mar 2024 23:26:45 GMT server: ATS Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:45 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:45 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-03-03 23:26:45 UTC	877	IN	Data Raw: 33 32 61 37 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 63 75 72 61 74 65 64 56 69 64 65 6f 73 22 3a 7b 22 73 74 72 65 61 6d 49 6e 66 6f 22 3a 7b 22 72 65 74 75 72 6e 65 64 4c 69 73 74 43 6f 75 6e 74 22 3a 31 32 2c 22 72 65 71 75 65 73 74 65 64 43 6f 75 6e 74 22 3a 31 32 30 2c 22 73 74 72 65 61 6d 54 79 70 65 22 3a 22 6a 61 72 76 69 73 22 2c 22 73 6e 69 70 70 65 74 43 6f 75 6e 74 22 3a 31 32 2c 22 71 75 65 72 79 50 72 6f 66 69 6c 65 22 3a 22 61 73 73 65 74 6c 69 73 74 5f 73 69 6e 67 6c 65 5f 66 65 65 64 22 2c 22 69 64 22 3a 22 4a 41 52 56 49 53 3a 63 75 72 61 74 65 64 56 69 64 65 6f 73 3a 61 73 73 65 74 6c 69 73 74 5f 73 69 6e 67 6c 65 5f 66 65 65 64 3a 6e 75 6c 6c 22 2c 22 6a 61 72 76 69 73 46 65 65 64 4e 61 6d 65 22 3a 22 6d 61 69 6e 22 2c 22 70 61 72 61 6d 73 Data Ascii: 32a7{"data":{"curatedVideos":{"streamInfo":{"returnedListCount":12,"requestedCount":120,"streamType":"jarvis","snippetCount":12,"queryProfile":"assetlist_single_feed","id":"JARVIS:curatedVideos:assetlist_single_feed:null","jarvisFeedName":"main","params
2024-03-03 23:26:45 UTC	1300	IN	Data Raw: 61 63 61 34 63 61 2d 31 39 31 63 2d 33 39 33 33 2d 62 61 62 35 2d 35 39 35 63 61 31 64 31 34 39 35 61 22 2c 22 74 69 74 6c 65 22 3a 22 57 69 6e 74 65 72 20 73 74 6f 72 6d 20 77 72 65 61 6b 73 20 68 61 76 6f 63 20 61 63 72 6f 73 73 20 53 69 65 72 72 61 20 4e 65 76 61 64 61 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 20 77 69 6e 74 65 72 20 73 74 6f 72 6d 20 69 73 20 73 6c 61 6d 6d 69 6e 67 20 43 61 6c 69 66 6f 72 6e 69 61 2c 20 77 69 74 68 20 70 61 72 74 73 20 6f 66 20 74 68 65 20 53 69 65 72 72 61 20 4e 65 76 61 64 61 73 20 67 65 74 74 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 61 20 6d 65 74 65 72 20 6f 66 20 73 6e 6f 77 2e 20 41 20 62 75 73 79 20 69 6e 74 65 72 73 74 61 74 65 20 68 61 73 20 62 65 65 6e 20 73 68 75 74 20 64 6f 77 6e 20 69 6e Data Ascii: aca4ca-191c-3933-bab5-595ca1d1495a","title":"Winter storm wreaks havoc across Sierra Nevadas","description":"A winter storm is slamming California, with parts of the Sierra Nevadas getting more than a meter of snow. A busy interstate has been shut down in
2024-03-03 23:26:45 UTC	1300	IN	Data Raw: 39 35 31 33 32 62 34 64 32 37 38 64 36 63 64 35 37 62 38 39 31 66 22 2c 22 77 69 64 74 68 22 3a 32 36 30 2c 22 68 65 69 67 68 74 22 3a 31 34 34 2c 22 74 61 67 22 3a 22 32 36 30 78 31 34 34 22 7d 5d 7d 2c 22 76 69 65 77 65 72 43 6f 75 6e 74 22 3a 7b 22 69 64 22 3a 22 33 63 61 63 61 34 63 61 2d 31 39 31 63 2d 33 39 33 33 2d 62 61 62 35 2d 35 39 35 63 61 31 64 31 34 39 35 61 22 2c 22 76 69 65 77 65 72 43 6f 75 6e 74 22 3a 30 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 34 35 37 30 38 34 7d 7d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 69 64 22 3a 22 36 65 62 32 32 65 39 34 2d 62 34 66 39 2d 33 36 30 62 2d 39 65 66 65 2d 39 33 31 34 30 32 38 66 39 30 31 37 22 2c 22 74 69 74 6c 65 22 3a 22 53 68 69 70 20 61 74 74 61 63 6b 65 64 20 62 79 20 48 6f 75 74 68 69 20 72 Data Ascii: 95132b4d278d6cd57b891f","width":260,"height":144,"tag":"260x144"}]},"viewerCount":{"id":"3caca4ca-191c-3933-bab5-595ca1d1495a","viewerCount":0,"viewCount":457084}}},{"content":{"id":"6eb22e94-b4f9-360b-9efe-9314028f9017","title":"Ship attacked by Houthi r
2024-03-03 23:26:45 UTC	1300	IN	Data Raw: 39 37 33 63 34 36 63 65 35 66 33 31 63 65 37 22 2c 22 77 69 64 74 68 22 3a 31 39 32 30 2c 22 68 65 69 67 68 74 22 3a 31 30 38 30 2c 22 74 61 67 22 3a 22 6f 72 69 67 69 6e 61 6c 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 30 6a 65 74 71 52 70 47 31 6d 36 78 63 51 59 79 49 6a 61 33 33 41 2d 2d 7e 42 2f 5a 6d 6b 39 63 33 52 79 61 57 30 37 61 44 30 78 4e 44 51 37 64 7a 30 79 4e 6a 41 37 59 58 42 77 61 57 51 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 76 69 64 65 6f 2e 61 62 63 6e 65 77 73 70 6c 75 73 2e 63 6f 6d 2f 32 32 64 37 63 36 36 32 66 38 31 65 64 37 63 37 32 39 37 33 63 34 36 63 65 35 Data Ascii: 973c46ce5f31ce7","width":1920,"height":1080,"tag":"original"},{"url":"https://s.yimg.com/uu/api/res/1.2/0jetqRpG1m6xcQYyIja33A--~B/Zmk9c3RyaW07aD0xNDQ7dz0yNjA7YXBwaWQ9eXRhY2h5b24-/https://media.zenfs.com/en/video.abcnewsplus.com/22d7c662f81ed7c72973c46ce5
2024-03-03 23:26:45 UTC	1300	IN	Data Raw: 3d 63 61 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 75 73 22 2c 22 79 6d 65 64 69 61 3a 63 61 74 65 67 6f 72 79 3d 31 30 30 30 30 30 30 30 38 22 2c 22 79 6d 65 64 69 61 3a 74 79 70 65 3d 63 61 76 69 64 65 6f 22 2c 22 79 6d 65 64 69 61 3a 70 72 6f 76 69 64 65 72 5f 63 61 74 65 67 6f 72 79 3d 77 65 62 5f 65 78 63 6c 75 73 69 76 65 73 22 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 7b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 66 41 36 31 75 45 73 47 68 51 6f 30 34 70 4c 6f 43 61 75 6d 68 51 2d 2d 7e 42 2f 61 44 30 33 4d 6a 41 37 64 7a 30 78 4d 6a 67 77 4f 32 46 77 63 47 6c 6b 50 58 6c 30 59 57 4e 6f 65 57 39 75 2f 68 74 74 70 73 Data Ascii: =ca","ynews:region=us","ymedia:category=100000008","ymedia:type=cavideo","ymedia:provider_category=web_exclusives"],"thumbnail":{"resolutions":[{"url":"https://s.yimg.com/uu/api/res/1.2/fA61uEsGhQo04pLoCaumhQ--~B/aD03MjA7dz0xMjgwO2FwcGlkPXl0YWNoeW9u/https
2024-03-03 23:26:45 UTC	1300	IN	Data Raw: 6e 20 43 6f 6e 67 72 65 73 73 20 74 68 61 74 20 54 72 75 6d 70 20 68 65 6c 70 65 64 20 74 6f 72 70 65 64 6f 20 6c 61 73 74 20 6d 6f 6e 74 68 20 62 79 20 75 72 67 69 6e 67 20 52 65 70 75 62 6c 69 63 61 6e 73 20 74 6f 20 76 6f 74 65 20 61 67 61 69 6e 73 74 20 69 74 2e 3c 2f 70 3e 3c 70 3e 49 6e 20 68 69 73 20 73 70 65 65 63 68 2c 20 54 72 75 6d 70 20 61 6c 73 6f 20 61 67 61 69 6e 20 72 65 66 65 72 72 65 64 20 74 6f 20 68 69 6d 73 65 6c 66 20 61 73 20 61 20 5c 22 70 6f 6c 69 74 69 63 61 6c 20 64 69 73 73 69 64 65 6e 74 5c 22 2c 20 61 73 20 68 65 20 66 61 63 65 73 20 6d 75 6c 74 69 70 6c 65 20 63 72 69 6d 69 6e 61 6c 20 63 68 61 72 67 65 73 2c 20 61 6e 64 20 63 61 6c 6c 65 64 20 74 68 6f 73 65 20 63 6f 6e 76 69 63 74 65 64 20 6f 66 20 72 69 6f 74 69 6e 67 20 Data Ascii: n Congress that Trump helped torpedo last month by urging Republicans to vote against it.</p><p>In his speech, Trump also again referred to himself as a \"political dissident\", as he faces multiple criminal charges, and called those convicted of rioting
2024-03-03 23:26:45 UTC	1300	IN	Data Raw: 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 75 73 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 61 75 22 2c 22 79 6d 65 64 69 61 3a 73 65 72 69 65 73 5f 6e 61 6d 65 3d 52 65 75 74 65 72 73 22 2c 22 79 6d 65 64 69 61 3a 74 79 70 65 3d 63 61 76 69 64 65 6f 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 6e 7a 22 2c 22 79 6d 65 64 69 61 3a 73 69 67 6e 61 6c 3d 73 75 6d 6d 61 72 79 5f 73 6f 75 72 63 65 3a 63 61 70 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 73 67 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 65 78 70 65 72 69 6d 65 6e 74 3d 76 69 64 65 6f 5f 70 72 65 66 65 72 72 65 64 5f 70 72 6f 76 69 64 65 72 73 22 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 7b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 Data Ascii: ","ynews:region=us","yfrontpage:region=au","ymedia:series_name=Reuters","ymedia:type=cavideo","ynews:region=nz","ymedia:signal=summary_source:cap","ynews:region=sg","yfrontpage:experiment=video_preferred_providers"],"thumbnail":{"resolutions":[{"url":"htt
2024-03-03 23:26:45 UTC	1300	IN	Data Raw: 2f 70 3e 3c 70 3e 48 65 72 20 68 75 73 62 61 6e 64 20 68 61 64 20 70 6c 61 6e 73 20 74 6f 20 6c 65 61 76 65 20 47 61 7a 61 20 61 6e 64 20 77 61 73 20 69 73 73 75 65 64 20 61 20 70 61 73 73 70 6f 72 74 2c 20 62 75 74 20 74 68 65 20 77 61 72 20 73 74 6f 70 70 65 64 20 68 69 6d 2c 20 73 68 65 20 61 64 64 65 64 2e 3c 2f 70 3e 3c 70 3e 41 74 20 6c 65 61 73 74 20 31 34 20 50 61 6c 65 73 74 69 6e 69 61 6e 73 20 68 61 76 65 20 62 65 65 6e 20 6b 69 6c 6c 65 64 20 69 6e 20 74 68 65 20 61 69 72 73 74 72 69 6b 65 20 74 68 61 74 20 68 69 74 20 41 62 75 20 41 6e 7a 61 20 66 61 6d 69 6c 79 27 73 20 68 6f 75 73 65 2c 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 50 61 6c 65 73 74 69 6e 69 61 6e 20 68 65 61 6c 74 68 20 6f 66 66 69 63 69 61 6c 73 2e 20 53 6f 6d 65 20 62 6f 64 Data Ascii: /p><p>Her husband had plans to leave Gaza and was issued a passport, but the war stopped him, she added.</p><p>At least 14 Palestinians have been killed in the airstrike that hit Abu Anza family's house, according to Palestinian health officials. Some bod
2024-03-03 23:26:45 UTC	1300	IN	Data Raw: 30 35 4e 6a 41 37 59 58 42 77 61 57 51 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 76 69 64 65 6f 2e 72 65 75 74 65 72 73 6e 65 77 73 2e 63 6f 6d 2f 64 66 64 61 30 37 66 37 34 64 37 31 61 30 62 35 61 37 64 61 38 36 39 39 37 63 61 36 31 66 61 31 22 2c 22 77 69 64 74 68 22 3a 39 36 30 2c 22 68 65 69 67 68 74 22 3a 35 34 30 2c 22 74 61 67 22 3a 22 6f 72 69 67 69 6e 61 6c 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 7a 31 36 4f 78 6b 64 61 38 48 37 30 50 4c 64 38 42 5a 37 75 67 67 2d 2d 7e 42 2f 5a 6d 6b 39 63 33 52 79 61 57 30 37 61 44 30 78 4e 44 51 37 64 7a 30 79 4e 6a 41 37 59 58 42 77 61 Data Ascii: 05NjA7YXBwaWQ9eXRhY2h5b24-/https://media.zenfs.com/en/video.reutersnews.com/dfda07f74d71a0b5a7da86997ca61fa1","width":960,"height":540,"tag":"original"},{"url":"https://s.yimg.com/uu/api/res/1.2/z16Oxkda8H70PLd8BZ7ugg--~B/Zmk9c3RyaW07aD0xNDQ7dz0yNjA7YXBwa
2024-03-03 23:26:45 UTC	1300	IN	Data Raw: 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 61 75 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 73 67 22 2c 22 79 6d 65 64 69 61 3a 70 72 6f 76 69 64 65 72 5f 63 61 74 65 67 6f 72 79 3d 75 73 22 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 7b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 64 70 69 45 4b 4b 6d 5a 44 64 36 49 58 33 47 32 4b 49 4a 34 5a 77 2d 2d 7e 42 2f 61 44 30 31 4e 44 41 37 64 7a 30 35 4e 6a 41 37 59 58 42 77 61 57 51 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 63 6e 6e 5f 76 69 64 65 6f 73 5f 31 37 37 2f 34 33 37 39 38 36 30 37 38 66 36 Data Ascii: ,"ynews:region=au","ynews:region=sg","ymedia:provider_category=us"],"thumbnail":{"resolutions":[{"url":"https://s.yimg.com/uu/api/res/1.2/dpiEKKmZDd6IX3G2KIJ4Zw--~B/aD01NDA7dz05NjA7YXBwaWQ9eXRhY2h5b24-/https://media.zenfs.com/en/cnn_videos_177/437986078f6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50101	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	801	OUT	GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_people_articles_471%2Ff2816944f427428b6dbbce36b851f474&client=76f99bdb8f78cd44cc0b&signature=d09cabf23bc17090e996922db5bbf3be311a0dd6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	1146	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2509 Cache-Control: public, max-age=2592000 Cache-Tag: 392181853841396116862568578171727174411,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100108-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: ab6da7e4d81454f38e54dcd0c3644d05 cld_latency: 334 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:45 GMT Edge-Cache-Tag: 392181853841396116862568578171727174411,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e Etag: "f640aebe153a94d3f89d995d692fe8b7" Last-Modified: Sun, 03 Mar 2024 16:46:55 GMT Server: ECAcc (nya/78CE) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=500,height=500,bytes=18633,owidth=360,oheight=480,obytes=28332,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: ab6da7e4d81454f38e54dcd0c3644d05 X-Served-By: cache-iad-kjyo7100108-IAD X-Timer: S1709505899.782190,VS0,VE334 Content-Length: 18633 Connection: close
2024-03-03 23:26:45 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c2 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 00 07 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d3 3a 27 4a 4b d1 b8 24 74 4e 09 15 8a ac Data Ascii: JFIF, ,'/&$&/'F7117FQD@DQbXXb\|v\|, ,'/&$&/'F7117FQD@DQbXXb\|v\|"4:'JK$tN
2024-03-03 23:26:45 UTC	2250	IN	Data Raw: fe 46 0f 42 e0 9a dc ea 1f 6e 14 8c 59 76 48 b5 c8 de fa 32 31 16 8d 8d e8 98 9f 83 f8 17 22 3a c5 bb 1f 26 0e 11 26 d2 46 28 39 33 ab 87 eb 64 45 37 54 45 32 8a 12 d5 8c 43 62 90 a4 85 22 c6 cb 2c bd 2c 6c b1 11 3a c7 c9 2f b1 d3 fa 14 2d 18 e0 a3 c1 96 3d d1 92 62 75 6b fe 98 e3 7b b2 28 a2 bc 18 f4 92 19 18 b6 25 45 8f e0 48 47 5b 24 8e e4 e4 61 7b 23 14 d3 42 63 96 d2 2b fb 8c 82 17 8b 19 ce 94 49 6e 63 96 e3 25 2a 14 bc ec 48 67 5f 76 27 fb 18 1f ea 62 e1 0a c9 5e e4 61 fb 31 09 97 e0 c6 50 90 c9 2d c6 9a 21 26 c7 16 d9 da 59 62 62 d1 ba 3b c4 86 8f ea 11 38 91 d3 70 63 e0 5c 12 e0 5e 6c 9f 22 d5 8d 09 d3 15 34 34 34 31 0b 4c b3 a3 f2 6b d7 8f ec 74 cb f5 31 f0 4b 34 20 b7 63 ea e1 27 da 85 55 a3 13 f0 64 95 b1 6d a3 7a 31 a3 1c bd 68 c9 22 28 5a 67 Data Ascii: FBnYvH21":&&F(93dE7TE2Cb",,l:/-=buk{(%EHG[$a{#Bc+Inc%*Hg_v'b^a1P-!&Ybb;8pc\^l"4441Lkt1K4 c'Udmz1h"(Zg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50104	104.36.115.113	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	669	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=16549579&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	947	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156078:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Sun, 03 Mar 2024 23:26:45 GMT Transfer-Encoding: chunked Connection: close
2024-03-03 23:26:45 UTC	3793	IN	Data Raw: 65 63 35 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 63 68 50 62 74 49 78 4f 52 66 69 36 79 43 46 4a 30 79 71 4c 48 77 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 Data Ascii: ec5PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=chPbtIxORfi6yCFJ0yqLHw%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50088	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	1474	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2610&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25082&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:45 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:45 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50074	54.211.182.170	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	796	OUT	GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Ddxu%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	758	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Sun, 03 Mar 2024 23:26:45 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Ddxu%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-00d8c9c67aa95927d@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=IKSGvoFb1RGVed5; Domain=.w55c.net; Expires=Thu, 03 Apr 2025 09:26:45 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50102	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=ef85e8cf2223994c333ea8e9159b98ffe0bc6080 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 409583 Cache-Control: public, max-age=2592000 Cache-Tag: 242478970273792402798397858869058529945,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100095-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 91 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:45 GMT Edge-Cache-Tag: 242478970273792402798397858869058529945,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "fb63bb3ad5a7073858b9e60838b00c27" Expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 01 Feb 2024 18:22:02 GMT Server: ECAcc (nya/7983) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=293,owidth=400,oheight=400,obytes=75663,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100095-IAD X-Timer: S1709098822.316054,VS0,VE91 Content-Length: 293 Connection: close
2024-03-03 23:26:45 UTC	293	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 4e 50 4c 54 45 47 70 4c 00 c6 ff 00 c6 ff 61 dc fd 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff c8 f3 fd fa fe fe af ed fd 11 ca fe dc f7 fe bc f0 fd 94 e7 fd 6c de fd ea fa fd 78 e1 fc 3b d3 fe 31 d1 fe 22 ce fe 45 d5 fd 49 d6 fd 43 d5 fd 42 31 89 89 00 00 00 0a 74 52 4e 53 00 c1 ff ff 97 f9 d9 09 9a 31 a3 db f8 54 00 00 00 7c 49 44 41 54 18 d3 65 cf d7 11 02 31 0c 04 d0 bd 95 a3 e4 74 11 e8 bf 51 3e 60 18 c0 af 80 0d 00 80 ec 82 f7 c1 65 bc c4 c4 b7 14 01 20 2e fc 58 22 80 c4 2f 09 c8 fc 91 e1 f6 a6 0f 92 64 d5 8b 74 08 47 1b 4d 45 4b ef 3a f4 0c f0 87 95 ad 98 58 2f 66 65 78 78 d9 6a df cb d8 9a 9a ed 77 8f 70 48 bd d6 ba 4a 13 b9 ad 35 Data Ascii: PNGIHDR(-SNPLTEGpLalx;1"EICB1tRNS1T\|IDATe1tQ>`e .X"/dtGMEK:X/fexxjwpHJ5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50103	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	1767	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2628&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=-3&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&pbAcid=234509328780378161709508396847&pbBidId=85054260041171871709508396886&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:45 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:45 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50108	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	708	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLHd_1h13Yx5f.pZrF.YlPw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Ftrailblazers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bf7b50ac67ea7239e80e50d623f7202f3f25466d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	1111	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2136166 Cache-Control: public, max-age=2592000 Cache-Tag: 341385141819231340847914491332416382864,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21938-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 119 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:45 GMT Edge-Cache-Tag: 341385141819231340847914491332416382864,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "2d31c6a99e63d38b32aa0fdaa1100445" Expiration: expiry-date="Mon, 27 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 28 Nov 2023 22:21:25 GMT Server: ECAcc (nya/78C6) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1837,owidth=50,oheight=50,obytes=2357 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21982-LGA X-Timer: S1702188222.925869,VS0,VE139 Content-Length: 1837 Connection: close
2024-03-03 23:26:45 UTC	1837	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c 9c a4 a7 be c3 c5 ff ff ff ff ff ff ff ff ff b9 bf c1 72 7d 82 75 7f 84 ff ff ff aa b1 b4 ff ff ff ff ff ff ff ff ff ad b4 b6 bc c1 c3 e3 e5 e6 ff ff ff dc df e0 ff ff ff f6 f6 f7 ff ff ff a2 a9 ac 63 6f 75 97 9f a3 f0 f1 f2 de e1 e2 ff ff ff 89 92 97 93 9b 9f 7d 87 8c 75 80 85 d9 dc dd 82 8b 90 c7 cb cd 3c 4b 52 aa b1 b4 ff ff ff ff ff ff a9 b0 b3 5b 67 6d 93 9b 9f c0 c5 c7 a9 af b3 bf c4 c6 91 9a 9e 5c 69 6f fe fe fe c2 c7 c9 ff ff ff c3 c8 ca f3 f4 f5 8b 94 98 b9 be c1 f3 f4 f5 f6 f7 f7 b9 be c1 a4 ab ae a6 ad b0 80 8a 8e ff ff ff 87 90 94 a2 a9 ad 06 19 22 e0 3a 3e ff ff ff 08 1b 24 12 24 2d c4 c9 cb a2 a9 ad 09 19 22 16 Data Ascii: PNGIHDR22)xPLTEGpLr}ucou}u<KR[gm\io":>$$-"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50075	74.119.119.150	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	787	OUT	GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	705	IN	HTTP/1.1 302 Found content-length: 0 date: Sun, 03 Mar 2024 23:26:45 GMT server: Kestrel cache-control: no-cache expires: Sun, 03 Mar 2024 00:00:00 GMT location: https://contextual.media.net/cksync.php?cs=1&type=crt&ovsid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA pragma: no-cache set-cookie: uid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f; expires=Fri, 28 Mar 2025 23:26:44 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1891326 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50110	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLX9izbkR2E3ylw0Xjvm9MA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2Fmagic_wbg.png&client=76f99bdb8f78cd44cc0b&signature=017c613f2f9352dfc32599f7308fc6338e568ab6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133427 Cache-Control: public, max-age=2592000 Cache-Tag: 398402101184439505225149956696141148672,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21969-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 106 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:45 GMT Edge-Cache-Tag: 398402101184439505225149956696141148672,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "05a539397b4dc91b238a9f42a747d792" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (nya/797D) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1725,owidth=50,oheight=50,obytes=2170,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21969-LGA X-Timer: S1707374978.347823,VS0,VE106 Content-Length: 1725 Connection: close
2024-03-03 23:26:45 UTC	1725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 69 77 7e c4 ce d3 c4 ce d3 c4 ce d3 c3 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c2 cc d1 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 6e 7c 83 c4 ce d3 9c a8 ae 73 81 88 c4 ce d3 c4 ce d3 77 85 8c 63 70 76 bb c6 cb aa b5 bb 79 87 8d c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 c4 ce d3 74 82 89 c4 ce d3 c4 ce d3 c4 ce d3 6f 7d 85 7d 8a 91 b6 c1 c6 c4 ce d3 aa b5 bb c1 cb d0 8d 99 9f c4 ce d3 c4 ce d3 a2 ad b3 b5 c0 c5 92 9e a4 a7 b2 b8 aa b5 bb 88 95 9b 6d 7b 82 c4 ce d3 b7 c2 c7 84 91 97 a2 ad b3 a5 b0 b6 a9 b4 ba a8 b4 b9 85 92 98 c1 cb d0 99 a5 ab be c8 cd c4 ce d3 54 63 6b af Data Ascii: PNGIHDR22)xPLTEGpLiw~n\|swcpvyto}}m{Tck

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50105	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	1788	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2629&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=-3&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&pbAcid=234509328780378161709508396847&pbBidId=29440994237180501709508396887&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:45 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:45 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50107	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	693	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fu.pqfa2q7DS.luzuhXi7JQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230905%2F500px%2Flakers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=b5102b8c22200b7c733d98e776f08546f58e5154 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 414685 Cache-Control: public, max-age=2592000 Cache-Tag: 269569567698533729946868004275355481156,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100172-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 70 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:45 GMT Edge-Cache-Tag: 269569567698533729946868004275355481156,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "1af738852894064e68e3c5a45c88f036" Expiration: expiry-date="Tue, 02 Apr 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 04 Oct 2023 04:13:55 GMT Server: ECAcc (nya/7937) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1878,owidth=50,oheight=50,obytes=5451 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100088-IAD X-Timer: S1701317705.246176,VS0,VE106 Content-Length: 1878 Connection: close
2024-03-03 23:26:45 UTC	1878	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fb fb fd b9 27 ff ff ff 31 00 6f fe fe fe fc b8 27 c4 b6 d6 32 01 6f a9 6d 44 bc ac d1 48 15 67 fb b7 27 f9 f8 fb f0 ad 2c f7 b4 26 a3 67 47 c3 84 3b 7f Data Ascii: PNGIHDR22)xPLTEGpL'1o'2omDHg',&gG;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50106	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FP2Lcp4ZIzhVhuQjVqH9yJA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191021%2F500x500%2Frockets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=8339d7b537e79acc2460e70ee7938168423d4456 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133425 Cache-Control: public, max-age=2592000 Cache-Tag: 217873377608544582672260778069716442962,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000039-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:45 GMT Edge-Cache-Tag: 217873377608544582672260778069716442962,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "4eba1fba64296252e56327839fd1781f" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (nya/7887) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1785,owidth=50,oheight=50,obytes=2090,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000039-IAD X-Timer: S1707374980.315437,VS0,VE2 Content-Length: 1785 Connection: close
2024-03-03 23:26:45 UTC	1785	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff f3 c6 d1 fd f1 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 d1 da ff ff ff ff ff ff fa e3 e9 ff ff ff ff ff ff ff ff ff fe fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ea eb ec f4 f5 f5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 d3 dc f5 cf d8 ff ff ff ff fc fd ff ff ff ff ff ff fd eb f0 ff ff ff ff ff ff ee ef f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f8 e6 ea ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50113	151.101.193.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	772	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:26:45 UTC	965	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:45 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:45 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 18807 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:45 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-ewr18138-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508406.690483,VS0,VE20 X-vcl-time-ms: 20 transfer-encoding: chunked
2024-03-03 23:26:45 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-03 23:26:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-03 23:26:45 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50112	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	780	OUT	GET /cksync.php?cs=1&type=58267&ovsid=1783777331801413449 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:45 UTC	662	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-zta=1783777331801413449~~1;Expires=Wed, 17 Apr 2024 23:26:45 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:45 GMT Connection: close
2024-03-03 23:26:45 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:45 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50111	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	704	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh6tcrfyHgrC03ICBoahgsA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fgrizzlies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=8366ef9893f0d8b51d992acf051eec22695c38fe HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	1115	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133427 Cache-Control: public, max-age=2592000 Cache-Tag: 389512422149550829434017629323377100037,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21949-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:45 GMT Edge-Cache-Tag: 389512422149550829434017629323377100037,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "6cac3d75fd69eb47e5cac3bb799b4948" Expiration: expiry-date="Thu, 30 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 01 Dec 2023 22:21:23 GMT Server: ECAcc (nya/78CE) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2059,owidth=50,oheight=50,obytes=2403 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100037-IAD X-Timer: S1702190899.135303,VS0,VE128 Content-Length: 2059 Connection: close
2024-03-03 23:26:45 UTC	2059	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 71 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 6f 72 72 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 70 70 72 71 70 71 70 70 72 71 70 72 71 6f 71 70 6f 72 6f 70 72 71 70 72 71 6e 70 70 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 6d 6f 6f 6f 71 71 6e 70 70 70 72 71 70 72 71 70 72 71 6f 71 70 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 70 72 71 6b 6d 6e 70 72 71 70 72 71 70 72 71 70 Data Ascii: PNGIHDR22)xPLTEGpLprqprqprqprqprqprqpqqprqprqprqprqprqprqprqprqprqprqorrprqprqprqprqprqprqprqprqprqprqprqprpprqpqpprqprqoqporoprqprqnppprqprqprqprqprqprqprqprqprqmoooqqnppprqprqprqoqpprqprqprqprqprqprqprqprqprqprqprqkmnprqprqprqp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50072	69.194.240.13	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	800	OUT	GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	1054	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:45 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Mon, 03 Mar 2025 23:26:45 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1709508405916 etag: RX3c4bc8e3ffb2488a8a78eb15aa2f9706005 connection: close
2024-03-03 23:26:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50109	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FiiEErhUHtBJPZhhygpVeqg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181213%2F500x500%2Fnuggets_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fcc40ea3f7b1d9c1f531bd8610e1a332967f1696 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:45 UTC	1038	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133427 Cache-Control: public, max-age=2592000 Cache-Tag: 440185262663180471296379902392492361094,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:45 GMT Edge-Cache-Tag: 440185262663180471296379902392492361094,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "78a028b6bceb6f1c49ad89d6c4043dcc" Expiration: expiry-date="Wed, 10 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 11 Jan 2024 14:18:39 GMT Server: ECAcc (nya/7981) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2269,owidth=50,oheight=50,obytes=2916,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100179-IAD X-Timer: S1707374978.355430,VS0,VE83 Content-Length: 2269 Connection: close
2024-03-03 23:26:45 UTC	2269	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 ff c6 27 0d 22 40 ff c6 27 8b 23 32 ff ff ff fc c2 27 9c 3a 30 8a 23 32 10 22 40 0e 23 40 fe c6 27 0f 24 40 4d 23 39 8c 96 a4 8f 27 32 3d 43 3b 70 23 35 6b 23 36 46 22 3a 1c 2c 3e fa c2 28 28 34 3d 98 34 31 82 23 33 13 22 3f 1b 22 3e 87 23 32 20 22 3e 17 29 3f bc 68 2d 56 23 38 f5 Data Ascii: PNGIHDR22)xPLTEGpL''''''''''''''''''''''''''''''''''''''''"@'#2':0#2"@#@'$@M#9'2=C;p#5k#6F":,>((4=41#3"?">#2 ">)?h-V#8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50114	151.101.193.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	775	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:26:45 UTC	971	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:45 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:45 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:45 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-lga21951-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508406.694647,VS0,VE21 Vary: Accept-Encoding X-vcl-time-ms: 21 transfer-encoding: chunked
2024-03-03 23:26:45 UTC	4	IN	Data Raw: 35 34 0d 0a Data Ascii: 54
2024-03-03 23:26:45 UTC	84	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 38 34 30 34 64 65 61 30 2d 32 35 35 39 2d 34 30 39 32 2d 61 35 30 61 2d 32 34 31 30 66 34 39 30 37 31 32 63 2d 74 75 63 74 63 64 65 38 63 62 34 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4","isNewUser":false}}
2024-03-03 23:26:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50094	34.120.63.153	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	421	OUT	GET /rtb/prebid?cid=8CUPH46U8 HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10
2024-03-03 23:26:45 UTC	357	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en Content-Length: 0 date: Sun, 03 Mar 2024 23:26:45 GMT x-envoy-upstream-service-time: 1 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50093	34.111.85.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	416	OUT	GET /rtb/yhb?cid=8YHB8F956 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:45 UTC	303	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en date: Sun, 03 Mar 2024 23:26:45 GMT x-envoy-upstream-service-time: 0 server: istio-envoy via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50118	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	1042	OUT	GET /usermatch?cb=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fgpp%3DDBAA%26gpp_sid%3D-1%26cs%3D1%26vsid%3D3525099948919525000V10%26type%3Didx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D_UID_&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=183875&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:26:46 UTC	993	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 85ed64b1b89d2363-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:26:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hiiLHnAYuxxSbdqZ7%2Fa8G1kb5GV47VDIreCMHh47zpnqEe9vZgczXt16qt1GJyXugQuDmj4JGEfJmXVuFBqlJmEIq5Z7wygSgktxO%2FP9gzXjiDSy1N9oDr%2Bkx95S%2Fb6uRxsFPauby0OEEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:26:46 UTC	376	IN	Data Raw: 37 63 39 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 33 31 33 32 37 3f 62 69 64 64 65 72 5f 69 64 3d 31 34 34 38 31 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 5a 65 55 48 4e 45 74 33 75 53 59 41 41 42 42 66 41 45 54 49 4e 41 41 41 25 32 36 30 31 35 26 61 6d 70 3b 67 70 64 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 Data Ascii: 7c9<html><head><title></title></head><body><img src="https://i.liadm.com/s/31327?bidder_id=14481&bidder_uuid=ZeUHNEt3uSYAABBfAETINAAA%26015&gpdr=&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" heigh
2024-03-03 23:26:46 UTC	1369	IN	Data Raw: 76 61 63 79 3d 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 69 64 3d 5a 65 55 48 4e 45 74 33 75 53 59 41 41 42 42 66 41 45 54 49 4e 41 41 41 41 41 38 41 41 41 49 42 26 61 6d 70 3b 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 63 61 73 61 6c 65 3f 67 70 70 3d 44 42 41 41 26 61 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 Data Ascii: vacy=&gdpr=&gdpr_consent=&id=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB&gpp=DBAA&gpp_sid=-1" style="display:none" width="0" height="0" alt="" border="0" /><img src="https://match.adsrvr.org/track/cmf/casale?gpp=DBAA&gpp_sid=-1" style="displa
2024-03-03 23:26:46 UTC	255	IN	Data Raw: 6d 70 3b 67 70 70 5f 73 69 64 3d 2d 31 26 61 6d 70 3b 63 73 3d 31 26 61 6d 70 3b 76 73 69 64 3d 33 35 32 35 30 39 39 39 34 38 39 31 39 35 32 35 30 30 30 56 31 30 26 61 6d 70 3b 74 79 70 65 3d 69 64 78 26 61 6d 70 3b 72 65 66 55 72 6c 3d 26 61 6d 70 3b 76 69 64 3d 39 35 30 38 33 39 39 34 38 36 33 35 32 35 30 39 39 39 34 38 39 31 39 35 32 35 30 30 30 56 31 30 26 61 6d 70 3b 61 78 69 64 5f 65 3d 26 61 6d 70 3b 6f 76 73 69 64 3d 5a 65 55 48 4e 45 74 33 75 53 59 41 41 42 42 66 41 45 54 49 4e 41 41 41 41 41 38 41 41 41 49 42 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 61 6c 74 3d 22 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: mp;gpp_sid=-1&cs=1&vsid=3525099948919525000V10&type=idx&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB" style="display:none" width="0" height="0" alt="" border="0" /></body></html>
2024-03-03 23:26:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50133	18.238.79.3	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	673	OUT	GET /8528a8ca9f4220ae15851111192c47cd.webp HTTP/1.1 Host: de9a11s35xj3d.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	645	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 117906 Connection: close Date: Sun, 03 Mar 2024 23:26:47 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Sun, 03 Mar 2024 14:29:17 GMT ETag: "8987b601123fe20c6f821fb4bcf4c22a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0ee7a6b385005140a65ba6d2404c2f60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P5 X-Amz-Cf-Id: JvXYfcc5rzclQ3vWvoWdFP5TVEFD3eGxepWh0DMY7Jmz0ss-SKuaLg==
2024-03-03 23:26:46 UTC	15739	IN	Data Raw: 52 49 46 46 8a cc 01 00 57 45 42 50 56 50 38 20 7e cc 01 00 b0 51 07 9d 01 2a b0 04 73 02 3e 6d 30 94 47 24 23 22 28 28 d5 3b c9 00 0d 89 4d 76 55 ab 6a 7b 43 08 3e 9e 56 57 8a fc e4 b4 f3 6b 99 f3 41 39 5c 3e 62 64 7a 47 2a 8d 75 d7 9f a4 79 44 73 0f ea bf f3 bb 7e f8 18 79 d7 f7 5f 60 2d f7 4e e9 fe ab d8 03 c1 97 99 3c f7 ff dc 7a 22 7e a3 fe cb a7 ff fb fe 44 be d0 bf 3a ed ea 57 bf c8 e9 e3 ff 00 7e 79 f8 bf 55 5f eb 78 af da 5e 73 dd 59 e6 b7 fe df ed e7 be 5f d8 9e c2 9f d2 7f ca fe cf 7a f5 fb 19 f3 63 e6 b7 ff a3 d8 07 f6 0f 51 bf e8 5f f2 ff ff fb 68 fa c9 7a 16 f9 7a fe f3 7c 45 ff 61 ff c7 fb cd ed 93 ff ff b3 df 9d 9f ca 3c 91 7c d3 ee 8f 84 bf 9c 7d 9f fb ff f0 df ea ff f1 ff 92 f7 69 ca 3f b8 ff af ff c3 fd df a9 3f d0 bf 42 ff 73 fc cf b6 Data Ascii: RIFFWEBPVP8 ~Qs>m0G$#"((;MvUj{C>VWkA9\>bdzGuyDs~y_`-N<z"~D:W~yU_x^sY_zcQ_hzz\|Ea<\|}i??Bs
2024-03-03 23:26:46 UTC	1525	IN	Data Raw: 07 9e cc 7d a8 28 44 01 02 b7 0e 4a c7 50 27 64 0c ef e2 91 e6 8e 27 bc d9 4e 90 9d b7 c7 e6 b5 9e 92 a8 0d 64 a4 6d aa aa 3d 7a cb 94 fe 02 7e 14 91 bb f1 53 75 d9 d4 18 62 0e bf 5a 1b bd 54 f5 69 d7 f2 40 a0 0a 69 e9 22 a0 e1 13 10 e6 c4 0a 23 5d 9b 04 77 3e 6f 72 5b 7c 50 a2 83 56 a7 09 75 69 78 d7 3e 41 7a 11 c5 35 0e 88 12 84 51 87 c5 9c 0b 67 a7 34 2c 1d 09 5c a0 18 22 c1 9f 71 4e fa a1 69 a5 30 c0 4f 23 f4 33 02 72 99 e4 c1 31 ad 7e 30 f8 4e 28 e1 f5 f9 fe 37 ae b7 9f 78 e8 af f3 66 94 c2 dc 0e e2 e4 1f 0e 7f 4f 9a 76 2b 60 fb 05 e3 7d e6 90 0d 42 b7 a8 53 fd b2 83 a3 d7 cd d2 23 48 d6 5b 1b e7 29 53 a8 5c 3f 01 0d 83 d9 3e 1a e7 9e 58 e9 b8 22 37 25 5d 95 46 a6 6b fd c9 f2 50 25 a2 9e 06 cb 00 42 29 9b bf a6 63 a4 0e cc 74 81 c6 04 de f1 00 c1 b8 Data Ascii: }(DJP'd'Ndm=z~SubZTi@i"#]w>or[\|PVuix>Az5Qg4,\"qNi0O#3r1~0N(7xfOv+`}BS#H[)S\?>X"7%]FkP%B)ct
2024-03-03 23:26:46 UTC	1418	IN	Data Raw: 25 2c 61 ed 49 cf 5c 6e 16 d6 b9 ab 0a 7c 29 43 2d a6 93 cf ab 4b 4e 92 70 99 78 4b 69 7f 46 8a 07 b0 57 ac 42 b3 82 b4 1b 74 a7 30 1d e7 70 f2 71 69 a7 d6 af ac 51 17 dc f5 00 7a d6 a9 49 c7 43 38 82 59 81 71 23 f0 50 9d 0f 15 af fd 5e fe 32 aa c3 08 b4 a8 63 05 67 d4 2a 32 a1 b9 9e 37 83 02 61 ad d6 9b aa 06 9b db a9 f7 e5 eb c1 bc f0 53 03 0d 86 d6 92 59 9d 03 b3 ec 1d 20 17 40 36 c3 e9 f5 bf 9c f9 db 42 d6 5c 75 51 bb 7a 01 cb e0 c3 d8 5a 8e 93 fa 67 ca 32 aa 71 7e 94 7d b3 d8 79 4a eb 27 72 5a 7e 94 c5 90 06 0b 8a f4 e5 cd 5f 43 75 ef 7d c2 60 1d af 90 70 bb 5f 50 50 0c 84 d5 97 e9 2c f2 c4 57 42 62 46 69 0d b8 68 9e 55 3a ae d0 e1 80 e2 2e 79 a7 3f 51 22 4a fc 1a bc e3 72 41 30 8d fb af 21 0c 12 34 57 a6 84 b6 5d 13 60 e4 0f 04 fb 51 b0 1b 0d a6 4a Data Ascii: %,aI\n\|)C-KNpxKiFWBt0pqiQzIC8Yq#P^2cg*27aSY @6B\uQzZg2q~}yJ'rZ~_Cu}`p_PP,WBbFihU:.y?Q"JrA0!4W]`QJ
2024-03-03 23:26:46 UTC	16384	IN	Data Raw: e5 e7 a4 ce e5 09 da 47 88 f3 41 0d 48 96 40 2d 25 11 3a 23 2e b2 5a 3c 6d 15 55 96 9c 60 8f 67 4c 60 82 20 2c e7 d7 d9 4f 68 bb 07 5c 79 61 f3 8e 54 4e 60 f9 db 02 c6 18 a2 90 72 42 29 a1 bf ba 46 76 13 9a 43 9b 72 ca 77 66 c0 93 19 27 82 d4 fe 17 23 5a bc f2 35 9f bc 9e 7d 62 75 48 5d 3d 47 31 f4 31 02 92 b4 ec 63 cf 38 0c 0b d8 c5 bf d5 7e db 3c c5 6f 2f f7 8d fd dd 43 9d db c2 38 b7 b8 12 7c 53 a0 51 49 91 ab ad df 40 69 a3 af bc 91 49 d9 ba 2a 94 6d 89 3c c9 51 68 64 79 5b ee bb cf d3 32 06 7a d0 67 3d fe 1f b9 de 88 bc 57 0b 53 59 db 2f 0c 25 1a 2d cc 10 28 57 02 b6 3c 33 04 1b cb c1 17 6a 62 67 c8 26 c8 cc 25 bd 9f d4 a0 b6 e0 77 c2 ba 45 06 9f 2d 7d 41 6e 15 ba f3 7a e5 85 fc e0 b8 0c 50 87 fd 40 c6 a3 a0 4d e2 89 57 dc cc d3 d4 a4 c0 11 e4 fa c0 Data Ascii: GAH@-%:#.Z<mU`gL` ,Oh\yaTN`rB)FvCrwf'#Z5}buH]=G11c8~<o/C8\|SQI@iI*m<Qhdy[2zg=WSY/%-(W<3jbg&%wE-}AnzP@MW
2024-03-03 23:26:46 UTC	2804	IN	Data Raw: c9 c0 73 69 87 29 07 61 26 46 47 dc af a6 c1 0d f4 7c c3 c9 09 69 4d be 57 fd 04 fc ec 38 23 78 3b 43 98 67 3f 4e 46 4b 30 15 3e 2d c1 87 ea 84 89 32 65 d4 7c 83 fb d9 85 49 86 6c a1 c3 2e f4 e1 78 85 5d 4c 0d 6e 84 d0 86 50 48 b4 c0 d3 5a 4f f6 6b 1f 7f 81 d2 f3 91 fa db 85 07 35 e6 11 b6 2a 0e 27 e1 54 1f 8d a0 38 24 a4 29 56 e2 5a 29 24 52 8d 29 09 59 f0 75 4f 0a 6c 74 75 52 fb 8f a7 fe 03 88 a2 a4 a4 d2 af e7 a6 0b c4 1e 7a 52 f8 89 e6 a2 cf 31 51 f5 be 7d 2b 05 26 17 a7 95 9a 78 b2 77 eb ac 94 db 16 47 a3 0b 87 b8 8c 92 eb 0f 16 f8 7d b2 51 e4 b9 39 31 28 6a 6d 4e b9 8f 8b 39 30 5f 0a c8 3c 3e 66 4f 72 8b c6 f8 74 77 60 6d 92 1f 25 19 46 94 d1 a8 e6 97 8d 3f c1 8b c2 a2 3d 8a 87 ba d4 7a dc 2a 4a 37 9f 02 0e f1 6a eb f0 d7 99 8e 1e fe fa bf 54 3d ec Data Ascii: si)a&FG\|iMW8#x;Cg?NFK0>-2e\|Il.x]LnPHZOk5'T8$)VZ)$R)YuOltuRzR1Q}+&xwG}Q91(jmN90_<>fOrtw`m%F?=zJ7jT=
2024-03-03 23:26:46 UTC	6396	IN	Data Raw: 1f f7 5b 7c cf 0e cd 6d ae 72 68 88 1c 7f 9c 30 4d 38 e5 25 88 d3 16 e8 ec dc 8b 55 61 4c 87 21 f6 77 48 e3 b2 77 40 ea 7b 0e ef 47 5f 7d 43 f8 fc ad 51 21 9a c7 90 8c 25 aa 5e 30 12 26 4f 73 ab af 2b b5 d3 eb e1 2e 84 31 e1 ef df 4e cd ba 1a dd 7e 28 2a fa 84 a6 96 11 9d 2c 3d 0c 75 4d d6 a7 49 49 74 24 56 69 50 32 7b d1 7c 03 f9 3f 9d ab 7f 08 b1 9e 4e 3b 1b dd 27 95 1e 7e 4d 31 e3 e1 fd 47 0c e9 88 46 30 85 fa 88 17 46 45 c9 59 a2 fe e3 59 3e 21 63 9c 17 e8 2c 38 04 4c 56 02 e0 71 0f 9f d8 6b 68 4c 6a c1 86 39 e1 99 17 d8 08 7b 63 44 e1 d9 e6 89 8f 6a 45 7f 23 94 27 01 7c 2c 13 64 49 8a fc db 22 32 46 d4 03 15 ac d4 81 33 34 c4 f4 c1 be 15 5d f3 50 bf 91 22 9d 5e 12 8e cd ca bb 0d de 8d 75 c2 36 cc 3a 2a ef 8f 8f 5c 74 69 55 90 3f 0f 66 d0 49 72 1d e7 Data Ascii: [\|mrh0M8%UaL!wHw@{G_}CQ!%^0&Os+.1N~(,=uMIIt$ViP2{\|?N;'~M1GF0FEYY>!c,8LVqkhLj9{cDjE#'\|,dI"2F34]P"^u6:\tiU?fIr
2024-03-03 23:26:46 UTC	6396	IN	Data Raw: 73 0f 5b 2e 47 57 30 29 ab 92 42 f2 79 2a ed 07 3d 02 52 b5 ff 53 ad 2c 5c d7 7e 3c fa 2b bd 98 48 e9 54 be 0d 26 a6 57 74 cc 69 59 6c 27 6d 13 1c 33 48 98 7a 0d d3 4f 43 0a 43 d4 5c d6 db bf 27 02 98 a6 fc d5 a4 e9 65 b9 71 ef 5e 98 aa 6b a9 5b 69 cc 61 b8 48 60 9d 15 69 cf e5 97 7b 8b 30 6f 02 a3 12 40 b8 73 2b c7 03 31 1d b1 1a d5 7a 6e 89 39 77 3e 57 44 cd e6 7c 3f 9f 47 84 f5 27 81 f8 b7 f1 10 ef 0f 17 3a fa 62 3b 93 6d 7e fe 61 50 fd f5 3d 14 7f 84 f2 d1 b2 c2 1c d7 ef 88 95 74 08 74 48 c0 a2 a1 e3 99 01 f4 72 f4 94 2f 26 4b be b9 9a 63 e0 f6 3d 6d ac 23 1f 39 54 3f 92 13 54 df ed 99 57 b9 3b 04 7a 4c e0 0d b6 88 cd d8 51 c0 63 cd 28 07 c4 bc 04 96 31 b4 8b 88 00 62 96 1d 05 cc 01 44 72 62 4b 5b 70 79 ad f2 38 d7 78 a6 77 5d dd 2e 9d 4e 3f e6 9c 8c Data Ascii: s[.GW0)By*=RS,\~<+HT&WtiYl'm3HzOCC\'eq^k[iaH`i{0o@s+1zn9w>WD\|?G':b;m~aP=ttHr/&Kc=m#9T?TW;zLQc(1bDrbK[py8xw].N?
2024-03-03 23:26:46 UTC	2836	IN	Data Raw: 13 39 f6 49 0f 7a 6b 57 39 e8 e6 1b 22 be 99 29 86 34 55 6b 4b 23 57 d0 93 4a 2b 7a 79 18 1c 38 04 67 33 59 20 3e 4e 92 ad dd 15 93 50 7b 3c df 04 9b a2 a8 f4 87 2d 76 e4 84 df 9a 25 78 f2 59 aa 19 05 e2 50 26 d8 12 97 bf 8d e3 a8 7e 32 55 05 50 f7 3f f1 7c ba e3 c7 9f dd a4 89 47 fd fc e1 4e 53 71 11 f2 1c 20 a5 b2 ae ff 35 99 86 f4 1c 37 32 65 05 69 4e d6 ba f6 0f 0a df 24 92 ba ce e3 b8 f7 6d dd 76 d7 8a 17 a6 e9 11 c2 5f 12 05 28 54 38 16 7a a5 08 2a 74 1e 30 99 8a fa 03 a9 ab a9 5b 9d 64 60 d4 f3 de 63 74 09 39 7c f6 ba 14 92 b5 cc 09 01 43 88 d0 56 ab 98 69 cd 35 13 18 94 03 36 ca 3a 2f bd a0 c6 e4 16 7c ef b6 3c c5 5c ce 80 9b 45 3d 16 43 c6 70 06 a2 cd 00 62 be 30 ab 54 18 68 ef ac e0 30 73 0b 2d 49 60 de f9 fc 25 75 71 9e 52 9d 88 5f a9 7f 4d 7b Data Ascii: 9IzkW9")4UkK#WJ+zy8g3Y >NP{<-v%xYP&~2UP?\|GNSq 572eiN$mv_(T8z*t0[d`ct9\|CVi56:/\|<\E=Cpb0Th0s-I`%uqR_M{
2024-03-03 23:26:46 UTC	12792	IN	Data Raw: aa 36 0c 20 3a ef 7e 22 f3 bb 35 4d bf 08 8d 71 c2 ba 3e b1 bf fa 67 08 21 7e 9f 37 96 1b 8d f7 01 e0 ec bd 0a b0 52 4f bd fd e3 e0 75 0b 9b 32 77 0b d9 de 03 44 89 3c de 88 c8 27 77 98 0c b0 a6 9b f2 e5 fb 24 2a 88 03 a5 cf 3a eb 7e 73 3e 77 f7 fc 8d e7 89 06 1e 21 db f0 d4 b9 5a f4 75 0b 8e ee 3f 0c a5 de ab 73 39 05 6d 7b cc 94 40 d9 4e 3e 2d 36 dd 87 bd 97 f1 8d c9 5c d2 d4 74 11 33 2a 9a 9f ea e8 70 18 fa 50 bd 5b 4d 08 b2 73 54 55 b1 71 8f 27 d9 b8 5d 60 08 df 9c ff 7e 7b f7 0b 2a 88 96 57 f4 fa 5b b7 1f cd 82 9e 6e d1 a0 08 31 70 c0 58 0e b6 b5 77 6d 57 17 46 1e b5 c3 9d 55 33 45 da 53 0e bf e8 83 6b 1e 0e 39 de 7d a6 da 77 e1 bf ee 56 ea b0 d3 ed c1 b5 67 82 a1 81 8b 9e c5 26 5f 29 b5 25 fb a0 79 86 3e 3a 22 62 46 59 83 1a 6c b3 05 e6 35 50 94 12 Data Ascii: 6 :~"5Mq>g!~7ROu2wD<'w$:~s>w!Zu?s9m{@N>-6\t3pP[MsTUq']`~{*W[n1pXwmWFU3ESk9}wVg&_)%y>:"bFYl5P
2024-03-03 23:26:46 UTC	9988	IN	Data Raw: 9b be b5 1e 91 fc a3 50 42 d4 1a 07 61 f0 c6 02 2e 7d e5 41 87 31 97 3f b5 f7 4e a2 d5 fb 05 6a 0c 3c ff ca 27 24 53 1c ab 87 32 b1 b4 61 69 a5 c8 23 e6 9d 03 bb 62 3d 49 75 48 a9 71 af 9e 41 ef c7 41 59 79 72 01 c9 3c 54 6f 58 0e b2 a3 c3 5c 27 51 88 49 69 53 f4 a7 0c c9 d3 03 5c 5b d4 7f bd 2f c8 4a e1 cc 47 8b cf 49 b3 48 e3 a2 87 91 ed 24 d5 68 e9 7d 00 d1 f7 0e 45 72 3a ad 1e 5f b4 61 c4 86 e9 a3 1e e0 36 23 f2 1c 3e 2b 3b 87 d7 b9 02 ea 01 56 0d e3 76 e1 bb fd 18 7b a1 65 fe 3f e2 8d 6c 7e aa af 87 70 a7 91 5e 8d 0c 65 49 ed ab b8 ec 92 59 e1 e3 3c 9f 33 35 ec f6 88 4c 00 e6 b8 16 6f a6 eb 17 3f fc e8 57 95 c3 80 0b 8d f2 97 1a 31 da 9f 28 c4 81 f8 24 23 15 ce 0d a1 8c 58 67 86 89 c1 52 ac 14 6b 28 54 b2 f2 16 46 91 b3 da 63 16 d0 79 bc af d4 70 f6 Data Ascii: PBa.}A1?Nj<'$S2ai#b=IuHqAAYyr<ToX\'QIiS\[/JGIH$h}Er:_a6#>+;Vv{e?l~p^eIY<35Lo?W1($#XgRk(TFcyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50122	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	876	OUT	GET /cksync.html?cs=8&vsid=3525100008919577000V10&type=rkt&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=1813050730410820489 HTTP/1.1 Host: contextual.media.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10
2024-03-03 23:26:46 UTC	643	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 227 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-rk=1813050730410820489~~8;Expires=Sun, 02 Mar 2025 23:26:46 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:46 GMT Connection: close
2024-03-03 23:26:46 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-03 23:26:46 UTC	77	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50117	142.251.40.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:45 UTC	1359	OUT	GET /pcs/view?xai=AKAOjsusXKVP2l_Sn2kNI6S1iCHQ-xacDw5n967RbE46SE-fncaCR0gR7pXZI0qd4emYvGHIY0y7k5y8BQM25gYfwToZwzNDWBnc23A2Z2yCaJLMj8Cg0y0-sqgeVzEHQ15ikN7651_99qnMgI_kLCWsRihwS7l-tacPPHZmBr0bcCX1i7w9qgOWR9ohqO0CNEm4I9o-32he_lNbsVdga_86fiKXj4ESk7McTM9bnv1gGRObSMoCG3HMaehs22a8xJOxRDOiKw0q4gnUb3n0b6NTtLU38MOR3scI_rJqOSlg_90ql-MMdDUA5budrroOF5-3-B_6Xgg2lElT7m_VHDxDhZkNYuNoz11T5wV2K3t4hO1TtPmBaW7zENpfhyWzCspQBQKty9TAX4Y4N_gF6dF_spbgsHl-3Z4&sai=AMfl-YTBQPBA10TAK-8oDnXhWJUONtBs3FkK-UDXnWG6Y57cBezJtgMNJ7pcDInUeS8sKTgDDedEQ9XJM8YKf1-CI8euABsVdNGtC3z6CqQ8lleX1WjCk_uXxIrYsuDkTjhKYaiJUx-WraJ14u7sftFU0Hg&sig=Cg0ArKJSzGHVxVi5TrMqEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-03 23:26:46 UTC	1153	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Sun, 03 Mar 2024 23:26:46 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8; expires=Tue, 03-Mar-2026 23:26:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Sun, 03 Mar 2024 23:26:46 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50119	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	806	OUT	GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F9bd8fadceb9b5eb9917c1c48de181771&client=76f99bdb8f78cd44cc0b&signature=59ab14b5e625248cf28afb5053ca5d32e497ded0 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1150	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 21227 Cache-Control: public, max-age=2592000 Cache-Tag: 440703356820040898492982900862065025245,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000145-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 59000d33d202568a757b2e03b96787f0 cld_latency: 568 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 440703356820040898492982900862065025245,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e Etag: "b61112ac42f1fdbc326e5dd508e05d0c" Last-Modified: Fri, 01 Mar 2024 22:04:15 GMT Server: ECAcc (nya/7956) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=500,height=500,bytes=45182,owidth=1677,oheight=1153,obytes=219503,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 59000d33d202568a757b2e03b96787f0 X-Served-By: cache-iad-kiad7000145-IAD X-Timer: S1709487182.616913,VS0,VE568 Content-Length: 45182 Connection: close
2024-03-03 23:26:46 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 00 01 08 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 c8 dc 6d fc fd 26 3c 5f 27 b2 1e af 58 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"5m&<_'X
2024-03-03 23:26:46 UTC	16383	IN	Data Raw: 8d 13 88 78 20 3c 28 39 67 d8 ec 12 b7 d3 db 46 33 24 65 8f 2a d5 ac 83 32 1b 4e a6 d9 83 83 0c fe bf 7b 55 f8 8d ae 7a 5d 51 6f 94 4f d7 84 e6 ae c0 06 7a ac e8 df 87 4d 1d b9 e6 bb d7 b7 6d 01 20 86 cd c9 ee 59 92 c4 cd f0 82 b7 ab bb be fc 25 86 29 32 a6 2c 92 81 f6 2f 4c 9e dd bb 0c a9 c0 83 b7 35 7f cd 9b 00 c9 47 da 31 86 73 c4 90 9c 78 a3 9b d2 ef 5e ae aa f2 c4 24 32 7c 35 d5 7e 1f d2 74 41 5a d3 42 93 95 7c 6f 72 46 23 ba fb 37 ab 2f ee c6 46 fe dc 8f dd 63 b2 e8 bd a3 1a 60 ff 00 a9 4a 57 3e f1 01 10 00 0c 5b 92 80 07 33 ad 7b 2c 1a 6a ef 43 5c df fa a9 da aa 15 54 cd 1a b0 04 b3 0c 88 f6 c2 ed 9b 49 fd 0d 7d 99 31 7d 86 44 fc 76 9c d4 d8 f3 d9 c8 39 bf a6 eb 47 67 5d 45 9d 7d 78 0c 0f 6d 16 9e b8 b4 d1 c1 52 38 bb 23 88 85 ab f6 fa de 37 c3 fd Data Ascii: x <(9gF3$e*2N{Uz]QoOzMm Y%)2,/L5G1sx^$2\|5~tAZB\|orF#7/Fc`JW>[3{,jC\TI}1}Dv9Gg]E}xmR8#7
2024-03-03 23:26:46 UTC	12416	IN	Data Raw: 10 07 13 58 92 f5 ab a5 5a 22 46 43 7f cb 1e fb a7 f6 d9 8f 10 28 f4 aa 83 dc 51 6c 44 07 e4 68 1c 2e 08 cf 40 1a b5 b6 ff 00 53 bb 4b 8c 3e 86 89 a2 29 16 67 76 58 0d 2c 22 05 58 ed 00 b9 4f 7d 02 a4 64 68 95 64 c3 03 33 04 cd 39 3d 82 1c 09 43 12 34 e1 58 58 51 c4 ae a5 63 9c e5 40 57 0d dc 47 d2 8e ed 2e 38 dd aa 8d da da 6a 38 c0 05 63 59 04 11 40 5c 0b 9b 0c b3 ac 48 cf 84 ab 89 d3 43 4a ae 76 b3 86 32 92 2a 1d 0c 30 3a 82 37 00 6e ab 28 fc 63 31 41 b1 34 83 11 20 8d c5 04 68 b9 51 62 13 05 c5 5d 61 74 34 ef 73 ee 01 98 f1 ab 36 bb 89 c4 7d a8 5d 18 c2 b2 e0 c3 af 99 a5 22 e5 b9 05 74 91 a8 ac d9 82 8f 12 62 8d ce 94 34 ca c4 15 ac 53 7a e3 66 24 0c f3 26 90 58 33 8b 67 2a 41 46 06 4f 46 45 3e d1 61 c8 7b 57 38 a8 1a a7 95 11 75 d5 8b 8c e7 13 0c cc Data Ascii: XZ"FC(QlDh.@SK>)gvX,"XO}dhd39=C4XXQc@WG.8j8cY@\HCJv20:7n(c1A4 hQb]at4s6}]"tb4Szf$&X3gAFOFE>a{W8u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50121	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fdd3f1af0-6985-11ec-bffd-65bff269a401&client=76f99bdb8f78cd44cc0b&signature=0b14194fa91554247f3b182be18f5c009196e427 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1140	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 721885 Cache-Control: public, max-age=2592000 Cache-Tag: 468864823684501135681590585182668908237,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000022-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 49 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 468864823684501135681590585182668908237,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "7d2be088ad917300c315484257e2b54a" Expiration: expiry-date="Mon, 22 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 23 Jan 2024 22:16:16 GMT Server: ECAcc (nya/7940) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=303,owidth=400,oheight=400,obytes=34443,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100176-IAD X-Timer: S1706194521.337345,VS0,VE139 Content-Length: 303 Connection: close
2024-03-03 23:26:46 UTC	303	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 4b 50 4c 54 45 47 70 4c ee 29 31 ec 1c 24 ed 22 2a ee 29 31 ee 29 31 ed 24 2c ee 29 31 ee 29 31 ee 29 31 ef 3c 42 f2 5e 63 ff ff ff f7 9d a1 fe ef ef f9 b2 b5 f6 92 96 fa c6 c8 fd e2 e3 f0 4e 54 fc d6 d7 ee 30 38 f8 a7 aa f9 bc be f3 77 7c 01 39 f8 f8 00 00 00 0a 74 52 4e 53 00 ff ff ff d9 31 c1 99 f9 09 a7 73 6c 68 00 00 00 89 49 44 41 54 18 d3 65 8f cb 16 c3 20 08 44 05 34 18 ad 8f 18 4d fa ff 5f 5a 68 6b 16 c9 ec b8 87 81 19 63 44 8e ad f7 96 9d f9 69 65 f8 8b d7 ef bc d0 a5 45 09 d3 5e 8e 82 69 2b 84 c4 e2 07 ea fb c8 18 5e 11 91 c0 19 06 6a 6f 4c 13 b0 b1 40 47 0e 38 81 35 1e 68 b4 bc 4f e0 15 60 68 79 5c 40 2c 15 43 4e 0a a2 5a e4 68 07 ac 9b Data Ascii: PNGIHDR(-SKPLTEGpL)1$"*)1)1$,)1)1)1<B^cNT08w\|9tRNS1slhIDATe D4M_ZhkcDieE^i+^joL@G85hO`hy\@,CNZh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50130	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	723	OUT	GET /sync?ssp=google&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	768	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:46 GMT Location: https://rtb-use.mfadsrvr.com/ul_cb/sync?ssp=google&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me Set-Cookie: tuuid=43ce1147-64ef-42d3-81d6-21cfcb9531d7; path=/; expires=Tue, 03-Mar-2026 23:26:46 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1709508406; path=/; expires=Tue, 03-Mar-2026 23:26:46 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1709508406; path=/; expires=Tue, 03-Mar-2026 23:26:46 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50135	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=d8586900015e214006818744f76d7ffdbd495d00 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1126	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2279254 Cache-Control: public, max-age=2592000 Cache-Tag: 417884516681699342842259125334062851322,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21958-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 18 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 417884516681699342842259125334062851322,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "491574b00cd8fb418215debdb2dca2c9" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 23:06:34 GMT Server: ECAcc (nya/1C20) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=535,owidth=400,oheight=401,obytes=176359,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21958-LGA X-Timer: S1707229152.071018,VS0,VE18 Content-Length: 535 Connection: close
2024-03-03 23:26:46 UTC	535	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 d5 50 4c 54 45 47 70 4c 46 60 a3 3a 56 9c d4 75 7d 37 54 9c c3 35 42 be cc e1 e9 b9 bb c7 47 53 80 92 c0 c4 38 45 c7 43 4f dd ba c2 4b 64 a5 c6 58 65 4c 65 a6 c7 4a 56 ff ff ff c8 4e 5a 81 92 be 41 5b 9e fa fa fb a5 b2 d1 5c 73 ad 5e 74 ac dd e1 ec 77 8a ba 7d 90 bc f7 f8 fa c5 53 61 d1 d7 e7 b0 bb d6 c1 2d 3a 8b 9b c5 23 42 92 a6 b2 d1 f5 f7 fa be 22 30 59 70 ac a1 ae cf 95 a4 ca 29 47 94 9b a9 cc 31 4e 98 c9 d1 e2 71 85 b7 dd e2 ed bf 27 35 da 8c 94 4f 68 a7 6b 80 b5 dd 94 9b 61 77 b0 79 8b bc 37 54 9b 48 62 a3 f0 f3 f7 fc fe fe 23 42 91 e3 a9 ae cc 6c 78 d7 82 89 7f 90 be 84 95 c1 bc c5 db 40 5b a0 ea ed f4 ba c4 db e6 b9 be ce 67 72 c4 53 61 0a Data Ascii: PNGIHDR(-SPLTEGpLF`:Vu}7T5BGS8ECOKdXeLeJVNZA[\s^tw}Sa-:#B"0Yp)G1Nq'5Ohkawy7THb#Blx@[grSa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50080	69.194.240.13	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	1155	OUT	GET /usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1709508405916 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-03-03 23:26:46 UTC	834	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:45 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Mon, 03 Mar 2025 23:26:45 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=1940548007 etag: RX3c4bc8e3ffb2488a8a78eb15aa2f9706005 connection: close
2024-03-03 23:26:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50082	54.211.182.170	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	838	OUT	GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Ddxu%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=IKSGvoFb1RGVed5
2024-03-03 23:26:46 UTC	784	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Sun, 03 Mar 2024 23:26:45 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=8&vsid=3525100008919577000V10&type=dxu&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=IKSGvoFb1RGVed5 Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-02697226c7ee1ec17@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=IKSGvoFb1RGVed5; Domain=.w55c.net; Expires=Thu, 03 Apr 2025 23:26:46 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchmedianet=5; Domain=.w55c.net; Expires=Tue, 02 Apr 2024 23:26:46 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50140	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	1772	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2668&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=771334461&pvid=-3&req_size=728x90%7C970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center&pbAcid=291303319049048931709508396925&pbBidId=19881000005188811709508396926&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:46 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:46 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50145	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FI6DaBWv57W5cAMSJrdUW0w--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181217%2F500x500%2F76ers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=cae8d7c451f50d2dd6da30979cae9ae2c7f3e628 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1109	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133426 Cache-Control: public, max-age=2592000 Cache-Tag: 177830925880058681984052191033545713667,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21949-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 185 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 177830925880058681984052191033545713667,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "7332fbbf0729991568b70f28354aa9e6" Expiration: expiry-date="Wed, 29 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 30 Nov 2023 04:03:29 GMT Server: ECAcc (nya/7954) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2424,owidth=50,oheight=50,obytes=3390 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21926-LGA X-Timer: S1702190899.116522,VS0,VE1 Content-Length: 2424 Connection: close
2024-03-03 23:26:46 UTC	2424	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec f4 fa ff ff ff f2 f8 fc e9 f2 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff ff ff ff ff ff ff ff ff e3 ef f7 f6 fa fc ff ff ff ef f6 fb ff ff ff f4 f9 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f3 f8 fb ff ff ff ff ff ff ff ff ff fa fc fe f0 f6 fb ff ff ff ff ff ff ed f4 fa ff ff ff ff ff ff f9 fc fd ff ff ff ff ff ff ff ff ff 00 6b b6 ed Data Ascii: PNGIHDR22)xPLTEGpLk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50142	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FgEMEg05RG7EAyPYgeoCKEg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190318%2F500x500%2Fsuns_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1ac189c890b767dc5ba2fede62df019e6086e563 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2000930 Cache-Control: public, max-age=2592000 Cache-Tag: 345668930557361132189762443078746511971,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000111-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 345668930557361132189762443078746511971,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "347467d488ff05ad50b871325961e71d" Expiration: expiry-date="Wed, 15 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 16 Nov 2023 03:39:03 GMT Server: ECAcc (nya/797C) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2058,owidth=50,oheight=50,obytes=2830 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100099-IAD X-Timer: S1704905263.508611,VS0,VE89 Content-Length: 2058 Connection: close
2024-03-03 23:26:46 UTC	2058	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff fe e9 ca ff fe fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb c6 76 ff ff ff ff ff ff fe f4 e4 fc c7 7a ff f8 ee ff fd fa ff ff ff fe ef d9 ff f6 e9 fd d9 a3 fc d5 99 ff fd fb fa b7 51 ff f8 ee fe e9 c8 fd de b1 fd d8 a1 fc ca 80 fb c4 70 fb be 62 fb bb 5c fc cc 83 fc cc 85 fc c8 79 fd dd ad ff ff fe fc d3 94 ff ff ff fd e5 c2 fc ce 8a ff ff ff fe ed d4 ff ff ff ff ff ff fc d0 8e fd d7 9e ff ff ff ff fe fc fd d7 9f fc cd 87 ff f9 ef fe f4 e4 fd e5 c0 fd dd ac fe f1 dd fb bf 65 fc d5 99 fe ec d1 fd de af ff fb f4 fb c4 71 ff f8 ee fd e2 b9 fc d2 94 fb c3 6d ff ff fe fd e3 ba ff f5 e7 fe e9 c9 fb Data Ascii: PNGIHDR22)xPLTEGpLvzQpb\yeqm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50144	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	704	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1126	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 414689 Cache-Control: public, max-age=2592000 Cache-Tag: 229410569217829523079279784424792893620,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21940-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 59 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 229410569217829523079279784424792893620,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e416ced55ebb3d5700b8ba1db47af2c9" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 04:03:40 GMT Server: ECAcc (nya/78B9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2532,owidth=50,oheight=50,obytes=4125,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21940-LGA X-Timer: S1709093717.191318,VS0,VE59 Content-Length: 2532 Connection: close
2024-03-03 23:26:46 UTC	2532	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff 7d 87 8c ff ff ff ff ff ff ff ff ff e1 e3 e4 ff ff ff ff ff ff fb fb fb ff ff ff 90 99 9d 98 9f a3 6c 77 7d 64 70 76 ff ff ff c9 ce d0 d9 dc dd fb fc fc 94 9d a0 8b 94 98 ff ff ff c4 c8 cb ff ff ff 85 8e 93 ff ff ff f1 f2 f3 9d a4 a8 ff ff ff b6 bb be f7 f8 f8 b6 bc be ff ff ff a2 aa ad b7 bd bf d7 da db eb ec ed d0 d3 d5 ff ff ff fc fc fd ff ff ff fd fd fd eb ec ed e4 e6 e7 fa fa fa 61 6d 73 a9 b0 b3 91 9a 9e a6 ad b0 9b a2 a6 c9 cd cf c3 c7 c9 a1 a8 ac aa b1 b4 c3 c7 c9 bd c2 c5 b3 b8 bb ff ff ff ff ff ff fd fe fe fd fe fe ff ff ff b1 b7 ba d4 d7 d9 c7 cb cd e4 e6 e7 fe ff ff ba bf c1 ed ee ef 7f 89 8e fb fc fc 06 Data Ascii: PNGIHDR22)xPLTEGpL}lw}dpvams

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50129	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	725	OUT	GET /sync?ssp=intentiq&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	770	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:46 GMT Location: https://rtb-use.mfadsrvr.com/ul_cb/sync?ssp=intentiq&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me Set-Cookie: tuuid=5e803909-7b6d-45a4-8be8-533d655de3d1; path=/; expires=Tue, 03-Mar-2026 23:26:46 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1709508406; path=/; expires=Tue, 03-Mar-2026 23:26:46 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1709508406; path=/; expires=Tue, 03-Mar-2026 23:26:46 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50136	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	1690	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2673&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25014&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:46 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:46 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50134	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	816	OUT	GET /ul_cb/sync?ssp=google&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=43ce1147-64ef-42d3-81d6-21cfcb9531d7; c=1709508406; tuuid_lu=1709508406
2024-03-03 23:26:46 UTC	796	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:46 GMT Location: //cm.g.doubleclick.net/pixel?google_nid=media_force_communications_2007_ltd&google_hm=Q84RR2TvQtOB1iHPy5Ux1w==&no_redirect=1&google_cm=1&google_sc=1 Set-Cookie: tuuid=43ce1147-64ef-42d3-81d6-21cfcb9531d7; path=/; expires=Tue, 03-Mar-2026 23:26:46 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1709508406; path=/; expires=Tue, 03-Mar-2026 23:26:46 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!google,1709508406; path=/; expires=Tue, 03-Mar-2026 23:26:46 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50120	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	765	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F2022136b017401181a8dbbdb1388592a&client=76f99bdb8f78cd44cc0b&signature=6c01f52bdd151aa1eefa1c3038c29a48e748304f HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1477	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1762 Cache-Control: public, max-age=2592000 Cache-Tag: 509916679421782607181804174656665477005,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21969-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 6b2c1fadf1079650d952a28fca4dd3e2 cld_latency: 843 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 509916679421782607181804174656665477005,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "b25fcc90389fad9346b135b311cd46c7" Last-Modified: Sun, 03 Mar 2024 22:57:27 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/78E7) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=8737,owidth=1200,oheight=800,obytes=134199,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 6b2c1fadf1079650d952a28fca4dd3e2 X-Served-By: cache-lga21969-LGA X-Timer: S1709506646.292534,VS0,VE843 Content-Length: 8737 Connection: close
2024-03-03 23:26:46 UTC	8737	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 c8 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 00 03 04 05 07 02 01 08 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 bf b0 85 3a dd 5e fc 60 8e 47 17 1d 1d 7b Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"4:^`G{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50147	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	1690	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2674&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25082&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:46 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:46 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50089	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	1496	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2611&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25113&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:46 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:46 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50146	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FhVlB1Dqn1zQNINKtkSF6Sg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20191016%2F500x500%2Fwarriors_wbg.png&client=76f99bdb8f78cd44cc0b&signature=45837ce2b02ee90dac3330f0112247c56c9df4f9 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133428 Cache-Control: public, max-age=2592000 Cache-Tag: 416988394395869725397014919907494337164,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000095-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 416988394395869725397014919907494337164,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "b0ac2b682af25611fedc4d0983aac530" Expiration: expiry-date="Sat, 25 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 26 Nov 2023 06:28:36 GMT Server: ECAcc (nya/7898) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1910,owidth=50,oheight=50,obytes=2447 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000176-IAD X-Timer: S1702190899.128248,VS0,VE1 Content-Length: 1910 Connection: close
2024-03-03 23:26:46 UTC	1910	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 7f 50 4c 54 45 47 70 4c 1d 42 8a 1d 42 8a 1c 41 89 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a 1d 42 8a fd b9 27 2b 4a 84 1e 43 89 70 6e 65 eb b0 2f fb b8 28 33 4e 80 7e 76 5f 2b 49 84 e9 ae 30 f7 b6 2a f2 b3 2c 51 5e 73 5b 63 6e 8e 7e 58 cc 9f 3d 39 51 7e b6 94 46 3d 53 7c 49 59 77 26 47 86 74 70 63 94 81 55 25 46 87 d1 a2 3a dc a8 35 e9 af 30 23 45 87 b8 94 46 21 44 88 c5 9b 40 fa b7 28 ea af 2f 77 72 62 24 46 87 f8 b6 29 4c 5b 75 db a7 36 d0 a1 3b 2a 49 84 b8 94 45 ba 95 45 a5 8a 4e e3 ab 32 8f 7f 58 98 Data Ascii: PNGIHDR22)xPLTEGpLBBABBBBBBBBBBBBBBBBBBBBBB'+JCpne/(3N~v_+I0,Q^s[cn~X=9Q~F=S\|IYw&GtpcU%F:50#EF!D@(/wrb$F)L[u6;IEEN2X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50143	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FmYPNdnSol61pq90EZA9nxA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fclippers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=c32b7cbdae600a46f74e47f8b8b2ce729197d76c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1116	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2401886 Cache-Control: public, max-age=2592000 Cache-Tag: 375686507491724130108612114957520828278,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000032-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 116 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 375686507491724130108612114957520828278,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "10460caa4146b9d9a12aa9d195570901" Expiration: expiry-date="Fri, 24 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 25 Nov 2023 05:13:50 GMT Server: ECAcc (nya/79B0) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2112,owidth=50,oheight=50,obytes=2621 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21936-LGA X-Timer: S1701317705.217733,VS0,VE0 Content-Length: 2112 Connection: close
2024-03-03 23:26:46 UTC	2112	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50137	35.211.178.172	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	627	OUT	GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	779	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 03 Mar 2024 23:26:46 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 Set-Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; path=/; expires=Mon, 03-Mar-2025 23:26:46 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1709508406; path=/; expires=Mon, 03-Mar-2025 23:26:46 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1709508406; path=/; expires=Mon, 03-Mar-2025 23:26:46 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1709508406; path=/; expires=Mon, 03-Mar-2025 23:26:46 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50139	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	1723	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2675&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25307&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:46 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:46 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50081	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	834	OUT	GET /pixel?google_nid=media_force_communications_2007_ltd&google_hm=Q84RR2TvQtOB1iHPy5Ux1w==&no_redirect=1&google_cm=1&google_sc=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:46 UTC	677	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://rtb.mfadsrvr.com/sync?ssp=google&no_redirect=1&google_gid=CAESEHCGma9YkBLeeRR1TOzfYEc&google_cver=1 Date: Sun, 03 Mar 2024 23:26:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 316 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:46 UTC	316	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 6d 66 61 64 73 72 76 72 2e 63 6f 6d 2f 73 79 6e 63 3f 73 73 70 3d 67 6f 6f 67 6c 65 26 61 6d 70 3b 6e 6f 5f 72 65 64 69 72 65 63 74 3d 31 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 48 43 47 6d 61 39 59 6b Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://rtb.mfadsrvr.com/sync?ssp=google&no_redirect=1&google_gid=CAESEHCGma9Yk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50148	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	765	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F0e7c99eede3c65dbdfa94e708cbe3f3a&client=76f99bdb8f78cd44cc0b&signature=6501e3a1ec216a84f598237330a2a286f6998c01 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 10900 Cache-Control: public, max-age=2592000 Cache-Tag: 452408294624539213144069566397095572462,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21979-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 25489f170baeeb9f1ff19de9805dd47f cld_latency: 1169 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 452408294624539213144069566397095572462,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "5b97cada95c2d86de0e78d3767e91753" Last-Modified: Sun, 03 Mar 2024 20:25:08 GMT Server: ECAcc (nya/7941) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=11598,owidth=1200,oheight=675,obytes=165409,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 25489f170baeeb9f1ff19de9805dd47f X-Served-By: cache-lga21979-LGA X-Timer: S1709497506.270278,VS0,VE1169 Content-Length: 11598 Connection: close
2024-03-03 23:26:46 UTC	11598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 c8 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 00 03 04 05 07 02 08 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f8 a9 38 28 6f 86 24 03 cb b4 4b 9f 8b 47 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"48(o$KG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50154	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	821	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=son&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=2e1e420d-8454-4533-a1ab-2d47cb95dd71 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8
2024-03-03 23:26:46 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8;Expires=Sun, 31 Mar 2024 23:26:46 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:46 GMT Connection: close
2024-03-03 23:26:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:46 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50150	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	765	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F36824bd1fd4d41014ce41b12a880833a&client=76f99bdb8f78cd44cc0b&signature=d2d0d0c6211286d34012cd7d6f5266200dd03b5d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1148	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 21038 Cache-Control: public, max-age=2592000 Cache-Tag: 405449641805607417369415337342548600064,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000162-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: e7fbea9364f40122a8e11275ce56764f cld_latency: 1062 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 405449641805607417369415337342548600064,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "fa1778fbc0a931dc76d48f4c45cd77c3" Last-Modified: Sun, 03 Mar 2024 17:36:11 GMT Server: ECAcc (nya/7929) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=10088,owidth=1200,oheight=675,obytes=285352,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: e7fbea9364f40122a8e11275ce56764f X-Served-By: cache-iad-kiad7000162-IAD X-Timer: S1709487369.158647,VS0,VE1062 Content-Length: 10088 Connection: close
2024-03-03 23:26:46 UTC	10088	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 c8 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 06 07 04 05 00 03 08 01 02 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 05 00 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 37 c1 12 f7 0f cf cf 9e 0e ed 81 33 e3 de Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"473

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50155	35.244.159.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	911	OUT	GET /w/1.0/cm?cc=1&id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dopx%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404
2024-03-03 23:26:46 UTC	653	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404; Version=1; Expires=Mon, 03-Mar-2025 23:26:46 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://contextual.media.net/cksync.html?cs=8&vsid=3525100008919577000V10&type=opx&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=a470c6a3-f372-0895-098c-2413748bee6d Date: Sun, 03 Mar 2024 23:26:46 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50157	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	782	OUT	GET /cksync.php?cs=1&type=crt&ovsid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8
2024-03-03 23:26:46 UTC	850	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1;Expires=Tue, 02 Apr 2024 23:26:46 GMT;path=/;domain=.media.net; sameSite=none; secure=true Set-Cookie: data-c-ts=1709508406;Expires=Tue, 02 Apr 2024 23:26:46 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:46 GMT Connection: close
2024-03-03 23:26:46 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:46 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50141	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	696	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2134801 Cache-Control: public, max-age=2592000 Cache-Tag: 496266717906369093199617723782445329917,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000147-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 122 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 496266717906369093199617723782445329917,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "6d934474b3e355893e0271151804839b" Expiration: expiry-date="Fri, 24 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 25 Nov 2023 05:13:51 GMT Server: ECAcc (nya/797E) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2581,owidth=50,oheight=50,obytes=4621 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000070-IAD X-Timer: S1702189561.105061,VS0,VE81 Content-Length: 2581 Connection: close
2024-03-03 23:26:46 UTC	2581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 f4 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff f5 f6 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fc ec ee ee ff ff ff ed ee ef ff ff ff ff ff ff f8 f9 f9 ff ff ff f2 f3 f3 ff ff ff ff ff ff fe ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 82 48 05 18 21 06 19 21 a7 37 32 e7 e8 e9 c4 c7 c8 a7 ad b0 00 7f 47 b9 bd be cf d2 d3 02 69 3f 9e a4 a7 97 9f a1 ad b2 b4 00 7b 45 01 72 42 e1 e4 e5 cb cf d0 07 4c 36 23 4f 46 d3 d5 d6 02 59 39 d9 ec e3 86 Data Ascii: PNGIHDR22)xPLTEGpLH!!72Gi?{ErBL6#OFY9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50153	152.199.24.48	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	1229	OUT	GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.aol.com%2F&tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&axids=gam%3Dy-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A%26dv360%3DeS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B%26ydsp%3Dy-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A%26tbla%3Dy-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b"
2024-03-03 23:26:47 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 463785 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: text/html Date: Sun, 03 Mar 2024 23:26:46 GMT Etag: "19720d3a285aba8024b11fc9955795fe" Last-Modified: Tue, 27 Feb 2024 14:35:21 GMT Server: ECAcc (nyd/D183) Vary: Accept-Encoding x-amz-id-2: YkhTppAnAyfmCFN5+LpqX34upJYdTjCopFDJydPsvjd6xg4Q+vYZUISTeM9LtAZxIrGrpsipfkI= x-amz-request-id: MPKGJ7BBYTJDF12W X-Cache: HIT Content-Length: 5503 Connection: close
2024-03-03 23:26:47 UTC	5503	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 3e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50152	151.101.1.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	669	OUT	GET / HTTP/1.1 Host: tsdtocl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	593	IN	HTTP/1.1 200 OK Connection: close Content-Length: 786 x-amz-id-2: TW+4TrI51hgU8NdxFhJC6FhlT0luj5pKHNWiYT8/KWXPMdki55acZA+jITYnqGqa2s8slf0Pxhw= x-amz-request-id: 2V2CKFWSX71G2QES x-amz-replication-status: COMPLETED Last-Modified: Wed, 05 Jan 2022 19:36:57 GMT ETag: "fb5a4594b9ffef704d61bb6e6f80f145" x-amz-version-id: Qk4nobcRRphLiqVWi0NeSs0dand8kap0 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:46 GMT Via: 1.1 varnish Age: 54 X-Served-By: cache-lga21942-LGA X-Cache: HIT X-Cache-Hits: 20 X-Timer: S1709508407.869866,VS0,VE0
2024-03-03 23:26:46 UTC	786	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 74 73 64 74 6f 63 6c 22 2c 74 3d 22 21 2d 23 40 22 2c 61 3d 32 3b 74 72 79 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 20 74 28 61 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 61 6d 65 73 70 61 63 65 3d 65 2c 6e 2e 69 64 3d 61 2c 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 22 2a 22 29 2c 6e 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 72 2c 73 2c 63 29 7b 74 72 79 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 29 74 68 72 6f 77 20 30 3b 76 61 72 20 69 3d Data Ascii: <!doctype html><html><head><script>!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50162	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	765	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F6ef5be46479c981bdac4bb73b42d643c&client=76f99bdb8f78cd44cc0b&signature=bfc7d32d8d9dbfc92ecf53c0948be318dad2632c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:46 UTC	1477	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 23619 Cache-Control: public, max-age=2592000 Cache-Tag: 402892854596831474061896702417254302692,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21981-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 280519789d19b6a9d3c6d765d65af95a cld_latency: 569 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:46 GMT Edge-Cache-Tag: 402892854596831474061896702417254302692,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "d9ede0be89101a8321565977239e2f6e" Last-Modified: Sun, 03 Mar 2024 16:53:08 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7997) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=9556,owidth=1280,oheight=720,obytes=133500,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 280519789d19b6a9d3c6d765d65af95a X-Served-By: cache-lga21981-LGA X-Timer: S1709484787.178578,VS0,VE569 Content-Length: 9556 Connection: close
2024-03-03 23:26:46 UTC	9556	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 c8 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 00 02 03 01 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 33 20 6d 2f 79 be bc ab ac a8 b7 5d 45 f1 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"43 m/y]E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50160	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	923	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&event=player_init&time=1709508405310&autoplay=false&seq=0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:26:46 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50161	50.31.142.95	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	705	OUT	GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	656	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 165 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=mo68x8gjbJJi9doJz8TR; Path=/; Domain=zemanta.com; Expires=Mon, 03 Mar 2025 23:26:46 GMT; Max-Age=31536000; Secure; SameSite=None Date: Sun, 03 Mar 2024 23:26:46 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-03 23:26:47 UTC	165	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 6d 65 64 69 61 6e 65 74 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 70 68 70 25 33 46 63 73 25 33 44 31 25 32 36 74 79 70 65 25 33 44 7a 65 6d 25 32 36 6f 76 73 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 70 75 69 64 3d 25 32 34 25 37 42 56 53 49 44 25 37 44 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50159	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	2603	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&usage=thumbnails!2.0.0&usage=qualityLevels!3.0.0&usage=qualityMenu!3.0.0&usage=inpage-embed&event=player_load&time=1709508405380&qos.events.content.volumechange=1709508405370&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=11490577&qos.performance.memory.totalJSHeapSize=17653853&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1709508396507&qos.performance.timing.loadEventStart=1709508396506&qos.performance.timing.domComplete=1709508396506&qos.performance.timing.domContentLoadedEventEnd=1709508396444&qos.performance.timing.domContentLoadedEventStart=1709508396444&qos.performance.timing.domInteractive=1709508396444&qos.performance.timing.domLoading=1709508395519&qos.performance.timing.responseEnd=1709508395508&qos.performance.timing.responseStart=1709508395387&qos.performance.timing.requestStart=1709508395215&qos.performance.timing.secureConnectionStart=1709508394978&qos.performance.timing.connectEnd=1709508395214&qos.performance.timing.connectStart=1709508394957&qos.performance.timing.domainLookupEnd=1709508394957&qos.performance.timing.domainLookupStart=1709508394832&qos.performance.timing.fetchStart=1709508394721&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1709508394719&qos.player.dimensions=%5B%5B1709508405380%2C%220x0%22%2C%22368x276%22%5D%5D&qos.player.pixelratio=%5B%5B1709508405380%2C1%5D%5D&qos.player.screendimensions=%5B%5B1709508405380%2C%221280x1024%22%5D%5D&seq=1 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:26:47 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50167	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:46 UTC	818	OUT	GET /ul_cb/sync?ssp=intentiq&seller_network=google_&bid_id=ae61690b-97f2-40ef-a043-7a41dbbce6fa&initiator=me HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1709508406; tuuid_lu=1709508406; tuuid=5e803909-7b6d-45a4-8be8-533d655de3d1
2024-03-03 23:26:47 UTC	782	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:47 GMT Location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=5e803909-7b6d-45a4-8be8-533d655de3d1 Set-Cookie: tuuid=5e803909-7b6d-45a4-8be8-533d655de3d1; path=/; expires=Tue, 03-Mar-2026 23:26:47 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1709508407; path=/; expires=Tue, 03-Mar-2026 23:26:47 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!intentiq,1709508407; path=/; expires=Tue, 03-Mar-2026 23:26:47 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50180	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	790	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b"; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:47 UTC	464	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:47 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-03-03 23:26:47 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 71 6e 61 34 5f 5a 46 45 32 75 4a 55 77 71 79 32 44 5a 56 38 47 42 61 55 6e 78 67 30 37 72 65 65 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A"}
2024-03-03 23:26:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50151	34.111.85.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	416	OUT	GET /rtb/yhb?cid=8YHB8F956 HTTP/1.1 Host: m.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1
2024-03-03 23:26:47 UTC	303	IN	HTTP/1.1 204 No Content content-type: text/html;charset=utf-8 content-language: en date: Sun, 03 Mar 2024 23:26:46 GMT x-envoy-upstream-service-time: 0 server: istio-envoy via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50158	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	632	OUT	GET /sync?ssp=medianet&ssp_user_id=3525100008919577000V10 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	721	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:47 GMT Location: https://rtb.mfadsrvr.com/ul_cb/sync?ssp=medianet&ssp_user_id=3525100008919577000V10 Set-Cookie: tuuid=3b652fc1-53a0-40de-ba73-a4ae557bd47f; path=/; expires=Tue, 03-Mar-2026 23:26:47 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1709508407; path=/; expires=Tue, 03-Mar-2026 23:26:47 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1709508407; path=/; expires=Tue, 03-Mar-2026 23:26:47 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50170	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	802	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=ayl&refUrl=&vid=95083994863525099948919525000V10&ovsid=1c28c32b083001573fcc1989b44fa248&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ayl=1c28c32b083001573fcc1989b44fa248~~1;Expires=Fri, 30 Aug 2024 23:26:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close
2024-03-03 23:26:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:47 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50177	15.197.193.217	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	752	OUT	GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&US_PRIVACY=1YNN HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAEYBSgCMgsI5pKg6YP53TwQBTgB
2024-03-03 23:26:47 UTC	562	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 253 Connection: close server: Kestrel location: https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= set-cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; expires=Mon, 03 Mar 2025 23:26:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCKSpudft-N08EAUYBSABKAIyCwjmkqDpg_ndPBAFOAE.; expires=Mon, 03 Mar 2025 23:26:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-03 23:26:47 UTC	253	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 35 39 35 33 26 6f 76 73 69 64 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 33 61 32 2d 61 35 65 63 2d 61 34 63 37 34 37 37 64 33 66 35 63 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 74 79 70 65 3d 35 35 39 35 33 26 6f 76 73 69 64 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 33 61 32 2d 61 35 65 63 2d 61 34 63 37 34 37 37 64 33 66 35 63 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent=">https://hb.yahoo.net/cksync.php?cs=1&type=55953&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50172	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	806	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=son&refUrl=&vid=95083994863525099948919525000V10&ovsid=22b49095-3dec-4c47-8a7b-1d7936dda128&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1;Expires=Fri, 30 Aug 2024 23:26:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close
2024-03-03 23:26:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:47 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50165	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	870	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=con&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=AAAF_91Z8VIwGQMdv4qvAAAAAAA&expiration=1709594806&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8
2024-03-03 23:26:47 UTC	636	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8;Expires=Sun, 02 Mar 2025 23:26:47 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close
2024-03-03 23:26:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:47 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50193	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1288	OUT	GET /v1/video/sapi/streams/3caca4ca-191c-3933-bab5-595ca1d1495a?ad.pubfamily=aol&srid=2557576709&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=b9b3c6c5-2cd7-4937-8390-628222cda75f&region=US&site=aolhomepage&expb=aol-aa-2&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=bdud5hbm&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.3.9&try=1&failover_count=0&ads=ima&nad=0&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aolfrontpage&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1 Host: video-api.yql.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:47 UTC	835	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 ps: bdud5hbm cache-control: private access-control-allow-origin: * access-control-allow-methods: GET timing-allow-origin: * access-control-allow-credentials: false access-control-allow-headers: Content-Type access-control-expose-headers: Content-Length y-rid: 61dj35liua1pn x-yahoo-request-id: 61dj35liua1pn x-request-id: 86ea7462-b2bd-41cc-80ff-eadc19ed259d content-length: 6415 x-envoy-upstream-service-time: 25 date: Sun, 03 Mar 2024 23:26:47 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:47 UTC	1300	IN	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 72 65 73 75 6c 74 73 22 3a 7b 22 6d 65 64 69 61 4f 62 6a 22 3a 5b 7b 22 69 64 22 3a 22 33 63 61 63 61 34 63 61 2d 31 39 31 63 2d 33 39 33 33 2d 62 61 62 35 2d 35 39 35 63 61 31 64 31 34 39 35 61 22 2c 22 6d 65 74 61 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 20 77 69 6e 74 65 72 20 73 74 6f 72 6d 20 69 73 20 73 6c 61 6d 6d 69 6e 67 20 43 61 6c 69 66 6f 72 6e 69 61 2c 20 77 69 74 68 20 70 61 72 74 73 20 6f 66 20 74 68 65 20 53 69 65 72 72 61 20 4e 65 76 61 64 61 73 20 67 65 74 74 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 61 20 6d 65 74 65 72 20 6f 66 20 73 6e 6f 77 2e 20 41 20 62 75 73 79 20 69 6e 74 65 72 73 74 61 74 65 20 68 61 73 20 62 65 65 6e 20 73 68 75 Data Ascii: {"query":{"results":{"mediaObj":[{"id":"3caca4ca-191c-3933-bab5-595ca1d1495a","meta":{"attribution":"","description":"A winter storm is slamming California, with parts of the Sierra Nevadas getting more than a meter of snow. A busy interstate has been shu
2024-03-03 23:26:47 UTC	1300	IN	Data Raw: 5f 63 65 72 74 73 22 3a 7b 7d 2c 22 63 68 61 74 5f 63 68 61 6e 6e 65 6c 22 3a 7b 7d 2c 22 72 65 73 74 72 69 63 74 69 6f 6e 73 22 3a 7b 7d 2c 22 72 65 73 69 7a 65 64 5f 74 68 75 6d 62 6e 61 69 6c 73 22 3a 5b 5d 2c 22 63 6f 6e 63 75 72 72 65 6e 74 5f 76 69 65 77 65 72 5f 63 6f 75 6e 74 22 3a 30 2c 22 62 6c 6f 63 6b 5f 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 76 69 65 77 5f 63 6f 75 6e 74 22 3a 34 35 36 30 38 38 2c 22 6e 69 65 6c 73 65 6e 5f 62 65 61 63 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 75 70 6c 79 6e 6b 5f 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 69 76 65 5f 77 69 74 68 5f 61 64 73 22 3a 66 61 6c 73 65 7d 2c 22 73 74 72 65 61 6d 73 22 3a 5b 7b 22 68 6f 73 74 22 3a 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2e 61 70 69 2e 62 72 69 67 68 74 63 6f 76 Data Ascii: _certs":{},"chat_channel":{},"restrictions":{},"resized_thumbnails":[],"concurrent_viewer_count":0,"block_autoplay":false,"view_count":456088,"nielsen_beacons":false,"uplynk_live":false,"live_with_ads":false},"streams":[{"host":"https://edge.api.brightcov
2024-03-03 23:26:47 UTC	1300	IN	Data Raw: 74 65 72 2e 6d 33 75 38 3f 62 63 6f 76 5f 61 75 74 68 3d 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 59 32 4e 70 5a 43 49 36 49 6a 59 30 4d 54 55 32 4e 6a 55 34 4d 54 55 77 4d 44 45 69 4c 43 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 33 4d 44 63 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 51 77 4e 33 30 2e 4d 6a 59 69 65 4a 35 6f 53 6f 31 36 31 51 66 46 45 74 51 73 43 62 79 Data Ascii: ter.m3u8?bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhY2NpZCI6IjY0MTU2NjU4MTUwMDEiLCJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg3MDcsImlhdCI6MTcwOTUwODQwN30.MjYieJ5oSo161QfFEtQsCby
2024-03-03 23:26:47 UTC	1300	IN	Data Raw: 43 4f 4d 53 43 4f 52 45 5f 43 35 7d 26 43 41 36 3d 7b 43 4f 4d 53 43 4f 52 45 5f 43 36 7d 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 44 5f 53 54 41 52 54 22 2c 22 70 61 72 61 6d 22 3a 22 26 43 41 35 3d 30 39 26 43 41 36 3d 7b 43 4f 4d 53 43 4f 52 45 5f 43 36 7d 22 7d 5d 7d 5d 2c 22 70 73 70 69 64 22 3a 22 31 31 39 37 38 30 33 33 36 31 22 2c 22 69 73 72 63 22 3a 22 22 2c 22 6d 6d 41 63 74 69 76 69 74 79 49 64 22 3a 22 22 2c 22 6d 65 64 69 61 6d 65 74 72 69 65 22 3a 22 22 7d 2c 22 73 74 61 74 75 73 22 3a 7b 22 63 6f 64 65 22 3a 22 31 30 30 22 2c 22 6d 73 67 22 3a 22 72 65 61 64 79 22 7d 2c 22 69 6d 61 22 3a 7b 22 76 6d 61 70 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 74 62 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 76 31 2f 65 76 70 2f 61 73 73 65 74 3f Data Ascii: COMSCORE_C5}&CA6={COMSCORE_C6}"},{"name":"AD_START","param":"&CA5=09&CA6={COMSCORE_C6}"}]}],"pspid":"1197803361","isrc":"","mmActivityId":"","mediametrie":""},"status":{"code":"100","msg":"ready"},"ima":{"vmapTag":"https://tb.video.yahoo.com/v1/evp/asset?
2024-03-03 23:26:47 UTC	1215	IN	Data Raw: 45 69 4c 43 4a 68 64 57 51 69 4f 6c 73 69 62 57 56 30 63 6d 6c 6a 63 79 35 69 63 6d 6c 6e 61 48 52 6a 62 33 5a 6c 4c 6d 4e 76 62 53 4a 64 4c 43 4a 77 61 32 6c 6b 49 6a 6f 69 4f 54 49 78 4f 44 51 7a 4d 6a 41 74 4f 47 5a 6d 4d 79 30 30 4e 57 55 35 4c 57 49 32 4d 44 41 74 4f 54 6b 77 5a 6a 67 79 4d 6d 4d 34 4e 6a 59 33 49 69 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 41 35 4e 54 45 31 4e 6a 41 33 4c 43 4a 70 59 58 51 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 30 4d 44 64 39 2e 6f 35 37 61 52 57 6b 53 79 39 59 44 58 6c 4f 71 4e 36 4c 36 49 46 58 54 77 67 45 68 64 55 39 65 52 55 6b 71 50 78 41 6e 55 72 6c 57 75 4c 38 68 56 36 36 69 50 37 32 36 79 6d 4c 43 32 6d 4e 4a 59 43 68 31 68 30 71 5f 79 4b 66 78 6f 79 42 33 63 76 5f 4a 35 48 6a 5f 62 56 37 6f 66 62 32 35 47 34 57 69 Data Ascii: EiLCJhdWQiOlsibWV0cmljcy5icmlnaHRjb3ZlLmNvbSJdLCJwa2lkIjoiOTIxODQzMjAtOGZmMy00NWU5LWI2MDAtOTkwZjgyMmM4NjY3IiwiZXhwIjoxNzA5NTE1NjA3LCJpYXQiOjE3MDk1MDg0MDd9.o57aRWkSy9YDXlOqN6L6IFXTwgEhdU9eRUkqPxAnUrlWuL8hV66iP726ymLC2mNJYCh1h0q_yKfxoyB3cv_J5Hj_bV7ofb25G4Wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50163	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1723	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2675&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25308&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50183	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1496	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2612&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25113&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50169	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1060	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348145722112&time=1709508405585&seq=2 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:26:47 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50188	151.101.65.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	769	OUT	GET /libtrc/google-topics-api.20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35.es6.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=9; t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:26:47 UTC	759	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2006 x-amz-id-2: dJZPekHw7EYgPn8GCqa3ehqEB7J3H5DP2iszb6ToWUZcNrJbQA3Ktlm1kNEQoitUyiIaEX1DCjs= x-amz-request-id: Y2YDAZ5E98184DC3 x-amz-replication-status: FAILED Last-Modified: Sun, 03 Mar 2024 10:51:46 GMT ETag: "8180422ba814cd41b4b05109907485a8" x-amz-server-side-encryption: AES256 x-amz-version-id: z7tjFEtyg6b2WdokLaViPmmP75p.acsC Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:47 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-ewr18170-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508407.178554,VS0,VE44 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 37 Access-Control-Allow-Origin: *
2024-03-03 23:26:47 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 30 33 30 33 2d 31 30 5f 62 34 2d 50 52 2d 36 38 31 39 37 2d 44 45 56 2d 31 35 35 33 39 36 2d 6d 61 67 61 7a 69 6e 65 2d 74 68 65 2d 66 65 65 64 2d 62 65 6c 6f 77 2d 74 68 65 2d 70 70 2d 69 73 2d 68 61 6c 66 2d 64 69 73 70 6c 61 79 65 64 2d 37 31 62 61 32 38 33 34 63 33 35 20 2a 2f 0a 0a 28 6f 3d 3e 7b 63 6f 6e 73 74 20 65 3d 22 74 6f 70 22 2c 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 22 2c 69 3d 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 39 38 37 36 22 2c 6e 3d 60 24 7b 74 7d 2f 6c 69 62 74 72 63 2f 73 74 61 74 69 63 2f 74 6f 70 69 63 73 2f 74 61 62 6f 6f 6c 61 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 2e 68 74 6d 6c 60 2c 72 3d 60 74 62 6c 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 Data Ascii: /! 20240303-10_b4-PR-68197-DEV-155396-magazine-the-feed-below-the-pp-is-half-displayed-71ba2834c35 /(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-top
2024-03-03 23:26:47 UTC	628	IN	Data Raw: 74 69 6f 6e 20 67 28 29 7b 69 66 28 21 6f 2e 62 6f 64 79 29 72 65 74 75 72 6e 20 76 6f 69 64 20 64 28 29 3b 63 6f 6e 73 74 20 65 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 65 2e 69 64 3d 72 2c 65 2e 73 72 63 3d 6e 2c 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 22 2c 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 22 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 6c 28 29 2c 6f 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 6f 26 26 6f 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 26 26 6f 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 Data Ascii: tion g(){if(!o.body)return void d();const e=o.createElement("iframe");e.id=r,e.src=n,e.style.width="0",e.style.height="0",e.style.display="none",l(),o.body.appendChild(e)}function p(){return"browsingTopics"in o&&o.featurePolicy&&o.featurePolicy.allowsFeat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50166	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1796	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2676&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=-3&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&pbAcid=350543395124497111709508396929&pbBidId=31161139041156191709508396934&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50164	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	800	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=dxu&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=IKSGvoFb1RGVed5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8
2024-03-03 23:26:47 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-xu=IKSGvoFb1RGVed5~~8;Expires=Sun, 02 Mar 2025 23:26:47 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close
2024-03-03 23:26:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:47 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50174	52.223.22.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	827	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.html%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dtlt%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%24UID%26axid_e%3D HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=205552980141694412277
2024-03-03 23:26:47 UTC	592	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 0 Connection: close Location: https://hb.yahoo.net/cksync.html?cs=1&vsid=3525099948919525000V10&type=tlt&refUrl=&vid=95083994863525099948919525000V10&ovsid=205552980141694412277&axid_e= Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=205552980141694412277; Max-Age=7776000; Expires=Sat, 01 Jun 2024 23:26:47 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50171	68.67.179.166	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	999	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; receive-cookie-deprecation=1; uuid2=2056953496763385149
2024-03-03 23:26:47 UTC	1514	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=2056953496763385149&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 4ed9c924-3f2b-4aea-a9b8-bec88abac93f Set-Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:26:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 19-Feb-2034 23:26:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=2056953496763385149; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:26:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.203; 154.16.192.203; 575.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50199	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	4152	OUT	GET /log?logid=kfk&evtid=gptslog&itype=YHB&tElp=4346&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&sid=top_right_0&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c_0&szs=300x600&tp=loc%3Dtop_right%7Cnoads%3D1&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=&btm=&lft=&rght=&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=top_right_1&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b_0&szs=300x250&tp=loc%3Dtop_right&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=121&btm=721&lft=855.3125&rght=1155.3125&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=top_right_2&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a_0&szs=300x250&tp=loc%3Dtop_right&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=733&btm=733&lft=855.3125&rght=1155.3125&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=horizon-e2e&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center_0&szs=728x90%7C970x250%7C3x1&tp=loc%3Dtop_center&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=0&btm=0&lft=0&rght=1263&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=mid_center&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center_0&szs=970x250&tp=loc%3Dmid_center&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=1530.8125&btm=1820.8125&lft=121.90625&rght=1243&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50201	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	803	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_the_hill_articles_315%2F832bdc7eaa27b3ad1dd61fb1de4d98ae&client=76f99bdb8f78cd44cc0b&signature=3aa299cb02c431ddc9f5f1b2db950faaf51d5655 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	1146	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 4036 Cache-Control: public, max-age=2592000 Cache-Tag: 253177630285564262967693489410443441036,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000171-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 729922e380c9a5d2ecef775ccecc0105 cld_latency: 453 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:47 GMT Edge-Cache-Tag: 253177630285564262967693489410443441036,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "2f41f436487237cb242c6a932a6c49b8" Last-Modified: Sun, 03 Mar 2024 21:14:56 GMT Server: ECAcc (nya/792F) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=10363,owidth=900,oheight=505,obytes=48198,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 729922e380c9a5d2ecef775ccecc0105 X-Served-By: cache-iad-kiad7000171-IAD X-Timer: S1709504374.978442,VS0,VE453 Content-Length: 10363 Connection: close
2024-03-03 23:26:47 UTC	10363	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 01 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 ff c2 00 11 08 01 2c 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 02 05 01 06 07 00 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 b2 e7 bb ff 00 3a cf b3 54 f0 c9 9f b7 82 Data Ascii: JFIF%%!(!!(!;/))/;E:7:ESJJSici%%!(!!(!;/))/;E:7:ESJJSici,"4:T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50192	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	707	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	1142	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2111267 Cache-Control: public, max-age=2592000 Cache-Tag: 224671364923081073303863540009142071981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100056-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 93 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:47 GMT Edge-Cache-Tag: 224671364923081073303863540009142071981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "42286ba6d6f057d86973c9e5d55cd1b0" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 03:55:30 GMT Server: ECAcc (nya/7962) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2443,owidth=50,oheight=50,obytes=3678,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100056-IAD X-Timer: S1707397140.157303,VS0,VE93 Content-Length: 2443 Connection: close
2024-03-03 23:26:47 UTC	2443	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 95 9a 9c 9d a1 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 93 98 9b 9e a2 a2 81 89 8f 9e a2 a2 9e a2 a2 86 8d 92 9e a2 a2 9e a2 a2 9e a2 a2 9d a1 a2 8f 95 98 9d a1 a1 9d a1 a1 9e a2 a2 8f 95 98 9e a2 a2 9e a2 a2 9e a2 a2 94 99 9b 83 8b 90 9e a2 a2 88 8f 93 9e a2 a2 9e a2 a2 9e a2 a2 9e a1 a1 0c 23 40 9e a2 a2 23 61 92 0d 24 41 0f 26 42 0e 25 41 0f 2b 4b 22 5f 8f 19 2f 49 82 8a 8f 20 35 4e 10 26 43 16 2c 48 1e 52 7f 1a 48 71 5a 67 75 4a 59 6a 35 46 5b 80 88 8e 1a 30 4a 0d 25 43 0e 27 46 25 38 51 75 7e 86 83 8b 90 38 4a 5e 14 3a 5f 1a 4a 73 0d 23 40 18 2d 48 3a 4b 5f 19 2f 4a 10 2d 4d 22 60 90 17 Data Ascii: PNGIHDR22)xPLTEGpL#@#a$A&B%A+K"_/I 5N&C,HRHqZguJYj5F[0J%C'F%8Qu~8J^:_Js#@-H:K_/J-M"`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50176	35.244.159.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	895	OUT	GET /w/1.0/cm?cc=1&id=9e0a35ea-c8e3-4b1b-9efa-4af6f54a373e&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dopx%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404
2024-03-03 23:26:47 UTC	644	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404; Version=1; Expires=Mon, 03-Mar-2025 23:26:47 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3525099948919525000V10&type=opx&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=42982cb5-8018-083c-39e4-9b7751c788d8 Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50182	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	588	OUT	OPTIONS /playback/v1/accounts/6415665815001/videos/6348145722112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://s.yimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	405	IN	HTTP/1.1 200 OK Connection: close Content-Length: 66 Retry-After: 0 Content-Type: application/json Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:47 GMT X-Served-By: cache-lga21952-LGA X-Cache: HIT X-Cache-Hits: 0 Bcov-Request-Id: epa-f87b5208bef0, epa-f87b5208bef0-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: *
2024-03-03 23:26:47 UTC	66	IN	Data Raw: 20 5b 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 22 22 2c 20 22 65 72 72 6f 72 5f 73 75 62 63 6f 64 65 22 3a 22 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 22 41 75 74 68 6f 72 69 7a 65 64 22 20 7d 5d 20 Data Ascii: [{"error_code":"", "error_subcode":"", "message":"Authorized" }]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50194	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	6749	OUT	GET /log?logid=aplog&itype=YHB&tElp=4352&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&acid=409702088720264621709508396926&astat=&auMxTm=1400&actltime=1128&acwtime=1128&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=3x1%7C728x90%7C970x250&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center&sec=&chnl=&csent=1&zn=e&crid=771334461&g=0&nms=2&ptype=43&supcrid=us_aol_hp_dt_top_center&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=3x1%7C728x90%7C970x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=0&btm=0&lft=0&rght=1263&dspltime=1129&dfpDiv=horizon-e2e&lper=4&acid=213699153252948111709508396854&astat=&auMxTm=1400&actltime=1404&acwtime=1407&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=-1&agid%3C%3E=55636776151632581709508396855&asagid=55636776151632581709508396855&asbkt=v2&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=300x250&size=-1x-1&adtypes=2%7C0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=2%23%230&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&sec=&chnl=&csent=1&zn=e&crid=102615858&g=0&nms=1&ptype=43&supcrid=us_aol_hp_dt_as_top_right_a&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=300x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_right%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=733&btm=733&lft=855.3125&rght=1155.3125&dspltime=1407&dfpDiv=top_right_2&lper=4&acid=018482128756829541709508396854&astat=&auMxTm=1400&actltime=1404&acwtime=1424&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=1&agid%3C%3E=55636776151632581709508396855&asagid=55636776151632581709508396855&asbkt=v2&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=300x250&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&sec=&chnl=&csent=1&zn=e&crid=659677893&g=0&nms=1&ptype=43&supcrid=us_aol_hp_dt_as_top_right_b&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=300x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_right%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=121&btm=721&lft=855.3125&rght=1155.3125&dspltime=1424&dfpDiv=top_right_1&lper=4&acid=168728230364804131709508396854&astat=&auMxTm=1400&actltime=1405&acwtime=1430&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=1&agid%3C%3E=55636776151632581709508396855&asagid=55636776151632581709508396855&asbkt=v2&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=300x600&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&sec=&chnl=&csent=1&zn=e&crid=585477397&g=0&nms=1&ptype=43&supcrid=us_aol_hp_dt_as_top_right_c&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=300x600&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_right%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=&btm=&lft=&rght=&dspltime=1430&dfpDiv=top_right_0&lper=4&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50195	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	2820	OUT	GET /log?logid=aplog&itype=YHB&tElp=4352&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&acid=168655130584537831709508396930&astat=&auMxTm=1400&actltime=1407&acwtime=1407&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=1&agid%3C%3E=&asagid=&asbkt=&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=970x250&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&sec=&chnl=&csent=1&zn=e&crid=586167089&g=0&nms=2&ptype=43&supcrid=us_aol_hp_dt_mid_center&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=970x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22mid_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=1530.8125&btm=1820.8125&lft=121.90625&rght=1243&dspltime=1407&dfpDiv=mid_center&lper=4&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50219	68.67.179.166	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	999	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; receive-cookie-deprecation=1; uuid2=2056953496763385149
2024-03-03 23:26:47 UTC	1514	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=2056953496763385149&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 51e27979-ea2b-4ba2-b8c9-22e6bedb224f Set-Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:26:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 19-Feb-2034 23:26:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=2056953496763385149; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:26:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.203; 154.16.192.203; 575.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50187	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1496	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2614&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25307&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50202	15.197.193.217	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	731	OUT	GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAEYBSgCMgsI5pKg6YP53TwQBTgB
2024-03-03 23:26:47 UTC	515	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 199 Connection: close server: Kestrel location: https://cs.media.net/cksync?cs=1&type=ttd&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c set-cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; expires=Mon, 03 Mar 2025 23:26:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjalbOIhPndPBAFOAFaBzhtMzN6azRgAg..; expires=Mon, 03 Mar 2025 23:26:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-03 23:26:47 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 33 61 32 2d 61 35 65 63 2d 61 34 63 37 34 37 37 64 33 66 35 63 22 3e 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 33 61 32 2d 61 35 65 63 2d 61 34 63 37 34 37 37 64 33 66 35 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://cs.media.net/cksync?cs=1&type=ttd&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c">https://cs.media.net/cksync?cs=1&type=ttd&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50210	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	941	OUT	GET /cksync.html?cs=8&vsid=3525100008919577000V10&type=opx&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=a470c6a3-f372-0895-098c-2413748bee6d HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406
2024-03-03 23:26:47 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 227 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8;Expires=Sun, 02 Mar 2025 23:26:47 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close
2024-03-03 23:26:47 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-03 23:26:47 UTC	77	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50200	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	817	OUT	GET /sync?ssp=google&no_redirect=1&google_gid=CAESEHCGma9YkBLeeRR1TOzfYEc&google_cver=1 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1709508406; tuuid_lu=1709508406; tuuid=43ce1147-64ef-42d3-81d6-21cfcb9531d7; ssh=!google,1709508406
2024-03-03 23:26:47 UTC	246	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Sun, 03 Mar 2024 23:26:47 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50204	15.197.193.217	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	707	OUT	GET /track/cmf/casale?gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAEYBSgCMgsI5pKg6YP53TwQBTgB
2024-03-03 23:26:47 UTC	593	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 323 Connection: close server: Kestrel location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&expiration=1712100407&gdpr=0&gdpr_consent= set-cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; expires=Mon, 03 Mar 2025 23:26:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGY2FzYWxlEgsIkOix3O343TwQBRgFIAEoAjILCOaSoOmD-d08EAU4AQ..; expires=Mon, 03 Mar 2025 23:26:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-03 23:26:47 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 33 61 32 2d 61 35 65 63 2d 61 34 63 37 34 37 37 64 33 66 35 63 26 65 78 70 69 72 61 74 69 6f 6e 3d 31 37 31 32 31 30 30 34 30 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 33 39 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 Data Ascii: Redirecting to: <a href="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&expiration=1712100407&gdpr=0&gdpr_consent=">https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=fa53b9a8-941d-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50191	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	701	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuDR9Mwaq2Ewj20HNDbJCsg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fknicks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=425c28aa64f58f98097ebabb118cfcfeb80d8ffa HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 913537 Cache-Control: public, max-age=2592000 Cache-Tag: 203932418625427984763885456507068785729,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000116-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:47 GMT Edge-Cache-Tag: 203932418625427984763885456507068785729,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "a8a6107564c5f4ac3bb288f2deff0d0a" Expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 08 Feb 2024 05:07:34 GMT Server: ECAcc (nya/7921) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2128,owidth=50,oheight=50,obytes=3135,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000116-IAD X-Timer: S1708594870.110326,VS0,VE1 Content-Length: 2128 Connection: close
2024-03-03 23:26:47 UTC	2128	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c f8 fb fd f8 fb fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 fa fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff ff ff e2 ee f7 e8 f2 f9 ff ff ff fc fd fe ff ff ff ff ff ff ff ff ff ff ff ff fd fe ff ee f5 fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e9 f2 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 84 26 be c0 c2 00 6b b6 f4 84 26 df ec f6 eb 83 2c f0 83 29 9f 7b 58 8d 79 63 e0 Data Ascii: PNGIHDR22)xPLTEGpL&k&,){Xyc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50214	169.197.150.7	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	716	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	526	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_f7b0290b00974978b07e1; Max-Age=47260800; SameSite=None; Expires=Mon, 1 Sep 2025 23:26:47 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240303%22%7D; Max-Age=47260800; SameSite=None; Expires=Mon, 1 Sep 2025 23:26:47 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Sun, 03 Mar 2024 23:26:47 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50197	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	701	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 395104 Cache-Control: public, max-age=2592000 Cache-Tag: 299233884771220162348710421289867129232,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21935-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 107 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:47 GMT Edge-Cache-Tag: 299233884771220162348710421289867129232,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e1659a010543d3c34b4f66a24f826f40" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (nya/1C46) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1793,owidth=50,oheight=50,obytes=2022,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000096-IAD X-Timer: S1706521303.454254,VS0,VE157 Content-Length: 1793 Connection: close
2024-03-03 23:26:47 UTC	1793	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c be c0 c1 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bf bf c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bf bf c3 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bc be c1 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be bf c2 be c0 c2 be c0 c2 be c0 c2 be Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50198	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FaWeb9EeSRk2NKVma2xejiw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fspurs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ecb227b63dd07f6db6e9782edaa510816609967 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	1142	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133430 Cache-Control: public, max-age=2592000 Cache-Tag: 490156191650674308233120232799611050023,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100029-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 77 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:47 GMT Edge-Cache-Tag: 490156191650674308233120232799611050023,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "04350280a37b2459937905a48569a857" Expiration: expiry-date="Thu, 25 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 26 Jan 2024 16:33:06 GMT Server: ECAcc (nya/799A) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1889,owidth=50,oheight=50,obytes=2297,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100029-IAD X-Timer: S1707374978.857792,VS0,VE77 Content-Length: 1889 Connection: close
2024-03-03 23:26:47 UTC	1889	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff 82 8c 90 ff ff ff ff ff ff ff ff ff cd d1 d3 ff ff ff ff ff ff ff ff ff cb cf d1 ff ff ff fe fe fe 8b 94 98 f3 f4 f4 f0 f1 f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 b8 bb ec ee ee ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e6 e8 e9 e7 e9 ea 9c a3 a7 bb c0 c3 e2 e5 e6 9f a6 a9 df e1 e2 ff ff ff ff ff ff ff ff ff d3 d6 d8 84 8d 92 65 71 76 6f 7a 7f ff ff ff e1 e3 e4 7c 87 8b 60 6c 72 ff ff ff 89 92 96 fb fb fb a0 a7 aa 9b a3 a6 cf d3 d5 ff ff ff ac b2 b5 c8 cc ce fe ff ff 70 7b 80 a6 ad b0 c1 c6 c8 d8 db dd fc fc fc fa fa fa ed ee ef f3 f4 f4 ff Data Ascii: PNGIHDR22)xPLTEGpLeqvoz\|`lrp{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50196	74.119.119.139	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	632	OUT	GET /sync?c=72&r=2&j=TRC.getRTUS&us_privacy=1YNN&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Sun, 03 Mar 2024 23:26:47 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 transfer-encoding: chunked server-processing-duration-in-ticks: 1763384 strict-transport-security: max-age=31536000; preload; connection: close
2024-03-03 23:26:47 UTC	84	IN	Data Raw: 34 39 0d 0a 54 52 43 2e 67 65 74 52 54 55 53 28 7b 22 73 74 61 74 75 73 22 3a 22 4f 4b 22 2c 22 75 73 65 72 69 64 22 3a 22 41 4b 48 58 75 74 6c 38 34 50 48 68 78 66 52 53 53 70 62 46 57 45 30 4a 34 68 41 70 41 48 65 6b 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 49TRC.getRTUS({"status":"OK","userid":"AKHXutl84PHhxfRSSpbFWE0J4hApAHek"});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50218	52.46.143.56	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	800	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=5286816B-07A3-4831-82CF-92827DD7440E&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	815	IN	HTTP/1.1 302 Found Server: Server Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 0 Connection: close x-amz-rid: ZKHCV4B7JHFNGRFJ9FMJ Set-Cookie: ad-id=AxNV-fG5j0rJiu04gbLQqFs\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:26:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=5286816B-07A3-4831-82CF-92827DD7440E&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50178	34.206.105.187	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	777	OUT	GET /pixel?a=0&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&redir=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3Dsov%26ovsid%3D%24UID%26axid_e%3D&sovrn_retry=true HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IQveALZHlnPGc8kXQNeadO_F
2024-03-03 23:26:47 UTC	518	IN	HTTP/1.1 307 Temporary Redirect Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 0 Connection: close Location: https://hb.yahoo.net/cksync.php?cs=1&type=sov&ovsid=IQveALZHlnPGc8kXQNeadO_F&axid_e= Set-Cookie: ljt_reader=IQveALZHlnPGc8kXQNeadO_F;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50173	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	718	OUT	GET /cksync.php?cs=1&type=mn&ovsid=3525100008919577000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	664	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-mn=3525100008919577000V10~~1;Expires=Fri, 30 Aug 2024 23:26:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close
2024-03-03 23:26:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:47 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50185	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1496	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2612&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25113&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50213	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	842	OUT	GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:26:47 UTC	1114	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?gpp=DBAA&gpp_sid=-1&google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZeUHNEt3uSYAABBfAETINAAA CF-Ray: 85ed64bcd84c1784-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:47 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:26:47 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lHZczHatTOkp%2FmL4IUnFM2pwmgFtkhu1Z1LJ0fY3j4aoo0OxO5US%2B8CfPht1iohfH9v2Gt2ohp8FmZslvp%2BiunPWG1mlTtYABLLmQH%2FJZ%2Fg38DbrtcaYFegE7Pei2zkbykpXHYjaiMBCQA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50212	142.251.40.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1348	OUT	GET /pcs/view?xai=AKAOjssP9ZWoydsPxqYI_HwCe0lVWcUyYlDQIemS4De-36ppn4MedZ-5GhUyKfxjB3M1AemvsD7pfpmbkCUWHZ3Bp0cPQpp83YRsWjLMh0Gk3Go2TXHM4QWAV14E6ITmT1kzt3jn6EDEDabe78b5IWG9rbFHD0TDgL3PmwQIkvnGu8_rA4Skposw2U4CicTEoxaujM_wfgDB3Ux8_5-_9zXa2g-qZyV-agvemwD0rTbkFFkN8TZf56UkTTchdLyq19aXqmMkOyMrxdnzAf0snggbYjfVX_4FFGaKJapZLDYYkVhiwKVnwHxym4jN9Ck7YIleURLn0NM3m60d-tjHMm-ymLnehKpwkgae-E7ZQc7eOm6pLoVeti6m47pmCiE1yj0xyfs6UqU8ZnldNEDNxKg0CWaZDds0uqRAEQ&sai=AMfl-YTHWUfOdY2MMgVGf3wN5R2xsOUjPAsT5e5HIhvO7E8DlP4g-BecPP_u3aK2RHX0tWjpF1roAC8kNAKAB-RqppMjJVX3X-K-NrS9lXlwvwhBqlIH1RinuqwoTP9h8267NzDxOdcFIiraYLEEXH-haa8&sig=Cg0ArKJSzO6VnUfeUIi4EAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Sun, 03 Mar 2024 23:26:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 03-Mar-2024 23:41:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Sun, 03 Mar 2024 23:26:48 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50217	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=9db333fbfbd97c489dfb11e31107155b55541a73 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	1486	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1914634 Cache-Control: public, max-age=2592000 Cache-Tag: 352991030521014136013954760138177611573,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100076-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: fcdbe153f8d9ea817ff09855e347f430 cld_latency: 483 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:47 GMT Edge-Cache-Tag: 352991030521014136013954760138177611573,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "6e73e8b5f42f8eb2a888e9482f70c0d2" Last-Modified: Sat, 10 Feb 2024 19:36:14 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/790D) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=331,owidth=400,oheight=400,obytes=35383,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: fcdbe153f8d9ea817ff09855e347f430 X-Served-By: cache-iad-kjyo7100076-IAD X-Timer: S1707593773.290230,VS0,VE483 Content-Length: 331 Connection: close
2024-03-03 23:26:47 UTC	331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 57 50 4c 54 45 47 70 4c 3c 5b aa 3c 5a aa 4c 68 b1 3b 5a aa 3b 5a a9 47 64 af 41 5f ac 3c 5b aa 3c 5b aa 43 61 ad 3b 5a aa 3c 5b aa 3b 5a a9 3a 59 a9 47 64 af d1 d8 eb 93 a5 d0 53 6e b4 5e 77 b9 77 8d c4 71 87 c1 a2 b0 d6 8a 9d cc 7f 93 c8 68 7f bd c0 ca e4 3f 5d ab 4d 69 b2 95 87 8f 5c 00 00 00 0e 74 52 4e 53 00 d9 f9 09 d9 f9 09 31 97 9a 09 c1 c1 c1 e6 cc 46 c8 00 00 00 95 49 44 41 54 18 d3 65 8f d9 0e 83 30 0c 04 43 0a 24 81 76 9d fb 80 fe ff 77 d6 29 08 2a 75 f2 e4 b1 56 f1 0a c1 28 3d 48 39 68 25 0e 1e 06 27 66 fe ce 4f 5c ac dd 18 fc 60 38 0f 0a c1 07 e2 e7 09 50 42 a3 c5 9c 36 b2 b0 ef 06 68 31 00 c9 61 f3 2c d2 0e 8c 42 02 31 f3 d6 92 0d 15 Data Ascii: PNGIHDR(-SWPLTEGpL<[<ZLh;Z;ZGdA_<[<[Ca;Z<[;Z:YGdSn^wwqh?]Mi\tRNS1FIDATe0C$vw)*uV(=H9h%'fO\`8PB6h1a,B1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50206	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	714	OUT	GET /cksync.php?cs=1&type=58160&ovsid=LTC55UNV-1B-13RH&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-mag=LTC55UNV-1B-13RH~~1;Expires=Mon, 03 Mar 2025 23:26:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close
2024-03-03 23:26:47 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:47 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50184	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1507	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2616&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25307&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:47 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:47 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50208	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FGZGEhZrM.ElkBBel7PyrkQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181218%2F500x500%2Fthunder_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bbee72fc45aaf87f8593bcbf78061f6419c1c6f6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	1384	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 414688 Cache-Control: public, max-age=2592000 Cache-Tag: 414949990177836941899077680346253387921,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:47 GMT Edge-Cache-Tag: 414949990177836941899077680346253387921,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "acc901c1c48d9b5c70aa019ec7807ed4" Expiration: expiry-date="Sat, 10 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 11 Feb 2024 10:32:37 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7954) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1801,owidth=50,oheight=50,obytes=2534,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000061-IAD X-Timer: S1709093719.262943,VS0,VE7 Content-Length: 1801 Connection: close
2024-03-03 23:26:47 UTC	1801	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 02 2e 63 f7 a1 96 ff ff ff 00 2d 62 00 2d 62 00 2d 62 41 5b 82 01 2e 63 ff ff ff f9 b7 af be de f0 00 2d 62 00 2d 62 00 2d 62 97 ca e7 ff ff ff fe fe fe ff fd fd ff ff ff f8 ab a1 00 2d 62 00 2d 62 00 2d 62 00 2d 62 00 2d 62 00 2d 62 00 2d 62 f5 89 7c 00 2d 62 ff ff ff 00 2d 62 eb f5 fb 59 ab d8 0f 39 6b b6 da ee fa c6 bf fe f7 f6 ff ff ff 00 2d 62 fe f7 f6 57 a9 d7 39 58 81 00 2d 62 00 2d 62 75 b9 df 00 2d 62 ff ff ff c3 e1 f1 00 2d 62 ff fe fe 01 2e 63 f6 a3 9a f1 8f 84 fe f5 f3 fb cd c7 d6 ea f5 af d6 ec ff fd fd d6 ea f5 f6 fa fd f8 fb fd fe f8 f7 ab d4 eb 9d b6 cc 8d c5 e4 f8 aa a0 41 62 8a f5 82 74 b1 d7 ed 90 58 64 fd Data Ascii: PNGIHDR22)xPLTEGpL.c-b-b-bA[.c-b-b-b-b-b-b-b-b-b-b\|-b-bY9k-bW9X-b-bu-b-b.cAbtXd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50209	35.211.178.172	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	815	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; c=1709508406; tuuid_lu=1709508406
2024-03-03 23:26:47 UTC	258	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //a.sportradarserving.com/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50211	52.46.143.56	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	800	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:47 UTC	815	IN	HTTP/1.1 302 Found Server: Server Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 0 Connection: close x-amz-rid: YW4TEQ345AQCJENCGV8Z Set-Cookie: ad-id=A11aqPOZCkc8owe-76Inpq0\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:26:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50190	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	704	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fh7O7IoQNTNmxvnzos4Dk_Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20220917%2F500x500%2Fcavaliers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=62839313912a33febdf193b8cf596ba44463a379 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1062263 Cache-Control: public, max-age=2592000 Cache-Tag: 274469423328619801018042047046980725494,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21945-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 149 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:47 GMT Edge-Cache-Tag: 274469423328619801018042047046980725494,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "02657a57715136e73df932a1baab26e7" Expiration: expiry-date="Thu, 25 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 26 Jan 2024 16:38:10 GMT Server: ECAcc (nya/7989) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1693,owidth=50,oheight=50,obytes=1742,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21945-LGA X-Timer: S1708446144.051726,VS0,VE149 Content-Length: 1693 Connection: close
2024-03-03 23:26:48 UTC	1693	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 88 50 4c 54 45 47 70 4c b4 96 5a b4 96 5a b4 96 59 b4 96 5a b4 96 5a b4 96 59 b4 96 59 b4 96 59 b4 96 59 b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 96 5a b4 Data Ascii: PNGIHDR22)xPLTEGpLZZYZZYYYYZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50175	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	834	OUT	GET /cksync.php?gpp=DBAA&gpp_sid=-1&cs=1&vsid=3525099948919525000V10&type=idx&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:48 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1;Expires=Wed, 17 Apr 2024 23:26:47 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:48 GMT Connection: close
2024-03-03 23:26:48 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:48 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50207	52.86.42.47	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	697	OUT	GET /s/31327?bidder_id=14481&bidder_uuid=ZeUHNEt3uSYAABBfAETINAAA%26015&gpdr=&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	535	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:47 GMT Content-Length: 0 Connection: close Location: /s/31327?gdpr_consent=&bidder_id=14481&gpp=DBAA&bidder_uuid=ZeUHNEt3uSYAABBfAETINAAA%26015&_li_chk=true&gpp_sid=-1&us_privacy=&gpdr=&previous_uuid=30dbf99058ab4bd6b77cdf8285912a1c Set-Cookie: lidid=30dbf990-58ab-4bd6-b77c-df8285912a1c; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:47 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50220	18.173.219.124	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	731	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=5e803909-7b6d-45a4-8be8-533d655de3d1 HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	1031	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:26:48 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:26:48 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=5e803909-7b6d-45a4-8be8-533d655de3d1&ckls=true&ci=IAEnIwC1hI&nc=false&trid=397624072 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: intentIQ=IAEnIwC1hI; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:26:48 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 d256d517610f633eae85f1fada59368e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: v0YRveloudLI2aSDCaYjsQX7ok1RcUxTKWybiisbqXdv1yawUFV2xA==
2024-03-03 23:26:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50216	185.184.8.90	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	672	OUT	GET /cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZeUHNEt3uSYAABBfAETINAAA%26015 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	812	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:48 GMT vary: Accept-Encoding set-cookie: g=QddgssbLiqrddLde9dvK_1709508408046;Path=/;Domain=.creativecdn.com;Expires=Mon, 03-Mar-2025 23:26:48 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1709508408;Path=/;Domain=.creativecdn.com;Expires=Mon, 03-Mar-2025 23:26:48 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZeUHNEt3uSYAABBfAETINAAA%26015&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sun, 03 Mar 2024 23:26:48 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50203	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	806	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F134e3c2d76e50e2077e2333085803fe5&client=76f99bdb8f78cd44cc0b&signature=1a4991d023817a51a24a317737b8d7a9a50e740c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2436 Cache-Control: public, max-age=2592000 Cache-Tag: 406233613315016297629607497550212425430,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21933-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 9e2663f22feb297c291f993e83fe9ee9 cld_latency: 1 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:48 GMT Edge-Cache-Tag: 406233613315016297629607497550212425430,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "e261e96aaa43432a9b52ba249fc0b0a6" Last-Modified: Sun, 03 Mar 2024 22:38:51 GMT Server: ECAcc (nya/7904) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=17762,owidth=3300,oheight=2067,obytes=444878,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 9e2663f22feb297c291f993e83fe9ee9 X-Served-By: cache-lga21933-LGA X-Timer: S1709505973.737343,VS0,VE1 Content-Length: 17762 Connection: close
2024-03-03 23:26:48 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 01 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 ff c2 00 11 08 01 2c 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d5 7d df 7b 3e 57 a0 ce cd d1 b4 8f 7b bc 3d Data Ascii: JFIF%%!(!!(!;/))/;E:7:ESJJSici%%!(!!(!;/))/;E:7:ESJJSici,"3}{>W{=
2024-03-03 23:26:48 UTC	1379	IN	Data Raw: 8c eb 4d c9 15 34 5c f7 40 bd 8d fb 32 d6 5b 5b 09 34 57 ce 6c 34 37 10 61 0a c5 89 c8 5d b2 95 ff 00 d6 d2 67 52 98 33 36 36 b2 98 d6 ab 55 99 14 b5 f0 29 39 27 db 61 ee 90 de 82 b0 c9 db f5 6c b5 c8 99 91 2c cb 33 23 43 2d 9c fa 42 59 af ac b9 22 66 76 5e f3 d4 bb 7d 62 7a 56 64 27 af 66 58 66 e8 41 c5 be 13 ed 2c 61 11 c3 5f 20 c6 e0 cb 30 19 be e9 70 5c 91 b7 ea 2c dc 3c 79 d1 73 4d fd 9e 79 b8 99 96 ad ce d2 bd 4a 02 91 63 4d 8f 9a 9d 42 2c d6 e4 6d 78 55 13 3c f5 cc ee 95 2b 52 ee fb 9e cf 8c 59 80 a9 99 bf b0 ca f0 7f 15 73 a8 35 0c 33 04 4f e3 25 53 d9 7b 5f fd da 59 06 fd c2 66 ac 22 9a 05 11 e8 d1 fd 77 17 bb c0 14 0b 0b 6e 97 12 e4 08 6f 32 13 cc 21 b9 df 3e 96 c3 96 44 88 4b cc 44 cb 5a 7e 8f f9 db be 5c c1 ef 3d 7b 05 b6 0d 80 59 a0 36 58 4d Data Ascii: M4\@2[[4Wl47a]gR366U)9'al,3#C-BY"fv^}bzVd'fXfA,a_ 0p\,<ysMyJcMB,mxU<+RYs53O%S{_Yf"wno2!>DKDZ~\={Y6XM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50186	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	1496	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2615&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25307&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1
2024-03-03 23:26:48 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:48 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50228	52.223.22.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	698	OUT	GET /xuid?mid=7976&xuid=5286816B-07A3-4831-82CF-92827DD7440E&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=205552980141694412277
2024-03-03 23:26:48 UTC	448	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=205552980141694412277; Max-Age=7776000; Expires=Sat, 01 Jun 2024 23:26:48 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-03 23:26:48 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50243	34.196.218.225	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:47 UTC	757	OUT	GET /sync/pubmatic/5286816B-07A3-4831-82CF-92827DD7440E?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:48 UTC	777	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50224	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	1418	OUT	POST /p?_V=V&V_sec=pb&evt=v_request&t=0.037682379686379&_sqno=0&ts=0&auto=false&bckt=none&ccode=&cdn=&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=init&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.33&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=0&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view= HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:48 UTC	1056	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 56 date: Sun, 03 Mar 2024 23:26:48 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50233	52.46.143.56	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	847	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=5286816B-07A3-4831-82CF-92827DD7440E&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxNV-fG5j0rJiu04gbLQqFs\|t
2024-03-03 23:26:48 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: N8G2SA0RXVJJKC5CSVTP Set-Cookie: ad-id=AxNV-fG5j0rJiu04gbLQqFs; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:26:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:26:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-03 23:26:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50226	151.101.1.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	854	OUT	GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=9; t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:26:48 UTC	738	IN	HTTP/1.1 200 OK Connection: close Content-Length: 664 x-amz-id-2: jGb2yD5YEUTEHJnUe8wbk1DmvHa/j516hqCqk/3hkHj4lS2/K8QQnYz0HDPz7NDRnTNAP9WTnWk= x-amz-request-id: BNYJTRE6F0HHG2BJ x-amz-replication-status: COMPLETED Last-Modified: Tue, 13 Feb 2024 13:15:59 GMT ETag: "8b140f0f0f6e1a0f986cc7d6dfd74d65" x-amz-server-side-encryption: AES256 x-amz-version-id: 4MpQ_aQntJKuJTBB3LGK3B7cfa8k5k0b Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:48 GMT Via: 1.1 varnish Age: 86411 X-Served-By: cache-ewr18153-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1709508408.212091,VS0,VE1 Cache-Control: private,max-age=31536000 Vary: Accept-Encoding abp: 75 Access-Control-Allow-Origin: *
2024-03-03 23:26:48 UTC	664	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 61 62 6f 6f 6c 61 20 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 28 61 73 79 6e 63 28 29 3d 3e 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Taboola Topics Frame</title> <script> (async()=>{ var s=document.referrer; if("browsingTopics"in document&&document.featurePolicy.allowsFeatu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50222	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	388	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:48 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Sun, 03 Mar 2024 23:36:48 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50230	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	851	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=UoaBawejSDGCz5KCfddEDg%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:48 UTC	662	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent= Date: Sun, 03 Mar 2024 23:26:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:48 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50247	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	1034	OUT	POST /p?s=1197803361&t=1709508406228&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=us-east-1&test=aol-aa-2&rid=02r7skdiua1p4&pd=unknown&pt=home&A_utm=%7B%22GAM_TOP_RIGHT_BRSTIME%22%3A5644%2C%22GAM_TOP_RIGHT_FTIME%22%3A11613%2C%22GAM_TOP_RIGHT_RTIME%22%3A19261%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:48 UTC	1117	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:26:48 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-03-03 23:26:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50236	68.67.179.166	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	890	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fhb.yahoo.net%252Fcksync.php%253Fcs%253D1%2526type%253Dapx%2526ovsid%253D%2524UID%2526axid_e%253D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; receive-cookie-deprecation=1; uuid2=2056953496763385149
2024-03-03 23:26:48 UTC	1448	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://hb.yahoo.net/cksync.php?cs=1&type=apx&ovsid=2056953496763385149&axid_e= AN-X-Request-Uuid: b0bd952e-bff8-4a07-a699-aa6e9de6e0a1 Set-Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:26:48 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 19-Feb-2034 23:26:48 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=2056953496763385149; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:26:48 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.203; 154.16.192.203; 575.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50241	34.111.113.62	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	663	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=5286816B-07A3-4831-82CF-92827DD7440E HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	200	IN	HTTP/1.1 403 Forbidden Content-Length: 134 Content-Type: text/html; charset=UTF-8 Date: Sun, 03 Mar 2024 23:26:48 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:48 UTC	134	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 34 30 33 3c 2f 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e Data Ascii: <!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50221	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	3562	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.008215694822810482&_sqno=1&ts=961&auto=false&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=init&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.33&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&view=&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F3caca4ca-191c-3933-bab5-595ca1d1495a%3Fad.pubfamily%3Daol%26srid%3D2557576709%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3Dbdud5hbm%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26ad.plseq%3D1%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:48 UTC	1056	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 57 date: Sun, 03 Mar 2024 23:26:48 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50238	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	984	OUT	POST /p?s=1197803361&t=1709508402455&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=us-east-1&ads_failure_total=1&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=0&ads_slot_top_failure=1&ads_slot_top_total=1 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:48 UTC	1117	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:26:48 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-03-03 23:26:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50234	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	1075	OUT	GET /cksync.html?cs=1&vsid=3525099948919525000V10&type=pub&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1
2024-03-03 23:26:48 UTC	694	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 227 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1;Expires=Wed, 17 Apr 2024 23:26:48 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:48 GMT Connection: close
2024-03-03 23:26:48 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-03 23:26:48 UTC	77	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50223	74.119.119.73	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	694	OUT	GET /user-sync/redirect?profile=73&gdprapplies=0&gdpr=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f
2024-03-03 23:26:48 UTC	675	IN	HTTP/1.1 302 Found content-length: 0 date: Sun, 03 Mar 2024 23:26:48 GMT server: Kestrel cache-control: no-store,max-age=0 location: https://x.bidswitch.net/sync?ssp=criteo&custom_data=YzXp-V9qdWFuQ2trRyUyRkRua0EzQjFTSFhHZm1WMjB6SUVHY3o1SXVWdDNyTG1RTkpadlFma3dka0hHQW8xbEhQVVhhaW5neHN3JTJGTURKUGh4RUlaOGtBNlBuV3FURW1qNklkNTRhMkZwUFhzZG5DcXlCeTElMkJUc2VKVSUyQjMwRmNsMXE3eEhZN01sbiUyRk1yOFUzbFVVQmw2VWt6NzM3dUVaREE1Y0JQRnRSVnlUTERDV3l2OVFINjA4YXIlMkJHWjBsTDYxdzJEdkc&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-2lV_f5hyr-U_3dvKgwvX52_tI86LV38FMRUpJQ cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50239	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	984	OUT	POST /p?s=1197803361&t=1709508403131&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=us-east-1&ads_failure_total=0&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=1&ads_slot_top_failure=0&ads_slot_top_total=0 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:48 UTC	1117	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:26:48 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-03-03 23:26:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50231	15.197.193.217	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	768	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCKSpudft-N08EAUYBSABKAIyCwjmkqDpg_ndPBAFOAE.
2024-03-03 23:26:48 UTC	661	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= set-cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; expires=Mon, 03 Mar 2025 23:26:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCKSpudft-N08EAUSFwoIcHVibWF0aWMSCwiy6u_k7fjdPBAFGAEgASgCMgsItuDykYT53TwQBTgBWghwdWJtYXRpY2AC; expires=Mon, 03 Mar 2025 23:26:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-03 23:26:48 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 33 61 32 2d 61 35 65 63 2d 61 34 63 37 34 37 37 64 33 66 35 63 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50244	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	837	OUT	GET /ups/58292/sync?_origin=1&uid=5286816B-07A3-4831-82CF-92827DD7440E&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b"
2024-03-03 23:26:48 UTC	781	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b:18z8~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:48 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-nLNhotxE2uVq21nL64vd2.9J7PPx9gY-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50227	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	863	OUT	GET /pixel?google_nid=pubmatic&google_hm=NTI4NjgxNkItMDdBMy00ODMxLTgyQ0YtOTI4MjdERDc0NDBF&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:48 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= Date: Sun, 03 Mar 2024 23:26:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:48 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 6a 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50229	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	824	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:48 UTC	736	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEAIvvYGKi3MwJbcEVt_pRgM&google_cver=1 Date: Sun, 03 Mar 2024 23:26:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 379 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:48 UTC	379	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50242	35.236.220.17	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=9E6108CD113245DE8ED3EE8C2AE8D8CE; Path=/; domain=simpli.fi; Expires=Tue, 04-Mar-25 23:26:48 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=9E6108CD113245DE8ED3EE8C2AE8D8CE; Path=/; domain=simpli.fi; Expires=Tue, 04-Mar-25 23:26:48 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:9E6108CD113245DE8ED3EE8C2AE8D8CE Expires: Sat, 02 Mar 2024 23:26:48 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-03 23:26:48 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50248	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	1223	OUT	GET /playback/v1/accounts/6415665815001/videos/6348145722112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	574	IN	HTTP/1.1 200 OK Connection: close Account-Status: APPROVED Content-Type: application/json; charset=UTF-8 Policy-Key-Accountid: Powered-By: BC Powered-From: us-east-1b X-Has-Manifest-Url-Ttl: true Expires: Sun, 03 Mar 2024 23:36:09 GMT Date: Sun, 03 Mar 2024 23:26:48 GMT X-Served-By: cache-ewr18162-EWR X-Cache: HIT X-Cache-Hits: 27 Bcov-Request-Id: epa-4b91aed710bd, epa-48476f575193-cr, epa-378ecb987919-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: * transfer-encoding: chunked
2024-03-03 23:26:48 UTC	5	IN	Data Raw: 38 35 33 0d 0a Data Ascii: 853
2024-03-03 23:26:48 UTC	1371	IN	Data Raw: 7b 22 70 6f 73 74 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 31 32 38 30 78 37 32 30 2f 33 34 73 34 38 35 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 30 39 35 33 30 36 34 39 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 31 Data Ascii: {"poster":"https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/1280x720/34s485ms/match/image.jpg?akamai_token=exp=1709530649~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/1
2024-03-03 23:26:48 UTC	760	IN	Data Raw: 2f 33 34 73 34 38 35 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 2a 7e 68 6d 61 63 3d 63 65 30 30 39 38 63 35 61 61 39 64 33 64 62 65 63 62 63 65 39 66 33 37 30 32 31 33 64 37 31 39 62 62 33 31 31 61 31 65 39 62 66 62 36 34 36 34 31 66 33 64 37 32 61 36 37 38 64 38 38 30 39 38 22 7d 5d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 74 61 67 73 22 3a 5b 5d 2c 22 63 75 65 5f 70 6f 69 6e 74 73 22 3a 5b 5d 2c 22 63 75 73 74 6f 6d 5f 66 69 65 6c 64 73 22 3a 7b 7d 2c 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 36 34 31 35 36 36 35 38 31 35 30 30 31 22 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 63 6f 64 65 63 73 22 3a 22 61 76 63 31 2c 6d 70 34 61 22 2c 22 65 78 74 5f 78 5f 76 65 72 73 69 6f 6e 22 3a 22 34 22 2c 22 73 72 63 22 3a 22 68 74 Data Ascii: /34s485ms/match/image.jpg*~hmac=ce0098c5aa9d3dbecbce9f370213d719bb311a1e9bfb64641f3d72a678d88098"}],"description":null,"tags":[],"cue_points":[],"custom_fields":{},"account_id":"6415665815001","sources":[{"codecs":"avc1,mp4a","ext_x_version":"4","src":"ht
2024-03-03 23:26:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:48 UTC	4	IN	Data Raw: 36 38 0d 0a Data Ascii: 68
2024-03-03 23:26:48 UTC	104	IN	Data Raw: 4e 6a 56 6c 4e 54 45 31 4e 44 6c 66 4e 6a 67 31 4f 54 64 6c 4d 47 4e 6a 4d 7a 4a 69 59 6d 4d 7a 4e 6a 49 77 4d 6a 4e 6a 4d 54 59 31 4e 54 63 33 4e 44 63 32 59 7a 5a 6c 4d 54 59 78 59 54 63 35 5a 54 4d 30 59 6a 59 7a 4d 6a 45 35 5a 6a 6b 7a 4e 7a 64 6d 4d 6a 42 6a 4e 32 45 30 5a 54 56 6a 4d 67 25 33 44 25 33 44 Data Ascii: NjVlNTE1NDlfNjg1OTdlMGNjMzJiYmMzNjIwMjNjMTY1NTc3NDc2YzZlMTYxYTc5ZTM0YjYzMjE5ZjkzNzdmMjBjN2E0ZTVjMg%3D%3D
2024-03-03 23:26:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:48 UTC	5	IN	Data Raw: 39 62 32 0d 0a Data Ascii: 9b2
2024-03-03 23:26:48 UTC	1371	IN	Data Raw: 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 64 61 73 68 2b 78 6d 6c 22 7d 2c 7b 22 61 76 67 5f 62 69 74 72 61 74 65 22 3a 32 36 37 32 30 30 30 2c 22 63 6f 64 65 63 22 3a 22 48 32 36 34 22 2c 22 63 6f 6e 74 61 69 6e 65 72 22 3a 22 4d 50 34 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 36 38 39 31 37 2c 22 68 65 69 67 68 74 22 3a 37 32 30 2c 22 73 69 7a 65 22 3a 32 33 30 34 34 37 32 31 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 70 6d 70 34 2f 73 74 61 74 69 63 2f 63 6c 65 61 72 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 Data Ascii: ","type":"application/dash+xml"},{"avg_bitrate":2672000,"codec":"H264","container":"MP4","duration":68917,"height":720,"size":23044721,"src":"https://bcbolt446c5271-a.akamaihd.net/media/v1/pmp4/static/clear/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479
2024-03-03 23:26:48 UTC	1111	IN	Data Raw: 2f 6d 65 64 69 61 2f 76 31 2f 74 65 78 74 2f 76 74 74 2f 63 6c 65 61 72 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 64 33 30 38 61 31 37 66 2d 38 62 65 62 2d 34 30 66 36 2d 38 33 38 38 2d 38 31 64 61 63 37 30 36 31 38 65 65 2f 74 65 78 74 2e 76 74 74 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 30 39 35 33 30 36 34 39 7e 61 63 6c 3d 2f 6d 65 64 69 61 2f 76 31 2f 74 65 78 74 2f 76 74 74 2f 63 6c 65 61 72 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 64 33 30 38 61 31 37 66 2d 38 62 65 62 2d 34 30 66 36 2d 38 33 38 38 2d 38 Data Ascii: /media/v1/text/vtt/clear/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/d308a17f-8beb-40f6-8388-81dac70618ee/text.vtt?akamai_token=exp=1709530649~acl=/media/v1/text/vtt/clear/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/d308a17f-8beb-40f6-8388-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50245	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FpT1ZXTGXyk96vcr3fKHXtA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181129%2F500x500%2Fnets3_wbg.png&client=76f99bdb8f78cd44cc0b&signature=fd7a4e9572597087adb989684c757629a308c76a HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	994	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2111268 Cache-Control: public, max-age=2592000 Cache-Tag: 192383292334722526710999447282223933400,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:48 GMT Edge-Cache-Tag: 192383292334722526710999447282223933400,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "6814b14222bff2d882f811c571a57c6f" Last-Modified: Thu, 08 Feb 2024 12:59:01 GMT Server: ECAcc (nya/78DC) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2304,owidth=50,oheight=50,obytes=1900,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 28b1dc7faf6b3b077555aaa872662e1b X-Served-By: cache-iad-kjyo7100176-IAD X-Timer: S1707397140.219926,VS0,VE227 Content-Length: 2304 Connection: close
2024-03-03 23:26:48 UTC	2304	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c 00 00 00 00 00 00 01 01 01 00 00 00 06 06 06 00 00 00 00 00 00 2d 2d 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 24 24 00 00 00 03 03 03 00 00 00 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 0a 0a 00 00 00 00 00 00 16 16 16 14 14 14 00 00 00 00 00 00 06 06 06 00 00 00 0b 0b 0b 28 28 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 07 07 07 1f 1f 1f 25 25 25 06 06 06 19 19 19 2c 2c 2c 37 37 37 00 00 00 09 09 09 01 01 01 00 00 00 00 00 00 00 00 00 10 10 10 05 05 05 00 Data Ascii: PNGIHDR22)xPLTEGpL---$$$((("""%%%,,,777

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50255	54.211.182.170	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	901	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=IKSGvoFb1RGVed5; matchmedianet=5
2024-03-03 23:26:48 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Sun, 03 Mar 2024 23:26:48 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:IKSGvoFb1RGVed5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-092148683c9200aab@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=IKSGvoFb1RGVed5; Domain=.w55c.net; Expires=Thu, 03 Apr 2025 23:26:48 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Tue, 02 Apr 2024 23:26:48 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50235	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	844	OUT	GET /cksync.php?cs=1&type=55953&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1
2024-03-03 23:26:48 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1;Expires=Sun, 17 Mar 2024 23:26:48 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:48 GMT Connection: close
2024-03-03 23:26:48 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:48 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50252	35.211.178.172	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	720	OUT	GET /ul_cb/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; c=1709508406; tuuid_lu=1709508406
2024-03-03 23:26:48 UTC	608	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //rtb.mfadsrvr.com/sync?ssp=bidswitch&bidswitch_ssp_id=medianet&bsw_user_id=9c710547-ba4c-4952-9692-0a9d5f6959dd&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; path=/; expires=Mon, 03-Mar-2025 23:26:48 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1709508408; path=/; expires=Mon, 03-Mar-2025 23:26:48 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50253	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:48 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F51_f4QnCU8r4D1F_7XPNdQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fbucks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b6b15c2623764f5bc9deea68bb4e35729754770 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:48 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133428 Cache-Control: public, max-age=2592000 Cache-Tag: 322227869617563092129972873501378346770,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000083-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 109 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:48 GMT Edge-Cache-Tag: 322227869617563092129972873501378346770,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "232bfee11dc835e60363e3d23a3abf1a" Expiration: expiry-date="Fri, 24 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 25 Nov 2023 05:13:52 GMT Server: ECAcc (nya/7966) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2004,owidth=50,oheight=50,obytes=2269 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100028-IAD X-Timer: S1702190899.165607,VS0,VE169 Content-Length: 2004 Connection: close
2024-03-03 23:26:48 UTC	2004	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c e1 e1 c7 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 de df c4 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 ef eb d3 ef ea d2 f0 eb d2 be c9 ac f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 f0 eb d2 de df c4 f0 ea d2 f0 eb d2 c2 cb af f0 eb d2 f0 eb d2 cb d2 b6 e8 e5 cc ef eb d2 cf d5 b9 f0 eb d2 e6 e4 ca ad bd 9f d3 d7 bc f0 eb d2 ec e8 cf c8 d0 b4 f0 eb d2 c6 ce b2 f0 eb d2 96 ad 8d f0 eb d2 d1 d6 ba c0 ca ad b7 c4 a7 f0 eb d2 ea e7 cd f0 eb d2 f0 eb d2 eb e7 ce d0 d5 ba f0 eb d2 f0 eb d2 f0 eb d2 d6 d9 be f0 eb d2 ca d1 b5 f0 eb d2 f0 eb d2 d1 d6 ba ea e7 ce d5 d9 be eb Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50254	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	693	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fs1b.xLIhAHSp5WYuo1r1mQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20231120%2F500x500%2Fjazz_wbg.png&client=76f99bdb8f78cd44cc0b&signature=36a5d8fe3c3121052fc12b91fcf57994a0b7f32c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	1114	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1136971 Cache-Control: public, max-age=2592000 Cache-Tag: 509195577405588095762923472499769928873,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100166-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 52d0987a64dc8a28858d82dd5d91d831 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:49 GMT Edge-Cache-Tag: 509195577405588095762923472499769928873,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "9a4101980859c21b2ffa8adcd6788916" Last-Modified: Tue, 21 Nov 2023 19:29:45 GMT Server: ECAcc (nya/7937) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=984,owidth=50,oheight=50,obytes=923 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 52d0987a64dc8a28858d82dd5d91d831 X-Served-By: cache-iad-kiad7000173-IAD X-Timer: S1700595410.518050,VS0,VE2 Content-Length: 984 Connection: close
2024-03-03 23:26:49 UTC	984	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 01 89 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50257	52.46.143.56	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	847	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A11aqPOZCkc8owe-76Inpq0\|t
2024-03-03 23:26:49 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 5AF8J9XDDE752171EJ1A Set-Cookie: ad-id=A11aqPOZCkc8owe-76Inpq0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:26:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:26:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50249	169.197.150.7	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	620	OUT	GET /usersync/113?gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	526	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_dcf22e7770a94469b5d6a; Max-Age=47260800; SameSite=None; Expires=Mon, 1 Sep 2025 23:26:49 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240303%22%7D; Max-Age=47260800; SameSite=None; Expires=Mon, 1 Sep 2025 23:26:49 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Sun, 03 Mar 2024 23:26:48 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50270	52.223.22.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	698	OUT	GET /xuid?mid=7976&xuid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=205552980141694412277
2024-03-03 23:26:49 UTC	448	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=205552980141694412277; Max-Age=7776000; Expires=Sat, 01 Jun 2024 23:26:49 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-03 23:26:49 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50268	34.111.113.62	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	663	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	200	IN	HTTP/1.1 403 Forbidden Content-Length: 134 Content-Type: text/html; charset=UTF-8 Date: Sun, 03 Mar 2024 23:26:49 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:49 UTC	134	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 34 30 33 3c 2f 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e Data Ascii: <!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50258	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	888	OUT	GET /cksync.html?cs=1&vsid=3525099948919525000V10&type=tlt&refUrl=&vid=95083994863525099948919525000V10&ovsid=205552980141694412277&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1
2024-03-03 23:26:49 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 227 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-tlt=205552980141694412277~~1;Expires=Wed, 17 Apr 2024 23:26:49 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close
2024-03-03 23:26:49 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-03 23:26:49 UTC	77	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50266	52.46.143.56	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	721	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	831	IN	HTTP/1.1 302 Found Server: Server Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Connection: close x-amz-rid: 72DN299ESZYJV71FDZWJ Set-Cookie: ad-id=A5m4uM0keE5RtYimSg3trdQ\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:26:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB&gpp=DBAA&gpp_sid=-1&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50264	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	902	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=opx&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=42982cb5-8018-083c-39e4-9b7751c788d8 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1
2024-03-03 23:26:49 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1;Expires=Fri, 30 Aug 2024 23:26:49 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:49 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50240	40.76.134.238	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%205286816B-07A3-4831-82CF-92827DD7440E&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-03-03 23:26:49 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50281	52.86.42.47	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	809	OUT	GET /s/31327?gdpr_consent=&bidder_id=14481&gpp=DBAA&bidder_uuid=ZeUHNEt3uSYAABBfAETINAAA%26015&_li_chk=true&gpp_sid=-1&us_privacy=&gpdr=&previous_uuid=30dbf99058ab4bd6b77cdf8285912a1c HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=30dbf990-58ab-4bd6-b77c-df8285912a1c
2024-03-03 23:26:49 UTC	633	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Connection: close Location: https://dis.criteo.com/dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ Set-Cookie: _li_ss=CggKBgjdARCtFw; Max-Age=2592000; Expires=Tue, 02 Apr 2024 23:26:49 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=30dbf990-58ab-4bd6-b77c-df8285912a1c; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:49 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50269	40.76.134.238	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%207213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-03-03 23:26:49 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50256	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FKe39LUOwUzQN.gkOzB70lw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181220%2F500x500%2Fkings_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e6505ecf04d45160caf54563bd8e44f5b1ace420 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	1143	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 414689 Cache-Control: public, max-age=2592000 Cache-Tag: 447037762632325466587259649548813396100,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100135-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 125 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:49 GMT Edge-Cache-Tag: 447037762632325466587259649548813396100,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "d1db55c3575af5d237ebffe75de882a6" Expiration: expiry-date="Fri, 09 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 10 Feb 2024 02:38:54 GMT Server: ECAcc (nya/7960) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1972,owidth=50,oheight=50,obytes=2220,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100135-IAD X-Timer: S1709093720.187470,VS0,VE125 Content-Length: 1972 Connection: close
2024-03-03 23:26:49 UTC	1972	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 5b 2b 82 63 71 7a ff ff ff fc fb fc b9 a5 ca f7 f5 f9 de d5 e6 f3 ef f6 e0 e3 e4 a1 Data Ascii: PNGIHDR22)xPLTEGpL[+cqz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50277	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	795	OUT	GET /rum?cm_dsp_id=39&external_user_id=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&expiration=1712100407&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:26:49 UTC	993	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 85ed64c618740f7f-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:49 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:26:49 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W%2BkoQ3GYiwgiS55M3AGxcWDUmAPHmsJU8CT9iJ%2FET%2B7SPhWXmlh1URCMkJZXtujpNWpyhO2NDBthv51V6%2Bz59QwvNXf7HODVPpQVCGLQ8nhIxoUUIftHDv%2B0BUXi%2BU%2FcHcuuu2tnzo%2B9wQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50273	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	701	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FvxAd_migNyWyej2GLiLvRQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181212%2F500x500%2Fbulls_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=cff5d8d9a6572e4816d2fd3a3fb1bfa1900de6c2 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 395143 Cache-Control: public, max-age=2592000 Cache-Tag: 501724617890756827919658726096972277884,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100143-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:49 GMT Edge-Cache-Tag: 501724617890756827919658726096972277884,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "734c0f53f0bc346a49492a12a8817a12" Expiration: expiry-date="Thu, 08 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 09 Feb 2024 18:31:22 GMT Server: ECAcc (nya/7939) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1920,owidth=50,oheight=50,obytes=2528,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100143-IAD X-Timer: S1709113267.526545,VS0,VE1 Content-Length: 1920 Connection: close
2024-03-03 23:26:49 UTC	1920	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe fe fe fe fe fe fe ff ff ff ff ff ff bb c0 c3 ff ff ff f9 fa fa ff ff ff ff ff ff ff ff ff ff ff ff ab a3 a9 ff ff ff fd fd fe ff ff ff ff ff ff e8 ea eb 8a 94 98 ff ff ff af a7 ad ff ff ff f3 f4 f5 ff ff ff e6 e8 e9 cb cf d1 a5 ac b0 e0 e3 e4 ff ff ff 8e 97 9b ff ff ff 9f a7 ab cb cf d1 a8 af b2 9e 9f a4 b9 bc bf b4 ba bc f9 fa fa ff ff ff c7 cb cd aa b1 b4 a3 8a 95 f6 f6 f7 a6 94 9d fc fc fc a2 99 a0 e7 e9 ea aa ac b0 ff ff ff bf c4 c6 b6 bc be d3 d6 d8 b7 bc bf ff ff ff 6d 66 6f 9b 8c 95 aa b1 b4 a3 aa ad ff ff ff a9 b0 b3 9f a6 aa af 90 9c a4 9b a2 a8 Data Ascii: PNGIHDR22)xPLTEGpLmfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50250	52.44.19.224	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	752	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:49 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=3861fc3c-867b-43e0-b46a-259e2b0cd468&gdpr=0&gdpr_consent= Set-Cookie: cu=3861fc3c-867b-43e0-b46a-259e2b0cd468\|1709508409293; Path=/; Domain=ipredictive.com; Expires=Mon, 03 Mar 2025 23:26:49 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 4d30d926-c406-443f-8528-e36b4c9ea2ce Content-Length: 205 Connection: Close
2024-03-03 23:26:49 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 33 38 36 31 66 63 33 63 2d 38 36 37 62 2d 34 33 65 30 2d 62 34 36 61 2d 32 35 39 65 32 62 30 63 64 34 36 38 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=3861fc3c-867b-43e0-b46a-259e2b0cd468&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50259	185.184.8.90	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	638	OUT	GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	790	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:49 GMT vary: Accept-Encoding set-cookie: g=OU3AHrVubK0CqVNVWknR_1709508409330;Path=/;Domain=.creativecdn.com;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1709508409;Path=/;Domain=.creativecdn.com;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sun, 03 Mar 2024 23:26:49 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50272	34.196.218.225	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	757	OUT	GET /sync/pubmatic/7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:49 UTC	777	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50289	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1134	OUT	GET /ups/58746/sync?ui=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
2024-03-03 23:26:49 UTC	915	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://trc.taboola.com/sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&us_privacy=1YNN Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50305	151.101.1.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	478	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=[object%20Object] HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:26:49 UTC	965	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 22161 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:49 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-lga21953-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508409.297041,VS0,VE24 X-vcl-time-ms: 24 transfer-encoding: chunked
2024-03-03 23:26:49 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-03 23:26:49 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50285	69.194.240.13	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	966	OUT	GET /usersync2/rmpssp?sub=yahoo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-03-03 23:26:49 UTC	645	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:49 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%2C%22zdxidn%22%3A%222069.88%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Mon, 03 Mar 2025 23:26:49 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=3991806089 etag: RX3c4bc8e3ffb2488a8a78eb15aa2f9706005 connection: close
2024-03-03 23:26:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50301	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1703	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2617&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25308&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:49 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50262	69.194.240.13	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	981	OUT	GET /usersync/turn/3064127177736580335?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-03-03 23:26:49 UTC	812	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:49 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%7D; path=/; expires=Mon, 03 Mar 2025 23:26:49 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3DRX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005 connection: close
2024-03-03 23:26:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50287	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1047	OUT	GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
2024-03-03 23:26:49 UTC	955	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-OXNMhGxE2pE_.U31ZMV5jUVDosg_UYe0w5g-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50310	151.101.1.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	507	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:26:49 UTC	953	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Set-Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:49 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-ewr18126-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508409.296016,VS0,VE24 Vary: Accept-Encoding X-vcl-time-ms: 24 transfer-encoding: chunked
2024-03-03 23:26:49 UTC	4	IN	Data Raw: 35 34 0d 0a Data Ascii: 54
2024-03-03 23:26:49 UTC	84	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 38 34 30 34 64 65 61 30 2d 32 35 35 39 2d 34 30 39 32 2d 61 35 30 61 2d 32 34 31 30 66 34 39 30 37 31 32 63 2d 74 75 63 74 63 64 65 38 63 62 34 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4","isNewUser":false}}
2024-03-03 23:26:49 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50304	142.250.72.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	3602	OUT	GET /gampad/ads?pvsid=3589207970860027&correlator=145139669414128&eid=31081519%2C31081350%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202402220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_as_top_right_c%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a%2Cus_aol_hp_dt_top_center%2Cus_aol_hp_dt_mid_center&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8%2C%2F0%2F1%2F2%2F3%2F4%2F9&prev_iu_szs=300x600%2C300x250%2C300x250%2C728x90%7C970x250%7C3x1%2C970x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1%2C1&eri=4&sc=1&cookie_enabled=1&abxe=1&dt=1709508398540&adxs=-9%2C855%2C855%2C268%2C197&adys=-9%2C721%2C733%2C0%2C1841&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1%7C0%7C0%7C0%7C1&ucis=1%7C2%7C3%7C4%7C5&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.aol.com%2F&vis=1&psz=0x-1%7C300x600%7C300x600%7C1263x0%7C1121x290&msz=0x-1%7C300x600%7C300x0%7C1263x0%7C1121x290&fws=2%2C4%2C4%2C4%2C4&ohw=0%2C300%2C300%2C1263%2C1263&ga_vid=167189262.1709508399&ga_sid=1709508399&ga_hid=2079726794&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X2FzX3RvcF9yaWdodF9jIixbXV0sWyIvMjI4ODgxNTIyNzkvdXMvYW9sL2hwL2R0L3VzX2FvbF9ocF9kdF9hc190b3BfcmlnaHRfYiIsW11dLFsiLzIyODg4MTUyMjc5L3VzL2FvbC9ocC9kdC91c19hb2xfaHBfZHRfYXNfdG9wX3JpZ2h0X2EiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X3RvcF9jZW50ZXIiLFtdXSxbIi8yMjg4ODE1MjI3OS91cy9hb2wvaHAvZHQvdXNfYW9sX2hwX2R0X21pZF9jZW50ZXIiLFtdXV1dLG51bGwsM10.&dlt=1709508388026&idt=8752&prev_scp=loc%3Dtop_right%26noads%3D1%26y_pgid%3D1%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D2%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_right%26y_pgid%3D3%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_asbkt%3Dv2%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dtop_center%26y_pgid%3D4%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0%7Cloc%3Dmid_center%26y_pgid%3D5%26y_cc%3DUS%26y_cv%3D1%26y_ugd%3D4%26y_cid%3D8YHB8F956%26y_abt%3Dyhb%26y_fp%3Djhjj%26y_ufr%3D1%26y_dnb%3D1%26y_ref%3D0&cust_params=bucket%3Daol-aa-2%26colo%3Dus-east-1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Daol%26ver%3Dtd-app-aol%26pct%3Daolfrontpage%26pt%3Dhome%26spaceid%3D1197803361%26yrid%3D02r7skdiua1p4%26bka%3D0%26y_bx%3D1&adks=2925883975%2C3459255604%2C1294450886%2C274640380%2C2523778429&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:49 UTC	812	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2,-1,-1,-2,-2 Google-Creative-Id: -2,-1,-1,-2,-2 Google-MediationGroup-Id: -2,-2,-2 Google-MediationTag-Id: -2 Date: Sun, 03 Mar 2024 23:26:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-03 23:26:49 UTC	440	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 61 6f 6c 2f 68 70 2f 64 74 2f 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 61 73 5f 74 6f 70 5f 72 69 67 68 74 5f 63 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 36 30 30 2c 33 30 30 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 49 44 3d 66 61 37 66 36 31 61 37 35 37 35 37 62 35 63 65 3a 54 3d 31 37 30 39 35 30 38 34 30 39 3a 52 54 3d 31 37 30 39 35 30 38 34 30 39 3a 53 3d 41 4c 4e 49 5f 4d 5a 43 30 53 6c 41 61 74 6e 73 6b 4c 65 51 6f 4d 4a 42 36 59 54 65 30 54 4b 38 5a 51 22 2c 31 37 34 33 32 30 34 34 30 39 2c 22 2f 22 2c 22 61 6f 6c 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 63 66 30 33 38 36 63 35 65 63 Data Ascii: 8000{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_as_top_right_c":["html",0,null,null,0,600,300,1,0,null,null,null,null,[["ID=fa7f61a75757b5ce:T=1709508409:RT=1709508409:S=ALNI_MZC0SlAatnskLeQoMJB6YTe0TK8ZQ",1743204409,"/","aol.com",1],["UID=00000dcf0386c5ec
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 72 59 47 73 6c 58 71 7a 57 78 5a 6e 4d 77 61 31 30 48 68 73 6f 47 35 43 30 61 22 2c 22 43 4d 58 6c 36 59 75 66 32 59 51 44 46 57 45 61 54 77 67 64 6d 38 59 4f 57 67 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 41 2d 56 34 71 50 5a 4a 63 42 4a 69 76 39 45 35 4f 33 55 68 51 73 6c 6f 47 4c 65 6a 32 77 6f 50 4c 46 68 46 71 48 57 31 45 7a 6d 54 5f 50 6f 73 34 74 38 66 53 34 6c 6f 63 52 4d 71 39 72 4f 50 51 33 50 Data Ascii: rYGslXqzWxZnMwa10HhsoG5C0a","CMXl6Yuf2YQDFWEaTwgdm8YOWg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qPZJcBJiv9E5O3UhQsloGLej2woPLFhFqHW1EzmT_Pos4t8fS4locRMq9rOPQ3P
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 65 62 72 70 66 61 3a 20 74 72 75 65 2c 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 30 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 30 32 32 38 22 20 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 3d 22 5b 26 71 75 6f 74 3b 78 25 32 37 38 34 34 36 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b Data Ascii: <script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-version="r20240228" data-jc-flags="["x%278446'9efotm(&
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 26 65 61 28 22 4f 70 65 72 61 22 29 29 3b 76 61 72 20 69 61 3d 7b 7d 2c 78 3d 6e 75 6c 6c 3b 76 61 72 20 79 3d 53 79 6d 62 6f 6c 28 29 3b 76 61 72 20 6a 61 3d 7b 7d 2c 6b 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 67 21 3d 3d 6b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 6c 65 74 20 6e 61 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 Data Ascii: &ea("Opera"));var ia={},x=null;var y=Symbol();var ja={},ka={};function la(a){return!(!a\|\|"object"!==typeof a\|\|a.g!==ka)}function ma(a){return null!==a&&"object"===typeof a&&!Array.isArray(a)&&a.constructor===Object}let na;function z(a,b,c){if(!Array.isArr
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 63 6f 6e 73 74 20 66 3d 64 7c 7c 63 3f 61 5b 79 5d 7c 30 3a 30 3b 64 3d 64 3f 21 21 28 66 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 61 5b 67 5d 3d 78 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 63 26 26 63 28 66 2c 61 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 76 3d 3d 3d 6a 61 3f 61 2e 74 6f 4a 53 4f 4e 28 29 3a 74 61 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 3d 61 2e 6c 3b 6c 65 74 20 65 3d Data Ascii: n a}}function ya(a,b,c,d,e){const f=d\|\|c?a[y]\|0:0;d=d?!!(f&32):void 0;a=Array.prototype.slice.call(a);for(let g=0;g<a.length;g++)a[g]=xa(a[g],b,c,d,e);c&&c(f,a);return a}function za(a){return a.v===ja?a.toJSON():ta(a)};function D(a,b,c){const d=a.l;let e=
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 42 3b 63 6f 6e 73 74 20 65 3d 28 63 3f 61 2e 6c 3a 62 29 5b 79 5d 3b 61 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 66 2c 67 3b 69 66 28 6d 61 28 63 3d 62 5b 61 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 68 3d 63 3b 6c 65 74 20 6e 3d 7b 7d 2c 70 3d 21 31 3b 66 6f 72 28 76 61 72 20 6b 20 69 6e 20 68 29 7b 6c 65 74 20 6d 3d 68 5b 6b 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6d 29 29 7b 6c 65 74 20 72 3d 6d 3b 69 66 28 7a 28 6d 2c 64 2c 2b 6b 29 7c 7c 6c 61 28 6d 29 26 26 30 3d 3d 3d 6d 2e 73 69 7a 65 29 6d 3d 6e 75 6c 6c 3b 6d 21 3d 72 26 26 28 70 3d 21 30 29 7d 6e 75 6c 6c 21 3d 6d 3f 6e 5b 6b 5d 3d 6d 3a 70 3d 21 30 7d 69 66 28 70 29 7b 66 6f Data Ascii: oid 0:a.constructor.B;const e=(c?a.l:b)[y];a=b.length;if(!a)return b;let f,g;if(ma(c=b[a-1])){a:{var h=c;let n={},p=!1;for(var k in h){let m=h[k];if(Array.isArray(m)){let r=m;if(z(m,d,+k)\|\|la(m)&&0===m.size)m=null;m!=r&&(p=!0)}null!=m?n[k]=m:p=!0}if(p){fo
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 22 29 3b 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 63 2e 6c 65 6e 67 74 68 3b 30 3c 3d 28 62 3d 61 2e 69 6e 64 65 78 4f 66 28 63 2c 62 29 29 26 26 62 3c 64 3b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 28 33 38 3d 3d 66 7c 7c 36 33 3d 3d 66 29 69 66 28 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 65 29 2c 21 66 7c 7c 36 31 3d 3d 66 7c 7c 33 Data Ascii: #])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?=[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]))?(?:#([\\\\s\\\\S]))?$");function Na(a,b,c,d){for(var e=c.length;0<=(b=a.indexOf(c,b))&&b<d;){var f=a.charCodeAt(b-1);if(38==f\|\|63==f)if(f=a.charCodeAt(b+e),!f\|\|61==f\|\|3
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 28 63 7c 7c 65 29 7b 63 6f 6e 73 74 20 68 3d 6b 3d 3e 7b 63 26 26 63 28 6b 29 3b 69 66 28 65 29 7b 6b 3d 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3b 63 6f 6e 73 74 20 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 6b 2c 67 2c 76 6f 69 64 20 30 29 3b 30 3c 3d 6c 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 6b 2c 6c 2c 31 29 7d 4c 61 28 67 2c 22 6c 6f 61 64 22 2c 68 29 3b 4c 61 28 67 2c 22 65 72 72 6f 72 22 2c 68 29 7d 3b 4b 28 67 2c 22 6c 6f 61 64 22 2c 68 29 3b 4b 28 67 2c 22 65 72 72 6f 72 22 2c 68 29 7d 64 26 26 28 67 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 29 3b 66 26 26 28 67 2e 61 74 74 Data Ascii: (c\|\|e){const h=k=>{c&&c(k);if(e){k=a.google_image_requests;const l=Array.prototype.indexOf.call(k,g,void 0);0<=l&&Array.prototype.splice.call(k,l,1)}La(g,"load",h);La(g,"error",h)};K(g,"load",h);K(g,"error",h)}d&&(g.referrerPolicy="no-referrer");f&&(g.att
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 22 29 3b 76 61 72 20 69 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 68 3d 62 7d 7d 2c 6a 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 75 72 6c 3d 61 3b 74 68 69 73 2e 75 3d 21 21 62 3b 74 68 69 73 2e 64 65 70 74 68 3d 6e 75 6c 6c 7d 7d 3b 6c 65 74 20 51 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 6b 62 28 29 7b 63 6f 6e 73 74 20 61 3d 71 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 26 26 61 2e 74 69 6d 69 6e 67 3f Data Ascii: s?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)");var ib=class{constructor(a,b){this.g=a;this.h=b}},jb=class{constructor(a,b){this.url=a;this.u=!!b;this.depth=null}};let Q=null;function kb(){const a=q.performance;return a&&a.now&&a.timing?
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 3b 52 26 26 53 28 29 26 26 52 2e 6d 61 72 6b 28 62 29 3b 72 65 74 75 72 6e 20 61 7d 65 6e 64 28 61 29 7b 69 66 28 74 68 69 73 2e 67 26 26 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 76 61 6c 75 65 29 7b 61 2e 64 75 72 61 74 69 6f 6e 3d 28 6c 62 28 29 7c 7c 6b 62 28 29 29 2d 61 2e 76 61 6c 75 65 3b 76 61 72 20 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 3b 52 26 26 53 28 29 26 26 52 2e 6d 61 72 6b 28 62 29 3b 21 74 68 69 73 2e 67 7c 7c 32 30 34 38 3c 20 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 68 2e 70 75 73 68 28 61 29 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 61 2c 62 Data Ascii: .label}_${a.uniqueId}_start`;R&&S()&&R.mark(b);return a}end(a){if(this.g&&"number"===typeof a.value){a.duration=(lb()\|\|kb())-a.value;var b=`goog_${a.label}_${a.uniqueId}_end`;R&&S()&&R.mark(b);!this.g\|\|2048< this.h.length\|\|this.h.push(a)}}};function T(a,b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50311	15.197.193.217	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	768	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCKSpudft-N08EAUYBSABKAIyCwjmkqDpg_ndPBAFOAE.
2024-03-03 23:26:49 UTC	661	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= set-cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; expires=Mon, 03 Mar 2025 23:26:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCKSpudft-N08EAUSFwoIcHVibWF0aWMSCwjKgKTs7fjdPBAFGAEgASgCMgsInvemmYT53TwQBTgBWghwdWJtYXRpY2AC; expires=Mon, 03 Mar 2025 23:26:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-03 23:26:49 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 33 61 32 2d 61 35 65 63 2d 61 34 63 37 34 37 37 64 33 66 35 63 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50280	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	851	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=chPbtIxORfi6yCFJ0yqLHw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:49 UTC	662	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent= Date: Sun, 03 Mar 2024 23:26:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:49 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50283	50.31.142.95	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	750	OUT	GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=mo68x8gjbJJi9doJz8TR
2024-03-03 23:26:49 UTC	602	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=mo68x8gjbJJi9doJz8TR P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=mo68x8gjbJJi9doJz8TR; Path=/; Domain=zemanta.com; Expires=Mon, 03 Mar 2025 23:26:49 GMT; Max-Age=31536000; Secure; SameSite=None Date: Sun, 03 Mar 2024 23:26:49 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-03-03 23:26:49 UTC	111	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 61 6d 70 3b 74 79 70 65 3d 7a 65 6d 26 61 6d 70 3b 6f 76 73 69 64 3d 6d 6f 36 38 78 38 67 6a 62 4a 4a 69 39 64 6f 4a 7a 38 54 52 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=mo68x8gjbJJi9doJz8TR">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50284	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	751	OUT	GET /ul_cb/sync?ssp=medianet&ssp_user_id=3525100008919577000V10 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid_lu=1709508407; ssh=!intentiq,1709508407; tuuid=3b652fc1-53a0-40de-ba73-a4ae557bd47f; c=1709508407
2024-03-03 23:26:49 UTC	759	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:49 GMT Location: //contextual.media.net/cksync.php?type=mf&ovsid=3b652fc1-53a0-40de-ba73-a4ae557bd47f&cs=1 Set-Cookie: tuuid=3b652fc1-53a0-40de-ba73-a4ae557bd47f; path=/; expires=Tue, 03-Mar-2026 23:26:49 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1709508409; path=/; expires=Tue, 03-Mar-2026 23:26:49 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!medianet,1709508409!intentiq,1709508407; path=/; expires=Tue, 03-Mar-2026 23:26:49 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50290	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1035	OUT	GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
2024-03-03 23:26:49 UTC	794	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://tags.bluekai.com/site/19505?id=y-RZbsowVE2pJUqo61lnbO500m2RcYNsnMLcM-~A Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50274	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	882	OUT	GET /cksync.php?cs=1&type=sov&ovsid=IQveALZHlnPGc8kXQNeadO_F&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1
2024-03-03 23:26:49 UTC	667	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-sov=IQveALZHlnPGc8kXQNeadO_F~~1;Expires=Fri, 30 Aug 2024 23:26:49 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:49 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50294	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	388	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:49 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Sun, 03 Mar 2024 23:36:49 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50278	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	734	OUT	GET /rum?cm_dsp_id=4&external_user_id=4228731401736629831 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:26:49 UTC	987	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 85ed64c6df4c8ce8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:49 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:26:49 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OPeSh73%2Fo3hKkXdQq5PKXre3gW%2Bpjto1au%2FAsgTv6yIYm%2FX4gAah9Ese2pnXwAGlcKFgz9fCQGZ4RzZC3GTQplrgg6pKn3PErJZ%2FcGvW2HgHeWeGpQSOLfK38giZWGPXZ9WayITWNdAxHg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50308	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	923	OUT	GET /cksync.php?cs=1&type=apx&ovsid=2056953496763385149&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:49 UTC	662	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-apx=2056953496763385149~~1;Expires=Fri, 31 May 2024 23:26:49 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:49 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50271	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	863	OUT	GET /pixel?google_nid=pubmatic&google_hm=NzIxM0RCQjQtOEM0RS00NUY4LUJBQzgtMjE0OUQzMkE4QjFG&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:49 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= Date: Sun, 03 Mar 2024 23:26:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:49 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 6a 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50260	192.184.68.254	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	737	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	828	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=-Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EM8BCwGkK_ijAA; expires=Sat, 01-Jun-2024 23:26:49 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=65e50739-75b0a-12281-057cd; expires=Thu, 03-Apr-2025 23:26:49 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50313	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	778	OUT	GET /pixel?gpp=DBAA&gpp_sid=-1&google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZeUHNEt3uSYAABBfAETINAAA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:49 UTC	699	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEOUXsq40wyL1RuRxz9UqLQE&google_cver=1&gpp=DBAA&gpp_sid=-1 Date: Sun, 03 Mar 2024 23:26:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 342 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:49 UTC	342	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 63 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 34 35 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 43 41 45 53 45 4f 55 58 73 71 34 30 77 79 4c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dsum-sec.casalemedia.com/crum?cm_dsp_id=45&external_user_id=CAESEOUXsq40wyL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50299	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1714	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2620&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25308&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:49 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50275	35.211.233.246	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	730	OUT	GET /sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic HTTP/1.1 Host: a.sportradarserving.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	744	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:49 GMT Location: https://a.sportradarserving.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic Set-Cookie: zuuid=9f772c54-4a6c-45eb-91e5-92ed9408d752; path=/; expires=Mon, 03-Mar-2025 23:26:49 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: c=1709508409; path=/; expires=Mon, 03-Mar-2025 23:26:49 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_lu=1709508409; path=/; expires=Mon, 03-Mar-2025 23:26:49 GMT; domain=sportradarserving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50232	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	905	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=adb&refUrl=&vid=95083994863525099948919525000V10&ovsid=ZeUHNAAAAlu_8wAh&axid_e=&_test=ZeUHNAAAAlu_8wAh HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1
2024-03-03 23:26:49 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-adb=ZeUHNAAAAlu_8wAh~~1;Expires=Fri, 30 Aug 2024 23:26:49 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:49 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50307	35.211.178.172	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1049	OUT	GET /sync?ssp=criteo&custom_data=YzXp-V9qdWFuQ2trRyUyRkRua0EzQjFTSFhHZm1WMjB6SUVHY3o1SXVWdDNyTG1RTkpadlFma3dka0hHQW8xbEhQVVhhaW5neHN3JTJGTURKUGh4RUlaOGtBNlBuV3FURW1qNklkNTRhMkZwUFhzZG5DcXlCeTElMkJUc2VKVSUyQjMwRmNsMXE3eEhZN01sbiUyRk1yOFUzbFVVQmw2VWt6NzM3dUVaREE1Y0JQRnRSVnlUTERDV3l2OVFINjA4YXIlMkJHWjBsTDYxdzJEdkc&gdpr=&gdpr_consent=&us_privacy=&cr_user_id=k-2lV_f5hyr-U_3dvKgwvX52_tI86LV38FMRUpJQ HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; c=1709508406; tuuid_lu=1709508406
2024-03-03 23:26:49 UTC	784	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //pixel.tapad.com/idsync/ex/receive?partner_id=3205&partner_device_id=9c710547-ba4c-4952-9692-0a9d5f6959dd&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dcriteo%26user_id%3D Set-Cookie: custom_data=YzXp-V9qdWFuQ2trRyUyRkRua0EzQjFTSFhHZm1WMjB6SUVHY3o1SXVWdDNyTG1RTkpadlFma3dka0hHQW8xbEhQVVhhaW5neHN3JTJGTURKUGh4RUlaOGtBNlBuV3FURW1qNklkNTRhMkZwUFhzZG5DcXlCeTElMkJUc2VKVSUyQjMwRmNsMXE3eEhZN01sbiUyRk1yOFUzbFVVQmw2VWt6NzM3dUVaREE1Y0JQRnRSVnlUTERDV3l2OVFINjA4YXIlMkJHWjBsTDYxdzJEdkc; path=/; expires=Sun, 03-Mar-2024 23:31:49 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50298	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1703	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2621&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=25310&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:49 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50237	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	984	OUT	POST /p?s=1197803361&t=1709508403162&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=us-east-1&ads_failure_total=0&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=1&ads_slot_top_failure=0&ads_slot_top_total=0 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g
2024-03-03 23:26:49 UTC	1117	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:26:49 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50246	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1077	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=2056953496763385149&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; pi=156078:2; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:49 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 09:35:59 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 09:35:59 GMT; path=/ Set-Cookie: PugT=1709458559; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:35:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50315	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F6zBU_wJNcAFiGnGb.42RrQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181221%2F500x500%2Fwizards_wbg.png&client=76f99bdb8f78cd44cc0b&signature=834585294cb63f27e5a56fca336a13289db2965b HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	1131	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 395238 Cache-Control: public, max-age=2592000 Cache-Tag: 290150206441684456702470793132869270842,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21981-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:49 GMT Edge-Cache-Tag: 290150206441684456702470793132869270842,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "d489df4119835883df2f9a9d101126a0" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 23:18:19 GMT Server: ECAcc (nya/7981) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2132,owidth=50,oheight=50,obytes=2752,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100130-IAD X-Timer: S1706521172.691346,VS0,VE7 Content-Length: 2132 Connection: close
2024-03-03 23:26:49 UTC	2132	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c cb d4 d9 d7 de e2 df e5 e8 c4 ce d4 c4 ce d4 c7 d0 d6 c4 ce d4 c4 ce d4 c4 ce d4 c4 ce d4 d3 da df c4 ce d4 da e0 e4 c8 d1 d7 ca d3 d8 c5 cf d5 cf d7 dc d6 dd e1 e2 e7 ea c4 ce d4 cd d6 db c4 ce d4 db e1 e5 db e1 e5 e2 e7 ea c8 d2 d7 c9 d3 d8 d6 dd e1 c5 cf d5 cf d7 dc c4 ce d4 00 2b 5c ff ff ff e3 18 37 c4 ce d4 c5 cf d5 f6 f8 f9 02 2d 5d f2 f4 f7 fd fd fe e7 eb ee ff fe fe fe fe fe f8 f9 fa fc fc fd fc e4 e7 e2 e7 ea 05 2f 5f 2b 4f 77 f5 f6 f8 f3 f6 f7 27 4c 75 f1 f3 f5 e4 21 3f f6 f7 f9 fd f1 f3 09 33 62 07 31 61 01 2c 5c 0a 34 63 0e 37 65 0d 36 65 67 81 9e eb 5a 70 e7 3c 56 cc d4 de 18 3f 6b dd e3 e9 48 67 8a 44 63 87 15 Data Ascii: PNGIHDR22)xPLTEGpL+\7-]/_+Ow'Lu!?3b1a,\4c7e6egZp<V?kHgDc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50282	185.184.8.90	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	738	OUT	GET /cm-notify?pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZeUHNEt3uSYAABBfAETINAAA%26015&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=QddgssbLiqrddLde9dvK_1709508408046; ts=1709508408
2024-03-03 23:26:49 UTC	496	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:49 GMT vary: Accept-Encoding location: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=133&external_user_id=VrYooxROk2iWhZayXuk_OT1S2cFU4tRdIMkcva8DRMA&pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZeUHNEt3uSYAABBfAETINAAA%26015&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sun, 03 Mar 2024 23:26:49 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50293	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-03-03 23:26:49 UTC	795	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:49 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFNcl9rN0x5ZzRBQUJUcldCQ05kUQ&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Csyn%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAMr_k7Lyg4AABTrWBCNdQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:49 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:49 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50263	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FMHkI0ocTdEcipo8RUUVItA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181211%2F500x500%2Fhawks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2c0289aeb083f0491025b87ca62a5aa4ef58a39e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133432 Cache-Control: public, max-age=2592000 Cache-Tag: 269445152320704268982656905370323062447,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000165-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:49 GMT Edge-Cache-Tag: 269445152320704268982656905370323062447,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "c7fe143394f0ca830da15bd381fd532e" Expiration: expiry-date="Thu, 18 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 19 Jan 2024 21:45:07 GMT Server: ECAcc (nya/78B2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1999,owidth=50,oheight=50,obytes=2182,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000165-IAD X-Timer: S1707374978.836096,VS0,VE2 Content-Length: 1999 Connection: close
2024-03-03 23:26:49 UTC	1999	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50302	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1714	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2622&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=25310&req_size=300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:49 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50303	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1703	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2619&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25308&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:49 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50296	142.251.40.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	484	OUT	GET /pagead/js/car.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Accept: application/javascript Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:49 UTC	687	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 4204 X-XSS-Protection: 0 Date: Sun, 03 Mar 2024 23:26:49 GMT Expires: Mon, 04 Mar 2024 00:26:49 GMT Cache-Control: public, max-age=3600 ETag: 562132933256787570 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:49 UTC	565	IN	Data Raw: 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 65 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 29 26 26 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 2e 72 61 77 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 Data Ascii: /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var e=this\|\|self,f=function(a){return a};/ SPDX-License-Identifier: Apache-2.0 */ function g(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function h(a)
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 6d 29 7b 76 61 72 20 64 3d 6e 75 6c 6c 3b 76 61 72 20 62 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 62 26 26 62 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 74 72 79 7b 64 3d 62 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 7d 29 7d 63 61 74 63 68 28 63 29 7b 65 2e 63 6f 6e 73 6f 6c 65 26 26 65 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 6d 3d 64 7d 61 3d 28 64 3d 6d 29 3f 64 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 70 28 61 29 7d 3b 76 61 72 20 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 Data Ascii: m){var d=null;var b=e.trustedTypes;if(b&&b.createPolicy)try{d=b.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}m=d}a=(d=m)?d.createScriptURL(a):a;return new p(a)};var t=class{constr
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 5c 6e 20 20 20 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 20 45 52 52 4f 52 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 5c 6e 5c 6e 20 20 20 20 49 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 79 6f 75 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 63 61 6c 6c 20 61 20 74 65 6d 70 6c 61 74 65 20 74 61 67 20 66 75 6e 63 74 69 6f 6e 20 28 66 6e 60 2e 2e 2e 60 29 5c 6e 20 20 20 20 75 73 69 6e 67 20 74 68 65 20 6e 6f 72 6d 61 6c 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 74 61 78 20 28 66 6e 28 2e 2e 2e 29 29 2c 20 77 68 69 63 68 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 5c 6e Data Ascii: .length)throw new TypeError("\n ############################## ERROR ##############################\n\n It looks like you are trying to call a template tag function (fn`...`)\n using the normal function syntax (fn(...)), which is not supported.\n
2024-03-03 23:26:49 UTC	1135	IN	Data Raw: 29 3b 69 66 28 21 2f 5e 5b 5e 3a 5d 2a 28 3a 5b 30 2d 39 5d 2b 29 3f 24 2f 69 2e 74 65 73 74 28 63 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 22 29 3b 20 0a 69 66 28 21 2f 28 5e 7c 5c 2e 29 5b 61 2d 7a 5d 5b 5e 2e 5d 2a 24 2f 69 2e 74 65 73 74 28 63 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 68 65 20 74 6f 70 2d 6c 65 76 65 6c 20 64 6f 6d 61 69 6e 20 6d 75 73 74 20 73 74 61 72 74 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 2e 22 29 3b 63 3d 21 30 7d 65 6c 73 65 20 63 3d 21 31 3b 69 66 28 21 63 29 69 66 28 2f 5e 5c 2f 2f 2e 74 65 73 74 28 62 29 29 69 66 28 22 2f 22 3d 3d 3d 62 7c 7c 31 3c 62 2e 6c 65 6e 67 74 68 26 26 22 2f 22 21 3d 3d 62 5b 31 5d 26 26 22 5c 5c 22 21 3d 3d 62 5b 31 5d 29 63 Data Ascii: );if(!/^[^:](:[0-9]+)?$/i.test(c))throw Error("Invalid port number."); if(!/(^\|\.)[a-z][^.]$/i.test(c))throw Error("The top-level domain must start with a letter.");c=!0}else c=!1;if(!c)if(/^\//.test(b))if("/"===b\|\|1<b.length&&"/"!==b[1]&&"\\"!==b[1])c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50267	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	824	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:49 UTC	736	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEAIvvYGKi3MwJbcEVt_pRgM&google_cver=1 Date: Sun, 03 Mar 2024 23:26:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 379 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:49 UTC	379	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50291	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1035	OUT	GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
2024-03-03 23:26:49 UTC	811	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://aa.agkn.com/adscores/g.pixel?sid=9202214988&yho=y-vT1tesVE2p49QYkHV_eeiJNdnDAIick8CcI-~A Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50288	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1055	OUT	GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
2024-03-03 23:26:49 UTC	844	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://uipglob.semasio.net/oath/1/info?sType=sync&_sdv&sExtCookieId=y-RKPC2uxE2oP_.YzvaoufWXPgbw9SyuMi_tM-~A&sInitiator=external Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50297	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1703	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2621&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=25310&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:49 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:49 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50314	35.236.220.17	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=CA2F41ACCA684739A1CE374B350A0FEF; Path=/; domain=simpli.fi; Expires=Tue, 04-Mar-25 23:26:49 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=CA2F41ACCA684739A1CE374B350A0FEF; Path=/; domain=simpli.fi; Expires=Tue, 04-Mar-25 23:26:49 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:CA2F41ACCA684739A1CE374B350A0FEF Expires: Sat, 02 Mar 2024 23:26:49 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-03 23:26:49 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50316	162.248.18.34	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	922	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-nLNhotxE2uVq21nL64vd2.9J7PPx9gY-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:49 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:49 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1709508409; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:49 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50300	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1083	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC=19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b
2024-03-03 23:26:49 UTC	514	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19ac~2h3b:19aj~2h3b:19bn~2h3b:19bu~2h3b:19cu~2h3b:19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.94
2024-03-03 23:26:49 UTC	59	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 32 4d 37 4c 7a 75 74 45 32 75 49 59 33 2e 45 65 6a 67 4b 39 79 4c 65 76 53 4e 63 66 38 58 2e 33 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30{"axid": "y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50318	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1042	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1813050730410820489 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:49 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-1813050730410820489; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:26:48 GMT; path=/ Set-Cookie: PugT=1709508408; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:48 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50312	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1064	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:IKSGvoFb1RGVed5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:49 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 09:58:36 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 09:58:36 GMT; path=/ Set-Cookie: PugT=1709459916; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:58:36 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50306	151.101.1.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	482	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=%5Bobject%20Object%5D HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:26:49 UTC	965	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 16802 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:49 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-lga21956-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508410.723333,VS0,VE18 X-vcl-time-ms: 18 transfer-encoding: chunked
2024-03-03 23:26:49 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-03 23:26:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-03 23:26:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50320	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	3063	OUT	POST /p?_V=test&V_sec=pb&evt=ad_event&t=0.7705118695701065&_sqno=2&ts=9534&auto=false&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=init&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.33&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=NaN&adUrl=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&view=100%25&mtype=na&ad_sys=&ad_lng=&pos=&taken=&r_code=&tag=&client=&crid=&adlbl=&ad_evt=ima3-ready&adblocker=false HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:26:49 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 2 date: Sun, 03 Mar 2024 23:26:49 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50319	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	924	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:49 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50321	142.251.40.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	731	OUT	GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.aol.com%2F HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	832	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Date: Sun, 03 Mar 2024 23:26:49 GMT Expires: Sun, 03 Mar 2024 23:26:49 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 13732 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 03-Mar-2024 23:41:49 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:49 UTC	420	IN	Data Raw: 5b 6e 75 6c 6c 2c 5b 5b 5b 22 31 30 33 35 31 32 36 39 38 22 5d 2c 5b 22 31 30 38 33 34 37 31 30 35 22 5d 2c 5b 22 31 32 31 31 32 34 35 39 34 22 5d 2c 5b 22 32 31 37 38 33 33 34 37 33 30 39 22 5d 2c 5b 22 32 32 30 36 30 30 36 39 35 31 34 22 5d 2c 5b 22 32 32 38 38 38 31 35 32 32 37 39 22 5d 2c 5b 22 32 34 37 34 36 37 37 39 22 5d 2c 5b 22 33 33 37 39 22 5d 2c 5b 22 36 31 37 36 33 38 30 36 22 5d 2c 5b 22 31 30 30 30 39 30 38 22 5d 2c 5b 22 31 30 30 30 39 32 32 22 5d 2c 5b 22 31 30 30 31 30 34 39 22 5d 2c 5b 22 31 30 30 31 32 31 39 22 5d 2c 5b 22 31 30 30 31 32 38 30 32 30 22 5d 2c 5b 22 31 30 30 31 35 33 35 22 5d 2c 5b 22 31 30 30 31 37 33 33 22 5d 2c 5b 22 31 30 30 32 33 30 34 22 5d 2c 5b 22 31 30 30 32 34 35 33 22 5d 2c 5b 22 31 30 30 32 36 30 31 22 5d 2c Data Ascii: [null,[[["103512698"],["108347105"],["121124594"],["21783347309"],["22060069514"],["22888152279"],["24746779"],["3379"],["61763806"],["1000908"],["1000922"],["1001049"],["1001219"],["100128020"],["1001535"],["1001733"],["1002304"],["1002453"],["1002601"],
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 36 22 5d 2c 5b 22 31 30 30 38 30 31 38 22 5d 2c 5b 22 31 30 30 38 37 32 35 22 5d 2c 5b 22 31 30 30 39 31 33 36 22 5d 2c 5b 22 31 30 30 39 33 31 30 22 5d 2c 5b 22 31 30 30 39 33 37 39 22 5d 2c 5b 22 31 30 30 39 38 31 33 22 5d 2c 5b 22 31 30 30 39 39 32 36 22 5d 2c 5b 22 31 30 30 39 39 36 36 22 5d 2c 5b 22 31 30 31 30 36 36 39 22 5d 2c 5b 22 31 30 31 30 37 38 30 22 5d 2c 5b 22 31 30 31 30 38 32 37 22 5d 2c 5b 22 31 30 31 30 38 39 33 22 5d 2c 5b 22 31 30 31 31 36 34 32 22 5d 2c 5b 22 31 30 31 31 37 39 32 22 5d 2c 5b 22 31 30 31 32 34 36 37 22 5d 2c 5b 22 31 30 31 33 30 31 35 22 5d 2c 5b 22 31 30 31 33 33 36 31 22 5d 2c 5b 22 31 30 31 33 33 36 36 39 22 5d 2c 5b 22 31 30 31 33 37 36 35 22 5d 2c 5b 22 31 30 31 33 39 36 32 22 5d 2c 5b 22 31 30 31 33 39 36 34 22 Data Ascii: 6"],["1008018"],["1008725"],["1009136"],["1009310"],["1009379"],["1009813"],["1009926"],["1009966"],["1010669"],["1010780"],["1010827"],["1010893"],["1011642"],["1011792"],["1012467"],["1013015"],["1013361"],["10133669"],["1013765"],["1013962"],["1013964"
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 5b 22 31 30 35 35 36 34 37 22 5d 2c 5b 22 31 30 35 35 37 32 39 22 5d 2c 5b 22 31 30 35 36 39 33 30 22 5d 2c 5b 22 31 30 35 37 35 34 31 38 22 5d 2c 5b 22 31 30 35 37 39 31 30 22 5d 2c 5b 22 31 30 35 38 34 34 39 22 5d 2c 5b 22 31 30 36 31 33 34 34 22 5d 2c 5b 22 31 30 36 33 34 36 35 22 5d 2c 5b 22 31 30 36 33 39 31 33 38 22 5d 2c 5b 22 31 30 36 34 33 38 31 22 5d 2c 5b 22 31 30 36 36 39 30 39 22 5d 2c 5b 22 31 30 36 37 30 39 33 22 5d 2c 5b 22 31 30 36 37 35 34 30 22 5d 2c 5b 22 31 30 36 38 30 35 30 35 22 5d 2c 5b 22 31 30 36 39 30 34 32 22 5d 2c 5b 22 31 30 36 39 34 39 32 22 5d 2c 5b 22 31 30 37 31 35 39 35 22 5d 2c 5b 22 31 30 37 31 37 37 37 22 5d 2c 5b 22 31 30 37 32 32 30 38 22 5d 2c 5b 22 31 30 37 32 36 38 33 30 22 5d 2c 5b 22 31 30 37 33 33 36 31 22 5d Data Ascii: ["1055647"],["1055729"],["1056930"],["10575418"],["1057910"],["1058449"],["1061344"],["1063465"],["10639138"],["1064381"],["1066909"],["1067093"],["1067540"],["10680505"],["1069042"],["1069492"],["1071595"],["1071777"],["1072208"],["10726830"],["1073361"]
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 30 22 5d 2c 5b 22 31 34 32 38 35 33 36 37 22 5d 2c 5b 22 31 34 33 36 34 35 31 36 22 5d 2c 5b 22 31 34 33 36 38 30 34 37 22 5d 2c 5b 22 31 34 34 34 33 37 34 37 22 5d 2c 5b 22 31 34 34 34 38 33 35 22 5d 2c 5b 22 31 34 35 34 31 33 33 39 22 5d 2c 5b 22 31 34 35 37 33 39 31 36 22 5d 2c 5b 22 31 34 38 31 34 35 31 36 22 5d 2c 5b 22 31 34 38 34 32 30 39 33 38 22 5d 2c 5b 22 31 34 38 34 32 33 30 39 38 22 5d 2c 5b 22 31 34 38 39 35 36 37 33 38 22 5d 2c 5b 22 31 34 39 37 37 36 31 33 22 5d 2c 5b 22 31 34 39 37 38 35 36 33 30 22 5d 2c 5b 22 31 35 30 34 38 37 36 33 22 5d 2c 5b 22 31 35 31 33 30 32 32 31 22 5d 2c 5b 22 31 35 31 34 36 33 36 35 22 5d 2c 5b 22 31 35 31 34 36 36 30 35 22 5d 2c 5b 22 31 35 32 35 33 36 37 22 5d 2c 5b 22 31 35 34 32 33 36 31 34 31 22 5d 2c 5b Data Ascii: 0"],["14285367"],["14364516"],["14368047"],["14443747"],["1444835"],["14541339"],["14573916"],["14814516"],["148420938"],["148423098"],["148956738"],["14977613"],["149785630"],["15048763"],["15130221"],["15146365"],["15146605"],["1525367"],["154236141"],[
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 32 31 37 31 35 37 32 37 22 5d 2c 5b 22 32 31 37 31 39 37 30 31 38 31 34 22 5d 2c 5b 22 32 31 37 34 30 36 39 35 30 30 32 22 5d 2c 5b 22 32 31 37 35 36 37 30 30 37 30 38 22 5d 2c 5b 22 32 31 37 35 38 30 30 32 22 5d 2c 5b 22 32 31 37 36 37 39 32 35 35 38 37 22 5d 2c 5b 22 32 31 37 36 38 36 38 22 5d 2c 5b 22 32 31 37 39 31 34 35 34 31 33 35 22 5d 2c 5b 22 32 31 38 33 36 33 37 31 37 32 30 22 5d 2c 5b 22 32 31 39 32 32 32 31 39 22 5d 2c 5b 22 32 31 39 33 37 37 32 22 5d 2c 5b 22 32 32 31 38 31 30 34 22 5d 2c 5b 22 32 32 31 38 32 32 39 35 22 5d 2c 5b 22 32 32 32 30 35 34 30 22 5d 2c 5b 22 32 32 32 30 36 31 30 35 22 5d 2c 5b 22 32 32 32 31 35 30 38 22 5d 2c 5b 22 32 32 32 39 32 34 33 34 22 5d 2c 5b 22 32 32 34 38 38 34 34 37 33 31 36 22 5d 2c 5b 22 32 32 35 32 37 Data Ascii: 21715727"],["21719701814"],["21740695002"],["21756700708"],["21758002"],["21767925587"],["2176868"],["21791454135"],["21836371720"],["21922219"],["2193772"],["2218104"],["22182295"],["2220540"],["22206105"],["2221508"],["22292434"],["22488447316"],["22527
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 31 22 5d 2c 5b 22 33 33 38 30 38 32 39 36 22 5d 2c 5b 22 33 33 38 34 33 36 34 22 5d 2c 5b 22 33 34 32 37 30 31 35 33 22 5d 2c 5b 22 33 34 36 37 39 32 39 22 5d 2c 5b 22 33 34 38 37 32 30 34 22 5d 2c 5b 22 33 34 39 38 36 32 36 34 22 5d 2c 5b 22 33 35 31 38 38 39 36 22 5d 2c 5b 22 33 35 32 34 30 31 30 35 22 5d 2c 5b 22 33 35 33 30 37 33 32 37 22 5d 2c 5b 22 33 35 33 37 36 31 38 37 30 22 5d 2c 5b 22 33 35 38 38 33 30 32 35 22 5d 2c 5b 22 33 36 31 34 34 32 37 30 22 5d 2c 5b 22 33 36 32 34 30 38 34 30 22 5d 2c 5b 22 33 36 32 37 33 30 33 30 22 5d 2c 5b 22 33 36 33 32 33 30 34 30 22 5d 2c 5b 22 33 36 33 39 36 34 34 34 22 5d 2c 5b 22 33 36 34 35 38 35 34 34 22 5d 2c 5b 22 33 36 37 36 38 30 37 37 22 5d 2c 5b 22 33 36 39 38 38 32 36 31 22 5d 2c 5b 22 33 37 30 35 39 Data Ascii: 1"],["33808296"],["3384364"],["34270153"],["3467929"],["3487204"],["34986264"],["3518896"],["35240105"],["35307327"],["353761870"],["35883025"],["36144270"],["36240840"],["36273030"],["36323040"],["36396444"],["36458544"],["36768077"],["36988261"],["37059
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 5d 2c 5b 22 31 30 30 37 34 39 31 22 2c 31 5d 2c 5b 22 31 30 30 37 38 36 36 22 2c 31 5d 2c 5b 22 31 30 30 38 30 31 38 22 2c 31 5d 2c 5b 22 31 30 30 38 37 32 35 22 2c 31 5d 2c 5b 22 31 30 30 39 31 33 36 22 2c 31 5d 2c 5b 22 31 30 30 39 33 31 30 22 2c 31 5d 2c 5b 22 31 30 30 39 33 37 39 22 2c 31 5d 2c 5b 22 31 30 30 39 38 31 33 22 2c 31 5d 2c 5b 22 31 30 30 39 39 32 36 22 2c 31 5d 2c 5b 22 31 30 30 39 39 36 36 22 2c 31 5d 2c 5b 22 31 30 31 30 36 36 39 22 2c 31 5d 2c 5b 22 31 30 31 30 37 38 30 22 2c 31 5d 2c 5b 22 31 30 31 30 38 32 37 22 2c 31 5d 2c 5b 22 31 30 31 30 38 39 33 22 2c 31 5d 2c 5b 22 31 30 31 31 36 34 32 22 2c 31 5d 2c 5b 22 31 30 31 31 37 39 32 22 2c 31 5d 2c 5b 22 31 30 31 32 34 36 37 22 2c 31 5d 2c 5b 22 31 30 31 33 30 31 35 22 2c 31 5d 2c 5b Data Ascii: ],["1007491",1],["1007866",1],["1008018",1],["1008725",1],["1009136",1],["1009310",1],["1009379",1],["1009813",1],["1009926",1],["1009966",1],["1010669",1],["1010780",1],["1010827",1],["1010893",1],["1011642",1],["1011792",1],["1012467",1],["1013015",1],[
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 39 38 22 2c 31 5d 2c 5b 22 31 30 34 37 30 37 36 22 2c 31 5d 2c 5b 22 31 30 34 37 38 30 39 22 2c 31 5d 2c 5b 22 31 30 34 38 36 35 31 22 2c 31 5d 2c 5b 22 31 30 34 38 39 38 34 22 2c 31 5d 2c 5b 22 31 30 34 39 34 32 32 22 2c 31 5d 2c 5b 22 31 30 34 39 38 36 34 32 22 2c 31 5d 2c 5b 22 31 30 35 30 30 38 31 22 2c 31 5d 2c 5b 22 31 30 35 30 31 36 33 22 2c 31 5d 2c 5b 22 31 30 35 30 32 34 33 22 2c 31 5d 2c 5b 22 31 30 35 30 38 35 36 22 2c 31 5d 2c 5b 22 31 30 35 31 30 35 39 22 2c 31 5d 2c 5b 22 31 30 35 32 30 37 33 22 2c 31 5d 2c 5b 22 31 30 35 32 31 36 30 22 2c 31 5d 2c 5b 22 31 30 35 33 38 36 33 22 2c 31 5d 2c 5b 22 31 30 35 34 32 30 32 22 2c 31 5d 2c 5b 22 31 30 35 34 34 37 32 39 22 2c 31 5d 2c 5b 22 31 30 35 35 30 37 33 38 22 2c 31 5d 2c 5b 22 31 30 35 35 36 Data Ascii: 98",1],["1047076",1],["1047809",1],["1048651",1],["1048984",1],["1049422",1],["10498642",1],["1050081",1],["1050163",1],["1050243",1],["1050856",1],["1051059",1],["1052073",1],["1052160",1],["1053863",1],["1054202",1],["10544729",1],["10550738",1],["10556
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 39 34 34 39 22 2c 31 5d 2c 5b 22 31 31 37 37 35 32 32 30 32 22 2c 31 5d 2c 5b 22 31 31 39 32 31 31 32 35 22 2c 31 5d 2c 5b 22 31 31 39 32 33 36 31 39 37 22 2c 31 5d 2c 5b 22 31 32 30 35 36 38 32 38 37 22 2c 31 5d 2c 5b 22 31 32 30 35 37 33 31 22 2c 31 5d 2c 5b 22 31 32 30 35 37 39 36 22 2c 31 5d 2c 5b 22 31 32 31 31 32 34 35 39 34 22 2c 31 5d 2c 5b 22 31 32 33 33 32 30 34 38 37 22 2c 31 5d 2c 5b 22 31 32 34 31 32 37 31 37 33 22 2c 31 5d 2c 5b 22 31 32 36 31 35 30 34 22 2c 31 5d 2c 5b 22 31 32 37 31 30 34 35 39 22 2c 31 5d 2c 5b 22 31 32 37 34 30 31 34 35 22 2c 31 5d 2c 5b 22 31 32 38 32 37 33 36 35 22 2c 31 5d 2c 5b 22 31 32 38 36 38 30 30 31 36 22 2c 31 5d 2c 5b 22 31 32 39 30 38 32 32 38 22 2c 31 5d 2c 5b 22 31 32 39 31 30 30 36 35 37 22 2c 31 5d 2c 5b Data Ascii: 9449",1],["117752202",1],["11921125",1],["119236197",1],["120568287",1],["1205731",1],["1205796",1],["121124594",1],["123320487",1],["124127173",1],["1261504",1],["12710459",1],["12740145",1],["12827365",1],["128680016",1],["12908228",1],["129100657",1],[
2024-03-03 23:26:49 UTC	1252	IN	Data Raw: 38 32 34 33 30 33 36 22 2c 31 5d 2c 5b 22 31 38 32 35 34 37 39 36 22 2c 31 5d 2c 5b 22 31 38 32 39 30 35 33 39 22 2c 31 5d 2c 5b 22 31 38 34 38 39 39 34 35 22 2c 31 5d 2c 5b 22 31 38 36 38 33 35 32 22 2c 31 5d 2c 5b 22 31 38 37 32 38 31 37 31 31 22 2c 31 5d 2c 5b 22 31 38 37 34 32 38 34 22 2c 31 5d 2c 5b 22 31 38 38 39 30 38 31 33 22 2c 31 5d 2c 5b 22 31 38 39 38 33 35 32 38 22 2c 31 5d 2c 5b 22 31 39 30 32 35 30 34 32 22 2c 31 5d 2c 5b 22 31 39 30 38 35 30 35 34 36 22 2c 31 5d 2c 5b 22 31 39 31 34 31 39 35 31 22 2c 31 5d 2c 5b 22 31 39 32 37 31 32 32 32 22 2c 31 5d 2c 5b 22 31 39 32 39 30 36 32 37 22 2c 31 5d 2c 5b 22 31 39 33 37 36 35 35 22 2c 31 5d 2c 5b 22 31 39 33 37 37 38 31 32 22 2c 31 5d 2c 5b 22 31 39 34 34 38 36 37 32 22 2c 31 5d 2c 5b 22 31 39 Data Ascii: 8243036",1],["18254796",1],["18290539",1],["18489945",1],["1868352",1],["187281711",1],["1874284",1],["18890813",1],["18983528",1],["19025042",1],["190850546",1],["19141951",1],["19271222",1],["19290627",1],["1937655",1],["19377812",1],["19448672",1],["19

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50327	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1083	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348145722112&time=1709508408212&seq=3&response_time_ms=2627 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:26:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50326	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	768	OUT	GET /uu/api/res/1.2/PVU5gM.eKAfa6cKZLZNPDg--~B/Zmk9c3RyaW07aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_videos_177/755b42ce7295132b4d278d6cd57b891f HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	1228	IN	HTTP/1.1 200 OK Content-Length: 118025 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 323966970705321969767231122595833882628,263774590154713776034489356190572916191,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 323966970705321969767231122595833882628,263774590154713776034489356190572916191,ae7a14591aaf8d474cdb3f92111c923e Etag: "c067439d3abf10293ff87374d1b478fb" Expiration: expiry-date="Sat, 31 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 03 Mar 2024 09:54:12 GMT Server: ATS Surrogate-Reporting: width=368,height=276,bytes=118025,owidth=960,oheight=540,obytes=479129,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 03 Mar 2024 10:12:09 GMT X-Served-By: cache-iad-kiad7000125-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1709460729.112697,VS0,VE152 Age: 47680 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-iad-kiad7000125-IAD cld_latency: 152 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-03-03 23:26:49 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-03 23:26:49 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 70 00 00 01 14 08 02 00 00 00 bd 1e fa 24 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 01 cc bb 49 44 41 54 18 19 ac c1 6b ac ad 07 5d ef fb ef f7 ff 3c 63 ce b9 2e ad b5 9e 52 10 b4 52 0a 62 e5 26 28 c8 45 82 21 31 36 51 41 13 13 13 43 62 8c 12 50 e9 0b 88 96 78 23 be d2 44 c5 17 fb 44 5f a8 21 c1 9c 1d 14 c3 06 22 2a 0a 22 81 10 41 6d 65 73 91 4b 6d 97 94 42 95 76 ad d5 75 1b 63 8e 31 9e ff ef 3c 63 ce 55 28 1e dd ba 73 f6 e7 e3 6d ff d7 77 2e ca 3d c7 c5 c0 50 75 a2 6a bf c6 bd 71 3c 18 86 71 70 31 d4 a2 b2 a8 71 ac 5a 0c b5 a8 1a ad c1 1a 86 1a 93 d2 b2 aa 10 4b 0b 45 01 15 2c 81 70 55 48 00 09 95 ae 89 4e e8 f4 44 48 35 dd 30 05 92 2d dd 74 32 44 12 3a b4 99 4d dd 9d 84 8e Data Ascii: PNGIHDRp$pHYsO%IDATk]<c.RRb&(E!16QACbPx#DD_!"*"AmesKmBvuc1<cU(smw.=Pujq<qp1qZKE,pUHNDH50-t2D:M
2024-03-03 23:26:49 UTC	1300	IN	Data Raw: b3 0d 6e 33 6b 20 64 26 21 99 12 a1 ca 52 43 34 08 62 c0 19 4a 62 80 84 90 b4 6d 29 ce 80 45 0d 89 c6 32 84 99 8a 24 71 56 a5 9d 90 00 41 06 04 03 18 8e 25 04 12 41 64 47 1d a0 c8 84 4c 3d c1 04 01 15 da a0 55 a8 08 c8 8e c8 4e 80 24 28 e1 aa 80 41 45 20 4e a2 54 68 6d 1d 64 84 04 0c 47 1a 22 44 30 22 d0 a1 4c 20 01 3a 60 08 11 23 91 40 64 16 42 6c 23 84 48 21 3b 32 0b 44 90 80 7c 59 12 14 90 47 0b 57 c9 11 93 26 01 23 81 66 27 e1 7f 21 10 1e 2d 8a 10 21 21 c4 d8 81 e2 d1 12 54 8c c8 bf 15 08 24 51 5b 22 82 fc d7 c8 4c 65 c7 19 8f a2 3c c2 00 26 5a 40 40 76 02 05 12 8e c8 4e f8 5f 93 9d 10 8e c8 57 19 03 09 93 bd b5 f6 9b 49 ba 65 22 c8 4c a6 b2 74 b0 3a b6 26 c6 04 26 29 42 f7 58 03 3b 31 1a 62 54 1e c5 20 b3 21 18 a6 06 2b 66 26 94 4e 61 aa a2 b3 63 52 Data Ascii: n3k d&!RC4bJbm)E2$qVA%AdGL=UN$(AE NThmdG"D0"L :`#@dBl#H!;2D\|YGW&#f'!-!!T$Q["Le<&Z@@vN_WIe"Lt:&&)BX;1bT !+f&NacR
2024-03-03 23:26:49 UTC	1300	IN	Data Raw: 72 c4 08 9a 9a 05 aa d0 40 4c a6 a9 7b 93 04 d2 b3 29 08 26 69 ba 73 a4 6a a8 99 19 6b 8c 23 c9 76 bb 9d a6 89 af 68 66 21 ec 28 ce 00 09 96 8c e3 50 45 12 34 0d 5d 42 98 92 ce 0c 1a 01 31 09 11 28 33 0c 58 2d a9 b6 a7 29 5a e3 20 88 21 80 0a 05 86 d0 09 8d d8 62 07 4b ca 52 81 52 29 c9 0e c4 29 84 0e a1 c1 50 58 16 15 62 69 a0 e9 8a 0a 42 d2 36 44 83 10 d9 89 32 08 11 18 08 31 65 e8 a4 69 3b 84 23 66 46 c7 aa 51 85 34 49 30 91 48 44 4d 08 50 55 61 96 a4 a1 62 39 43 2d 05 2d c1 8a 96 14 0d 4a 20 42 12 50 81 10 d2 d1 24 08 32 4b 40 20 71 96 80 01 49 80 a4 04 84 c8 4e 08 20 49 c8 8c 50 e1 2b 92 be 78 b8 fc 87 f3 f7 6f 4c 41 4b 64 27 ec c8 cc 08 89 56 08 49 d8 11 92 48 45 21 ec 44 66 22 c7 12 84 88 3c 22 60 0c 08 18 24 91 20 01 a2 86 59 88 88 21 42 82 b2 23 Data Ascii: r@L{)&isjk#vhf!(PE4]B1(3X-)Z !bKRR))PXbiB6D21ei;#fFQ4I0HDMPUab9C--J BP$2K@ qIN IP+xoLAKd'VIHE!Df"<"`$ Y!B#
2024-03-03 23:26:49 UTC	1300	IN	Data Raw: b3 e0 28 41 52 d6 48 8d 8b 31 c4 32 34 74 1a ad ec 54 32 b1 a3 20 41 28 8c 83 83 02 c1 19 50 84 92 84 08 52 08 42 70 0b 45 82 44 22 8f 12 14 12 ed 74 61 5b 84 d2 e2 58 12 62 68 28 02 62 d8 89 89 cc 0a 22 11 d9 11 43 42 27 84 00 49 d8 71 3b 6d 97 cb e5 da 8e 42 d2 a8 49 9e f5 ac 67 fd e4 4f fe e4 ef fe ee ef 1e 1e 1e de 7e fb ed f7 dc 73 cf ad b7 de 7a f7 dd 77 af 56 ab 93 27 4f be f8 c5 2f 7e eb 5b df fa 9c e7 3c e7 b3 9f fd ec 3f fc c3 3f bc e2 15 af a8 aa df ff fd df ef ee 7b ef bd f7 2f ff f2 2f 7f e4 47 7e e4 81 07 1e 78 df fb de 77 f1 e2 c5 27 3f f9 c9 c3 30 5c bc 78 f1 d4 a9 53 9f fa d4 a7 aa ea 9b bf f9 9b 3f f1 89 4f 5c 7b ed b5 df f1 1d df 51 55 77 de 79 e7 38 8e cf 7d ee 73 df fe f6 b7 df 78 e3 8d c3 30 9c 39 73 e6 9b 8f 9c 39 73 e6 a3 1f fd 28 Data Ascii: (ARH124tT2 A(PRBpED"ta[Xbh(b"CB'Iq;mBIgO~szwV'O/~[<??{//G~xw'?0\xS?O\{QUwy8}sx09s9s(
2024-03-03 23:26:49 UTC	1300	IN	Data Raw: 4f 1c 76 4f e9 69 d3 db cd 74 ed d7 ec 9f 9c f6 4e 2c f6 5c 54 0d 1d 19 ab a4 93 00 96 0d 89 12 40 da 10 42 47 30 72 ac 20 01 44 76 92 a8 14 01 02 04 e4 98 91 86 6a b6 04 d6 24 24 08 22 d2 66 46 a0 0c 06 11 39 12 c2 4c 30 60 84 86 44 ba b4 d5 60 64 32 95 ea 44 89 dd 15 cc cc 2e a4 87 70 44 94 80 cc 3a 19 14 3a 30 89 a2 44 24 2a 24 20 86 04 50 71 06 84 80 62 48 b8 2a 09 50 a5 9d a4 b7 d3 76 b5 3a 5c b1 8d ec 84 d9 62 b1 d8 db db bb ff fe fb 97 cb 25 f0 b9 cf 7d 6e 3a f2 d4 a7 3e 55 3d 38 38 58 2c 16 ab d5 6a 9a a6 1f fe e1 1f 7e e1 0b 5f 38 0c c3 6f fe e6 6f 5e b9 72 05 48 32 0c c3 34 4d 9b cd 66 b9 5c ae 8e dc 71 c7 1d 0f 3d f4 d0 ed b7 df be 5a ad 92 00 d7 5d 77 dd e3 1f ff f8 3b ee b8 e3 e2 c5 8b b7 dc 72 cb 7a bd be e1 86 1b ee b8 e3 8e 37 bd e9 4d 1f Data Ascii: OvOitN,\T@BG0r Dvj$$"fF9L0`D`d2D.pD::0D$$ PqbHPv:\b%}n:>U=88X,j~_8oo^rH24Mf\q=Z]w;rz7M
2024-03-03 23:26:49 UTC	1300	IN	Data Raw: 94 63 8a 68 21 20 10 8e 24 21 cc 92 10 25 61 96 1d 20 9d 5e af 57 eb 69 33 95 cc 1a 15 f8 c3 3f fc c3 6f ff f6 6f ff 9d df f9 9d 24 87 87 87 1f f9 c8 47 9e ff fc e7 5f bc 78 71 b9 5c 5e b9 72 e5 a1 87 1e 5a af d7 e7 cf 9f bf ef be fb ce 9c 39 33 4d 93 ca 23 aa ea fc f9 f3 17 2f 5e 5c ad 56 87 87 87 67 cf 9e 3d 3c 3c bc 72 e5 ca fb df ff fe 37 bc e1 0d 97 2e 5d 3a 77 ee dc dd 77 df fd be f7 bd ef 0d 6f 78 c3 c1 c1 c1 a7 3e f5 a9 bb ee ba eb 9e 7b ee f9 ed df fe ed 57 bd ea 55 df f7 7d df f7 b6 b7 bd ed 97 7e e9 97 5e fe f2 97 df 7c f3 cd bf fe eb bf fe e6 37 bf f9 17 7e e1 17 7e e0 07 7e e0 e9 4f 7f fa 7b df fb de 97 bc e4 25 af 7d ed 6b 97 cb 65 77 8f e3 f8 d0 43 0f 5d be 7c 79 79 e4 fc f9 f3 ab d5 ea e2 c5 8b e7 cf 9f bf fb ee bb 4f 9c 38 f1 1b bf f1 1b Data Ascii: ch! $!%a ^Wi3?oo$G_xq\^rZ93M#/^\Vg=<<r7.]:wwox>{WU}~^\|7~~~O{%}kewC]\|yyO8
2024-03-03 23:26:49 UTC	1300	IN	Data Raw: dd 01 ab 20 53 12 48 44 2b a2 8c 85 0e 46 a7 a4 d2 4c 44 31 74 44 82 04 65 10 43 60 7b fd c8 35 7b 8b 41 2c 94 91 92 54 d5 20 82 42 51 28 56 59 a2 55 56 95 83 43 89 45 79 04 95 aa 8a 68 21 21 86 4a 91 60 02 d9 e9 90 74 02 99 91 ff f9 4f 9f f9 bf ff e2 7f 5c 9a b6 ec 84 ab 14 21 21 fc fb 84 f0 1f 11 c2 57 11 c2 7f 99 10 ae 2a 08 84 ff bf 84 f0 bf 69 7f 7f ff c7 7e ec c7 36 db cd 7f ff 7f fe fb ea 70 45 b8 4a 08 b3 b1 89 e9 30 04 3a 21 f4 44 0f 26 85 26 a6 13 69 68 69 49 e8 d0 a6 08 10 12 0c 10 22 51 68 50 8e 85 1d 09 c7 92 80 08 44 76 a4 82 0a dd b1 a0 a0 09 33 45 04 25 90 26 d0 a4 ab 8c 05 5d 32 d4 30 90 90 c1 2a 4c 42 b2 ed d6 a9 d5 12 a5 83 54 53 d4 54 a9 42 46 1c b7 2e 36 96 8b 03 f7 4f 66 71 6a e3 c1 5e 1d f4 c1 e9 30 6e a6 de f6 a2 b7 d9 9a ae 71 aa Data Ascii: SHD+FLD1tDeC`{5{A,T BQ(VYUVCEyh!!J`tO\!!Wi~6pEJ0:!D&&ihiI"QhPDv3E%&]20LBTSTBF.6Ofqj^0nq
2024-03-03 23:26:49 UTC	1300	IN	Data Raw: 06 3a 5b df 7c e3 8d bf fa 23 3f 6e 77 13 a0 ab 1e 5b ed 3f 7c e9 92 01 92 22 89 42 50 03 58 20 04 39 21 01 05 44 20 10 36 02 b2 21 48 c2 65 82 3c 4e 21 04 94 13 42 e4 84 02 42 90 2b a2 c8 56 40 36 0c 08 84 2b 14 03 91 2b 54 22 5b 11 31 b2 21 1b 36 41 36 0c 48 38 11 14 48 40 d0 0a 69 03 54 4b d9 62 47 41 17 09 61 74 62 2a b1 21 90 4e 4b 17 b6 d1 54 80 26 73 58 a0 21 a1 25 26 92 34 5d 51 d3 41 50 09 24 71 83 80 18 90 b0 25 05 68 40 50 8a 0a c6 08 54 98 53 a4 3b 68 0a 3a 8a 20 11 25 86 c0 5c b4 09 49 23 26 28 44 41 2c 24 8c b1 a4 ca 65 95 cb 84 14 f3 62 1c 8d 53 3d 76 5c 3e e1 78 f7 1b a6 9d af 9b 74 ea 3e f6 68 3a 5a 1d cc f3 1a 4e ed 2d d9 ad 39 f3 7a 3e 3e e8 9e cb 5a d6 44 e6 2e 93 69 9e 77 27 98 f7 e7 8b 8f 8e d5 63 1c 3e e2 e1 c3 1e 3e e2 f1 6a 64 6d Data Ascii: :[\|#?nw[?\|"BPX 9!D 6!He<N!BB+V@6++T"[1!6A6H8H@iTKbGAatb*!NKT&sX!%&4]QAP$q%h@PTS;h: %\I#&(DA,$ebS=v\>xt>h:ZN-9z>>ZD.iw'c>>jdm
2024-03-03 23:26:49 UTC	1300	IN	Data Raw: fd e9 4f af 56 ab eb af bf 7e 6f 6f ef fc f9 f3 37 dc 70 c3 67 3f fb d9 69 9a ae bb ee ba 1b 6e b8 e1 de 7b ef 5d ad 56 40 12 4e 08 5d 8c 27 ef de 60 55 81 a5 85 66 c0 c0 c2 92 a1 a5 55 0e 2d b5 6a 88 a3 8a 44 0a 4a ad 1a 1a 50 ab 84 16 4f 14 35 a4 0a 45 64 ab 02 72 99 b2 25 94 88 84 13 1a 02 04 45 44 79 9c 10 21 a9 98 83 3a fd e0 bc 20 9a 2a 36 42 90 04 4c 89 52 58 33 4e b5 db 3b 57 8d d3 4f 72 f7 ba 79 79 f5 b1 57 ad dc 7b 4c 0e 32 ed e7 f8 88 35 99 07 23 c9 a2 aa 32 1d 4f eb 79 ee ce a8 5a ee 8c e5 02 07 0e 58 24 7b 35 cd fb 0f ae cf 7d 7a 7a ec 5f a7 83 c7 72 74 e8 b4 26 93 09 06 a2 04 83 71 86 2e 6a 50 55 40 27 e9 58 6e 10 48 10 b5 46 8d d2 80 43 b0 88 89 0d 65 01 c3 51 94 6d 05 02 a9 74 4a 2c ad 48 c4 ce 7a 5a 4f 73 2c 6b d4 58 96 68 09 ce dd 1a 34 Data Ascii: OV~oo7pg?in{]V@N]'`UfU-jDJPO5Edr%EDy!: *6BLRX3N;WOryyW{L25#2OyZX${5}zz_rt&q.jPU@'XnHFCeQmtJ,HzZOs,kXh4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50322	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	2944	OUT	POST /p?_V=V&V_sec=pb&evt=v_imp&t=0.6045235350257028&_sqno=3&ts=9632&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=waiting&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&view=100%25 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:26:49 UTC	1057	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 133 date: Sun, 03 Mar 2024 23:26:49 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50317	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1070	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=-Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:49 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 09:35:59 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 09:35:59 GMT; path=/ Set-Cookie: PugT=1709458559; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:35:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50325	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1862	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&time=1709508408279&event=play_request&video_data=&video_ads_supported=false&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&seq=4_-1 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:49 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:26:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50335	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1092	OUT	GET /ups/58292/sync?_origin=1&uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b:18z8~2h3b"
2024-03-03 23:26:49 UTC	781	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b:18z8~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:26:49 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-nLNhotxE2uVq21nL64vd2.9J7PPx9gY-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50333	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	2271	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1709508408278&event=video_impression&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=5_0&web_ad_info=%7B%22plugin%22%3A%22ima3%22%2C%22pluginVersion%22%3A%225.2.6%22%2C%22requestMode%22%3A%22onload%22%2C%22timeout%22%3A10000%7D&preload=metadata HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:26:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:50 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50341	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	982	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEAIvvYGKi3MwJbcEVt_pRgM&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:50 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:48 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:26:48 GMT; path=/ Set-Cookie: PugT=1709508408; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:48 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50330	142.251.40.198	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	559	OUT	GET /instream/video/client.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	659	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 44701 Date: Sun, 03 Mar 2024 23:26:50 GMT Expires: Sun, 03 Mar 2024 23:26:50 GMT Cache-Control: private, max-age=900 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:50 UTC	593	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.define
2024-03-03 23:26:50 UTC	1252	IN	Data Raw: 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 70 28 22 53 74 72 Data Ascii: t find global object");},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};p("Str
2024-03-03 23:26:50 UTC	1252	IN	Data Raw: 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 64 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 62 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 0a 76 61 72 20 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: "),c=0;c<b.length;c++){var d=da[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ba(d.prototype,a,{configurable:!0,writable:!0,value:function(){return ea(aa(this))}})}return a});var ea=function(a){a={next:a};a[Symbol.iterator]=function(){
2024-03-03 23:26:50 UTC	1252	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6d 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6d 26 26 6e 75 6c 6c 21 3d 3d 6b 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 75 28 6b 2c 67 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 72 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 72 29 26 26 65 28 72 29 Data Ascii: unction c(){}function d(k){var m=typeof k;return"object"===m&&null!==k\|\|"function"===m}function e(k){if(!u(k,g)){var m=new c;ba(k,g,{value:m})}}function f(k){var m=Object[k];m&&(Object[k]=function(r){if(r instanceof c)return r;Object.isExtensible(r)&&e(r)
2024-03-03 23:26:50 UTC	1252	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 68 69 66 74 2e 61 70 70 6c 79 28 65 2c 64 29 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 65 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 77 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 2d 31 21 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 Data Ascii: );return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},w=function(a,b,c){w=Function.prototype.bind&&-1!=Function.prototype.bind.toString().ind
2024-03-03 23:26:50 UTC	1252	IN	Data Raw: 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 2c 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 64 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 63 20 69 6e 20 64 29 61 5b 63 5d 3d 64 5b 63 5d 3b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 73 61 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 63 3d 73 61 5b 66 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 63 29 26 26 28 61 5b 63 5d 3d 64 5b 63 5d 29 7d 7d 3b 76 61 72 20 75 Data Ascii: ropertyIsEnumerable toLocaleString toString valueOf".split(" "),ta=function(a,b){for(var c,d,e=1;e<arguments.length;e++){d=arguments[e];for(c in d)a[c]=d[c];for(var f=0;f<sa.length;f++)c=sa[f],Object.prototype.hasOwnProperty.call(d,c)&&(a[c]=d[c])}};var u
2024-03-03 23:26:50 UTC	1252	IN	Data Raw: 3d 5b 5d 2c 66 3d 30 2c 67 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 68 3d 30 3b 68 3c 64 3b 68 2b 2b 29 69 66 28 68 20 69 6e 20 67 29 7b 76 61 72 20 6c 3d 67 5b 68 5d 3b 62 2e 63 61 6c 6c 28 63 2c 6c 2c 68 2c 61 29 26 26 28 65 5b 66 2b 2b 5d 3d 6c 29 7d 72 65 74 75 72 6e 20 65 7d 2c 78 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 Data Ascii: =[],f=0,g="string"===typeof a?a.split(""):a,h=0;h<d;h++)if(h in g){var l=g[h];b.call(c,l,h,a)&&(e[f++]=l)}return e},xa=Array.prototype.map?function(a,b,c){return Array.prototype.map.call(a,b,c)}:function(a,b,c){for(var d=a.length,e=Array(d),f="string"===t
2024-03-03 23:26:50 UTC	1252	IN	Data Raw: 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 47 61 7d 3b 76 61 72 20 4e 61 3d 7b 7d 2c 4d 61 3d 7b 7d 3b 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 78 61 3d 62 3d 3d 3d 50 61 3f 61 3a 22 22 7d 3b 48 2e 70 72 6f 74 6f 74 79 70 65 2e 56 3d 21 30 3b 48 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 48 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 0a 76 61 72 20 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 Data Ascii: totype.L=function(){return this.Ga};var Na={},Ma={};var H=function(a,b){this.xa=b===Pa?a:""};H.prototype.V=!0;H.prototype.L=function(){return this.xa.toString()};H.prototype.toString=function(){return this.xa.toString()};var Qa=function(a){return a insta
2024-03-03 23:26:50 UTC	1252	IN	Data Raw: 75 63 74 6f 72 3d 3d 3d 4f 61 26 26 61 2e 4a 61 3d 3d 3d 4e 61 3f 61 2e 47 61 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 43 6f 6e 73 74 22 3a 59 61 28 53 74 72 69 6e 67 28 61 29 29 3b 69 66 28 2f 5b 7b 3b 7d 5d 2f 2e 74 65 73 74 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 43 28 22 56 61 6c 75 65 20 64 6f 65 73 20 6e 6f 74 20 61 6c 6c 6f 77 20 5b 7b 3b 7d 5d 2c 20 67 6f 74 3a 20 25 73 2e 22 2c 5b 61 5d 29 3b 72 65 74 75 72 6e 20 61 7d 2c 59 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 24 61 2c 22 24 31 22 29 2e 72 65 70 6c 61 63 65 28 24 61 2c 22 24 31 22 29 2e 72 65 70 6c 61 63 65 28 61 62 2c 22 75 72 6c 22 29 3b 69 66 28 62 62 2e 74 65 73 74 28 62 29 29 7b 69 66 28 63 62 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e Data Ascii: uctor===Oa&&a.Ja===Na?a.Ga:"type_error:Const":Ya(String(a));if(/[{;}]/.test(a))throw new C("Value does not allow [{;}], got: %s.",[a]);return a},Ya=function(a){var b=a.replace($a,"$1").replace($a,"$1").replace(ab,"url");if(bb.test(b)){if(cb.test(a))return
2024-03-03 23:26:50 UTC	1252	IN	Data Raw: 75 6d 65 6e 74 73 2c 63 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 4a 28 62 2c 68 62 29 7d 3b 4a 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 7d 3b 76 61 72 20 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4a 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4a 3f 61 2e 76 61 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 53 74 79 6c 65 53 68 65 65 74 22 7d 3b 4a 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 76 61 72 20 6b 62 3d 6e 65 77 20 4a 28 22 22 2c 68 62 29 3b 76 61 72 20 4b 3d 66 75 6e 63 74 Data Ascii: uments,c);return new J(b,hb)};J.prototype.L=function(){return this.va};var ib=function(a){return a instanceof J&&a.constructor===J?a.va:"type_error:SafeStyleSheet"};J.prototype.toString=function(){return this.va.toString()};var kb=new J("",hb);var K=funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50338	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FbCgWmLw50ojl92ZP0Q7KlQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181219%2F500x500%2Fheat_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=56444c2e5ec70e256d0295d87b9d4b83ec6307a8 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	1113	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133430 Cache-Control: public, max-age=2592000 Cache-Tag: 290163543635151748296268662389782359071,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000045-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: c3011237b9784b9edf9f89b4c68d41fe cld_latency: 132 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:50 GMT Edge-Cache-Tag: 290163543635151748296268662389782359071,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "424a00fbcf4278432f8f17c89da589e8" Last-Modified: Fri, 01 Dec 2023 01:31:02 GMT Server: ECAcc (nya/1C61) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2146,owidth=50,oheight=50,obytes=3076 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: c3011237b9784b9edf9f89b4c68d41fe X-Served-By: cache-lga21926-LGA X-Timer: S1702190899.127168,VS0,VE54 Content-Length: 2146 Connection: close
2024-03-03 23:26:50 UTC	2146	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c 7e 88 8d fa fb fb f1 f2 f3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 82 8a 8f ff ff ff c1 c5 c8 a2 a9 ac d5 d8 da ff ff ff fe fe fe e8 e9 ea de e1 e2 ff ff ff af b6 b9 ff ff ff d7 da dc 9e a5 a9 ff ff ff ff ff ff f9 fa fa ab b1 b4 a5 ac b0 89 92 96 ff ff ff fc fc fc f2 f3 f4 93 9a 9f ec ee ee ff ff ff fe fe fe ff ff ff ff ff ff f3 f4 f4 d8 db dd ff ff ff a6 ad b0 c4 c9 cb a1 a6 a9 c1 c6 c8 ff ff ff ff ff ff ca ce d0 ff ff ff d3 d6 d8 95 94 97 ff ff ff e0 e2 e3 e3 e5 e6 ff ff ff 87 90 95 be c3 c5 f5 f6 f6 ff ff ff ff ff ff aa b0 b3 8c 89 90 c9 cd cf da dd de 8e 97 9b 9f a6 aa a3 aa ad 97 9f a3 cc d0 d2 b6 bb be b6 bc bf ff Data Ascii: PNGIHDR22)xPLTEGpL~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50328	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1077	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=2056953496763385149&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; pi=156078:2; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:50 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:50 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:26:50 GMT; path=/ Set-Cookie: PugT=1709508410; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50332	151.101.194.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:49 UTC	1348	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/6s/master.m3u8?fastly_token=NjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	665	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Bolt-Device-Group: desktop-chrome X-Powered-By: BC X-Powered-From: gantry Date: Sun, 03 Mar 2024 23:26:50 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-lga21949-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508410.132724,VS0,VE32 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-03-03 23:26:50 UTC	5	IN	Data Raw: 31 61 39 0d 0a Data Ascii: 1a9
2024-03-03 23:26:50 UTC	425	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 2d 30 22 2c 4e 41 4d 45 3d 22 65 6e 20 28 4d 61 69 6e 29 22 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 22 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 37 31 33 39 62 34 36 30 2d 65 66 32 63 Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/7139b460-ef2c
2024-03-03 23:26:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:50 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-03-03 23:26:50 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 32 4f 54 6b 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 4d 35 4f 58 30 2e 57 6f 4c 69 59 6a 6c 56 69 6f 41 65 61 6d 33 6a 7a 58 74 32 51 6c 42 68 6e 52 38 51 6b 5a 6f 2d 65 30 39 78 4f 6f 47 46 58 76 Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv
2024-03-03 23:26:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:50 UTC	5	IN	Data Raw: 33 34 36 0d 0a Data Ascii: 346
2024-03-03 23:26:50 UTC	838	IN	Data Raw: 22 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 53 55 42 54 49 54 4c 45 53 2c 47 52 4f 55 50 2d 49 44 3d 22 73 75 62 74 69 74 6c 65 73 2d 30 22 2c 4e 41 4d 45 3d 22 43 61 70 74 69 6f 6e 73 20 28 45 6e 29 22 2c 44 45 46 41 55 4c 54 3d 4e 4f 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 22 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 63 6c 65 61 72 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 64 33 30 38 61 31 37 66 2d 38 62 65 62 2d 34 30 66 36 2d 38 33 38 38 2d 38 31 64 61 63 37 30 36 31 38 65 65 2f 72 65 6e 64 Data Ascii: "#EXT-X-MEDIA:TYPE=SUBTITLES,GROUP-ID="subtitles-0",NAME="Captions (En)",DEFAULT=NO,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/d308a17f-8beb-40f6-8388-81dac70618ee/rend
2024-03-03 23:26:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:50 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50331	151.101.194.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	808	OUT	GET /thumbnail/v1/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/thumbnail.webvtt?fastly_token=NjVlNTE1NDlfOTZjODI2YjczN2E3ZjNiYjU3ZGRmNzQwYjA2ZjdmM2VkZDNmOTJlNDdjZDU5ZjkyYjg5MjQzZjQwNDBmOTYzYw%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	648	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5090 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: text/vtt; charset=UTF-8 X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:50 GMT Via: 1.1 varnish Age: 4434 X-Served-By: cache-ewr18159-EWR X-Cache: HIT X-Cache-Hits: 89 X-Timer: S1709508410.108608,VS0,VE0 X-Device-Group: desktop-chrome
2024-03-03 23:26:50 UTC	1371	IN	Data Raw: 57 45 42 56 54 54 0a 0a 30 30 3a 30 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 30 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 30 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 30 39 35 32 36 35 35 35 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 Data Ascii: WEBVTT00:00.000 --> 00:05.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/0s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ff
2024-03-03 23:26:50 UTC	1371	IN	Data Raw: 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 66 32 66 33 30 66 37 62 34 36 62 34 35 34 61 63 64 32 34 34 63 39 32 65 32 37 31 36 37 30 62 39 34 66 37 32 32 66 66 37 64 64 63 38 36 33 66 30 63 38 36 33 65 33 33 63 66 36 39 30 34 34 37 38 0a 0a 30 30 3a 32 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 32 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 32 30 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b Data Ascii: h/image.jpeg*~hmac=f2f30f7b46b454acd244c92e271670b94f722ff7ddc863f0c863e33cf690447800:20.000 --> 00:25.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/20s/match/image.jpeg?akamai_tok
2024-03-03 23:26:50 UTC	1371	IN	Data Raw: 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 33 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 61 33 63 66 34 61 36 64 31 32 30 66 30 66 38 61 30 64 66 35 36 39 34 30 66 33 39 34 35 38 30 30 35 38 65 34 33 38 33 66 38 33 36 62 31 35 38 32 64 31 39 66 64 64 61 38 38 34 36 36 37 33 32 65 0a 0a 30 30 3a 34 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 34 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f Data Ascii: e/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/35s/match/image.jpeg*~hmac=a3cf4a6d120f0f8a0df56940f394580058e4383f836b1582d19fdda88466732e00:40.000 --> 00:45.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/
2024-03-03 23:26:50 UTC	977	IN	Data Raw: 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 35 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 30 39 35 32 36 35 35 35 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 35 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 63 34 34 35 37 30 30 37 36 30 63 36 65 38 66 64 64 61 38 35 35 31 36 66 38 62 63 64 35 35 61 33 31 35 31 61 33 38 34 33 63 62 32 37 39 38 37 30 61 34 34 30 34 33 35 63 33 66 30 63 32 32 32 64 0a 0a 30 31 3a 30 30 2e 30 30 Data Ascii: fceb479f5/main/480x270/55s/match/image.jpeg?akamai_token=exp=1709526555~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/55s/match/image.jpeg*~hmac=c445700760c6e8fdda85516f8bcd55a3151a3843cb279870a440435c3f0c222d01:00.00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50279	18.173.219.124	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	820	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=5e803909-7b6d-45a4-8be8-533d655de3d1&ckls=true&ci=IAEnIwC1hI&nc=false&trid=397624072 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=IAEnIwC1hI
2024-03-03 23:26:50 UTC	1334	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:26:50 GMT Set-Cookie: intentIQ=IAEnIwC1hI; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:26:50 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: IQPData=2584789195#1709508410116#0#1709508410116; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:26:50 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:26:50 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTUzNThfMCZVNjBKNFdF; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:26:50 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQCDate=1709508410117; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:26:50 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:26:50 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 46a179b8ac401f1f1def1c8690577c3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JY6GNoLxbHutzdf2Sbz-igJGpTYIMDS5waYZk5GKgdKesfHS1kfoag==
2024-03-03 23:26:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50334	54.198.32.5	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	623	OUT	GET /verizonsync?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	756	IN	HTTP/1.1 302 Date: Sun, 03 Mar 2024 23:26:50 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=VqqzSffDDzfVzTkSfzaT%7C1709424000000%7C0; Max-Age=31536000; Expires=Mon, 03 Mar 2025 23:26:50 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://hb.yahoo.net/cksync.php?cs=1&type=58259&ovsid=VqqzSffDDzfVzTkSfzaT&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50329	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	417	OUT	GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	585	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 4604844 Cache-Control: max-age=365000000, immutable Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:50 GMT Etag: "530bcb090a875c0f904c395456a90b43" Last-Modified: Tue, 12 Dec 2023 15:45:13 GMT Server: ECAcc (nya/78CD) x-amz-id-2: TLKSALyw2Dh5owsOg36VJ1hly7QgQv5pfKzI1KBb4QiMoAG4PLzfk69+guvFFB1G0PL942U4BuE= x-amz-replication-status: COMPLETED x-amz-request-id: KX38QTQHKFWKNG98 x-amz-server-side-encryption: AES256 x-amz-version-id: h_VPUIxbxwcQ3eXjG.3FC4NkfDv2h.bT X-Cache: HIT Content-Length: 14835 Connection: close
2024-03-03 23:26:50 UTC	14835	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5c 00 00 01 32 08 06 00 00 00 b6 e8 68 06 00 00 39 ba 49 44 41 54 78 01 ed 9d 5f 8c 1c d7 75 e6 4f 55 0f 65 4b d1 9f 91 2d 05 96 25 98 25 c5 ce 4a 32 b2 1c c9 88 ec 00 0a 54 1c 92 8e 9f 56 94 8c bc c4 01 34 04 36 41 f2 10 8b 42 80 78 03 7b 41 0a 49 60 78 81 05 45 19 58 ef c6 01 48 01 d1 be 04 16 47 d9 17 c7 a2 86 45 c4 40 22 65 65 8e 16 b1 28 c4 81 55 34 24 d8 88 fc 67 38 94 a5 98 9c ae da 73 aa ea 0e ef 54 df 5b 5d d5 5d d5 5d 5d fd fd 80 66 77 df 5b 5d d3 ec ae fe ea d4 77 cf 3d d7 21 00 66 84 fd fe 7e 3f a2 e8 a1 98 1c 9f 28 5e e2 a6 c5 ac 2b 24 72 42 87 e2 e7 23 ba 66 35 08 be 19 12 00 2d c4 21 00 5a 8e 08 6d 9f e2 23 2c b2 7e 99 ed 1d 72 4e 46 b4 eb 49 08 2f 68 1b 10 5c d0 6a 7c 7f f9 08 1f a4 Data Ascii: PNGIHDR\2h9IDATx_uOUeK-%%J2TV46ABx{AI`xEXHGE@"ee(U4$g8sT[]]]]fw[]w=!f~?(^+$rB#f5-!Zm#,~rNFI/h\j\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50342	52.44.19.224	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	752	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:50 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=0349ad77-5ea1-447f-9167-09b58573447a&gdpr=0&gdpr_consent= Set-Cookie: cu=0349ad77-5ea1-447f-9167-09b58573447a\|1709508410116; Path=/; Domain=ipredictive.com; Expires=Mon, 03 Mar 2025 23:26:50 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 84d01508-076a-4211-af71-94766b2589e6 Content-Length: 205 Connection: Close
2024-03-03 23:26:50 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 30 33 34 39 61 64 37 37 2d 35 65 61 31 2d 34 34 37 66 2d 39 31 36 37 2d 30 39 62 35 38 35 37 33 34 34 37 61 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=0349ad77-5ea1-447f-9167-09b58573447a&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50350	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	956	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:9E6108CD113245DE8ED3EE8C2AE8D8CE HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:50 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 09:36:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23486-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23489-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23539-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:36:00 GMT; path=/ Set-Cookie: PugT=1709458560; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:36:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50343	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1853	OUT	GET /v1/evp/asset?bcid=5afc769f7239855a15fcee15&pid=5afc75ea3a04293dad9f1a1f&secure=true&rssId=3caca4ca-191c-3933-bab5-595ca1d1495a&firstVideo=true&height=276&width=368&sid=b9b3c6c5-2cd7-4937-8390-628222cda75f&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-aa-2&b_id=btnlfjdiua1pb&licensor_id=a0a6T00000R2KYJQA3&us_privacy=1YNN&isDockable=false&m.type=VOD&device=desktop&v=1&f=json&s2s=true&gdpr=false&content_len=68&content_title=Winter+storm+wreaks+havoc+across+Sierra+Nevadas&content_id=https%3A%2F%2Fwww.cnn.com%2Fvideos%2Fweather%2F2024%2F03%2F03%2Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn&gpp=DBAA&gpp_sid=-1&pver=1.3.9&aver=3.624.0&country=US&state=North+Carolina&ad.plseq=1&ad.pct=aolfrontpage&ad.pl=up&ad.pt=home&ad.pubfamily=aol&pos=preroll&evp=bcp&fmt=vmap&ps=bdud5hbm&r=https%3A%2F%2Fwww.aol.com%2F&givn=[GOOGLE_INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid= HTTP/1.1 Host: tb.video.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:26:50 UTC	741	IN	HTTP/1.1 200 OK access-control-allow-headers: Content-Type server: ATS date: Sun, 03 Mar 2024 23:26:50 GMT access-control-allow-origin: https://www.aol.com access-control-allow-credentials: true strict-transport-security: max-age=31536000 content-type: application/xml content-length: 11987 access-control-allow-methods: POST,OPTIONS x-envoy-upstream-service-time: 169 x-envoy-decorator-operation: thunderball--production-bf1.video--thunderball-server-k8s.svc.yahoo.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:26:50 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 76 6d 61 70 3a 56 4d 41 50 20 78 6d 6c 6e 73 3a 76 6d 61 70 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 69 61 62 2e 6e 65 74 2f 76 69 64 65 6f 73 75 69 74 65 2f 76 6d 61 70 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 0a 09 3c 76 6d 61 70 3a 41 64 42 72 65 61 6b 20 62 72 65 61 6b 49 64 3d 22 46 79 66 47 6a 77 79 6e 58 48 41 46 49 6c 4f 63 22 20 62 72 65 61 6b 54 79 70 65 3d 22 6c 69 6e 65 61 72 22 20 74 69 6d 65 4f 66 66 73 65 74 3d 22 73 74 61 72 74 22 3e 0a 09 09 3c 76 6d 61 70 3a 41 64 53 6f 75 72 63 65 3e 0a 09 09 09 3c 76 6d 61 70 3a 56 41 53 54 41 64 44 61 74 61 3e 0a 09 09 09 09 3c 56 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><vmap:VMAP xmlns:vmap="http://www.iab.net/videosuite/vmap" version="1.0"><vmap:AdBreak breakId="FyfGjwynXHAFIlOc" breakType="linear" timeOffset="start"><vmap:AdSource><vmap:VASTAdData><V
2024-03-03 23:26:50 UTC	1300	IN	Data Raw: 33 44 30 25 32 36 79 5f 65 78 70 62 6b 74 25 33 44 2d 33 30 30 5f 2d 31 32 32 33 25 32 36 79 5f 64 6e 62 25 33 44 31 25 32 36 79 5f 63 69 64 25 33 44 38 59 48 42 36 34 50 53 49 25 32 36 79 5f 61 64 74 79 70 65 25 33 44 73 5f 76 69 64 65 6f 5d 5d 3e 3c 2f 56 41 53 54 41 64 54 61 67 55 52 49 3e 0a 09 09 09 09 09 09 09 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 62 61 74 73 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 3f 65 76 74 3d 61 64 5f 64 6c 76 66 26 5f 45 3d 61 64 5f 64 6c 76 66 26 6f 75 74 63 6d 3d 61 64 5f 64 6c 76 66 26 5f 56 3d 56 26 56 5f 73 65 63 3d 70 62 26 5f 77 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 70 76 65 72 3d 31 2e 33 2e 39 26 61 76 65 Data Ascii: 3D0%26y_expbkt%3D-300_-1223%26y_dnb%3D1%26y_cid%3D8YHB64PSI%26y_adtype%3Ds_video...</VASTAdTagURI><Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&outcm=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&ave
2024-03-03 23:26:50 UTC	622	IN	Data Raw: 63 6b 74 3d 70 72 6f 64 26 6f 6d 69 64 3d 6e 75 6c 6c 26 74 70 3d 79 5f 65 78 70 62 6b 74 25 33 44 2d 33 30 30 5f 2d 31 32 32 33 25 32 36 79 5f 64 6e 62 25 33 44 31 25 32 36 79 5f 63 69 64 25 33 44 38 59 48 42 36 34 50 53 49 25 32 36 79 5f 61 64 74 79 70 65 25 33 44 73 5f 76 69 64 65 6f 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 0a 09 09 09 09 09 09 09 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 62 61 74 73 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 3f 65 76 74 3d 61 64 5f 6f 70 70 74 79 26 5f 45 3d 61 64 5f 6f 70 70 74 79 26 6f 75 74 63 6d 3d 61 64 5f 6f 70 70 74 79 26 5f 56 3d 56 26 56 5f 73 65 63 3d 70 62 26 5f 77 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 Data Ascii: ckt=prod&omid=null&tp=y_expbkt%3D-300_-1223%26y_dnb%3D1%26y_cid%3D8YHB64PSI%26y_adtype%3Ds_video...</Impression><Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&outcm=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%
2024-03-03 23:26:50 UTC	1300	IN	Data Raw: 35 39 35 63 61 31 64 31 34 39 35 61 26 61 72 3d 31 2e 33 33 26 63 6f 6e 74 3d 31 26 70 6c 74 79 70 65 3d 64 65 73 6b 74 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 61 2d 32 26 74 65 73 74 3d 61 6f 6c 2d 61 61 2d 32 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 66 72 6f 6e 74 70 61 67 65 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e Data Ascii: 595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.n
2024-03-03 23:26:50 UTC	1300	IN	Data Raw: 79 70 65 3d 64 65 73 6b 74 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 61 2d 32 26 74 65 73 74 3d 61 6f 6c 2d 61 61 2d 32 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 66 72 6f 6e 74 70 61 67 65 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d Data Ascii: ype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=
2024-03-03 23:26:50 UTC	1300	IN	Data Raw: 61 6f 6c 2d 61 61 2d 32 26 74 65 73 74 3d 61 6f 6c 2d 61 61 2d 32 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 66 72 6f 6e 74 70 61 67 65 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 Data Ascii: aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=nu
2024-03-03 23:26:50 UTC	1300	IN	Data Raw: 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 66 72 6f 6e 74 70 61 67 65 26 72 5f 63 6f 64 65 3d 31 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 31 26 66 5f 63 61 6c 6c 3d 76 2e 68 62 2e 79 61 68 6f 6f 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 31 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 6e 74 77 6b 3d 50 72 65 62 69 64 2b 41 54 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 72 75 6c 65 3d 35 Data Ascii: ome&pd=null&pct=aolfrontpage&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=v.hb.yahoo.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+AT+-+Desktop+-+EV+Player&pos=preroll&rule=5
2024-03-03 23:26:50 UTC	1300	IN	Data Raw: 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 66 72 6f 6e 74 70 61 67 65 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 32 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 Data Ascii: VP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&
2024-03-03 23:26:50 UTC	1300	IN	Data Raw: 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 32 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 6e 74 77 6b 3d 47 41 4d 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 65 72 6f 6c Data Ascii: e=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=prerol
2024-03-03 23:26:50 UTC	965	IN	Data Raw: 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 32 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 6e 74 77 6b 3d 47 41 4d 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 72 75 6c 65 3d 61 64 30 61 37 34 31 63 2d 35 39 33 33 2d 34 33 62 34 2d 39 30 39 65 2d 62 66 Data Ascii: ull&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50349	35.211.233.246	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	823	OUT	GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic HTTP/1.1 Host: a.sportradarserving.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuuid=9f772c54-4a6c-45eb-91e5-92ed9408d752; c=1709508409; zuuid_lu=1709508409
2024-03-03 23:26:50 UTC	915	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:50 GMT Location: https://x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=1&user_id=9f772c54-4a6c-45eb-91e5-92ed9408d752&ssp=pubmatic Set-Cookie: zuuid=9f772c54-4a6c-45eb-91e5-92ed9408d752; path=/; expires=Mon, 03-Mar-2025 23:26:50 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_lu=1709508410; path=/; expires=Mon, 03-Mar-2025 23:26:50 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_k=1; path=/; expires=Mon, 03-Mar-2025 23:26:50 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_k_lu=1709508410; path=/; expires=Mon, 03-Mar-2025 23:26:50 GMT; domain=sportradarserving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50339	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FADqUXlqn18KYlIyqLYgVQw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Fpelicans_wbg.png&client=76f99bdb8f78cd44cc0b&signature=798c93b043435cd03be9ec1cd6c179c807780488 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	1492	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2133433 Cache-Control: public, max-age=2592000 Cache-Tag: 187963072957179254593978396759819153775,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000145-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 189 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:50 GMT Edge-Cache-Tag: 187963072957179254593978396759819153775,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "c6db42f786c5549bc2bbf3588f87d728" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7983) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1502,owidth=50,oheight=50,obytes=1631,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000145-IAD X-Timer: S1707374978.577518,VS0,VE189 Content-Length: 1502 Connection: close
2024-03-03 23:26:50 UTC	1502	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 91 50 4c 54 45 47 70 4c 86 7b 5a b4 97 5a b4 97 5a b4 97 5a b4 97 5a b4 96 5a b4 97 5a a7 8f 5a b4 97 5a b3 96 5a ad 93 5a b4 97 5a a5 8e 5a 90 81 5a b4 97 5a b4 97 5a 8b 7e 5a b4 97 5a b3 97 5a b2 96 5a b4 97 5a a8 90 5a 8c 7f 5a ae 93 5a a9 91 5a b4 97 5a b4 97 5a b4 97 5a a0 8b 5a 9e 8a 5a 6d 6d 5b 5d 63 5b ae 93 5a 6b 6b 5b b1 95 5a 76 72 5b b4 97 5a 99 87 5a 58 60 5b b4 97 5a 61 65 5b b4 97 5a 92 83 5a 6b 6b 5b 9b 88 5a b4 97 5a 6f 6d 5b b4 97 5a b4 97 5a b4 97 5a a8 90 5a b0 95 5a b4 97 5a 91 82 5a 80 78 5b 99 87 5a 89 7d 5a 9b 88 5a 53 5d 5b 54 5d 5b 00 2b 5c b4 97 5a 4e 5a 5b 01 2c 5c 0a 31 5c 1b 3b 5c 12 36 5c b2 bf ce 18 3f 6b 51 5c 5b 86 Data Ascii: PNGIHDR22)xPLTEGpL{ZZZZZZZZZZZZZZZZ~ZZZZZZZZZZZZZZmm[]c[Zkk[Zvr[ZZX`[Zae[ZZkk[ZZom[ZZZZZZZx[Z}ZZS][T][+\ZNZ[,\1\;\6\?kQ\[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50340	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	426	OUT	GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 4604844 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Sun, 03 Mar 2024 23:26:50 GMT Etag: "e2c8e7f300b16a993657a04b82efe131" Last-Modified: Mon, 08 Jan 2024 12:18:05 GMT Server: ECAcc (nya/7971) x-amz-id-2: ol5RfGogTomJeYKq3xb0AX7LLX3r9MuaJqk6tyEz5YASwIanVGo21f1sk+1ivsCxBZz0f865A5E= x-amz-replication-status: COMPLETED x-amz-request-id: KX30BJ2B90PJEJ0P x-amz-server-side-encryption: AES256 x-amz-version-id: 0xHl7oxSGukOJcW58WD3cqF3_WBXxCUd X-Cache: HIT Content-Length: 14326 Connection: close
2024-03-03 23:26:50 UTC	14326	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 34 22 20 68 65 69 67 68 74 3d 22 31 35 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 34 20 31 35 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 39 31 36 5f 34 34 38 35 29 22 3e 0a 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 2e 32 35 22 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 30 35 22 20 64 3d 22 4d 39 31 2e 32 38 37 31 20 31 35 32 2e 38 39 39 43 31 33 35 2e 30 38 39 20 31 35 32 2e 38 39 39 20 31 37 30 2e 35 39 37 20 31 35 31 2e 34 20 31 37 30 2e 35 39 37 20 31 34 39 2e 35 35 43 31 37 30 2e 35 39 37 20 31 34 37 2e 37 Data Ascii: <svg width="174" height="153" viewBox="0 0 174 153" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_916_4485)"><g opacity="0.25"><path opacity="0.05" d="M91.2871 152.899C135.089 152.899 170.597 151.4 170.597 149.55C170.597 147.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50357	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	973	OUT	GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFNcl9rN0x5ZzRBQUJUcldCQ05kUQ&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Csyn%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:50 UTC	743	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Csyn%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Date: Sun, 03 Mar 2024 23:26:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 390 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:50 UTC	390	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 61 64 78 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 62 65 65 5f 73 79 6e 63 5f 70 61 72 74 6e 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50355	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-03-03 23:26:50 UTC	795	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:50 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFMbzgwN0x5ZzRBQUJRNm1XOFJHUQ&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:50 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:50 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50345	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1776	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2624&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=585477397&pvid=-3&req_size=300x600&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&pbAcid=234509328780378161709508396847&pbBidId=51788214373968621709508396881&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:50 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:50 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:50 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50354	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	407	OUT	GET /caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	583	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 453290 Cache-Control: max-age=365000000, immutable Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:50 GMT Etag: "1e91d02cf5a902f38f2923c006d79281" Last-Modified: Mon, 28 Nov 2022 10:20:33 GMT Server: ECAcc (nya/7995) x-amz-id-2: h0XHaiSJ6PBgfDTMa8yCY4BvQi70ammZV0zpRaoNmCcZL5xZI2vJUv/DgQ8dAApEGPddPnGY0uk= x-amz-replication-status: COMPLETED x-amz-request-id: 0E4455341JV6ZEHZ x-amz-server-side-encryption: AES256 x-amz-version-id: XT6LsdtqeTQbOJqBovI.LzXQgARxp1ek X-Cache: HIT Content-Length: 4904 Connection: close
2024-03-03 23:26:50 UTC	4904	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 86 00 00 00 fa 08 03 00 00 00 0b 2b 76 d8 00 00 01 dd 50 4c 54 45 47 70 4c 57 57 57 5e 5e 5e 66 66 66 6e 6e 6e 61 61 61 78 78 78 94 94 94 a6 a6 a6 8d 8d 8d 73 73 73 5c 5c 5c 9d 9d 9d 84 84 84 92 92 92 68 68 68 49 49 49 2a 2a 2a 15 15 15 00 00 00 1f 1f 1f 73 73 73 9c 9c 9c 34 34 34 7d 7d 7d 87 87 87 3e 3e 3e 53 53 53 59 59 59 6a 6a 6a 0a 0a 0a 7d 7d 7d 5e 5e 5e 20 20 20 40 40 40 70 70 70 10 10 10 80 80 80 60 60 60 30 30 30 50 50 50 07 15 0a 17 4a 24 1d 5f 2f 27 7e 3e 24 74 39 1a 54 2a 10 35 1a b3 b3 b3 e6 e6 e6 ea ea ea ff ff ff e2 e2 e2 91 91 91 dd dd dd f2 f2 f2 c5 c5 c5 ec ec ec f8 f8 f8 e3 e3 e3 ee ee ee d9 d9 d9 2a 89 44 34 a8 53 31 9e 4e 03 0b 05 d1 d1 d1 f3 f3 f3 9f 9f 9f d5 d5 d5 ef ef ef f7 Data Ascii: PNGIHDR+vPLTEGpLWWW^^^fffnnnaaaxxxsss\\\hhhIII**sss444}}}>>>SSSYYYjjj}}}^^^ @@@ppp```000PPPJ$_/'~>$t9T5*D4S1N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50348	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	2005	OUT	GET /cksync.php?cs=8&type=spa&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8YHB8F956&prvid=25268%2C25224%2C25025%2C25146%2C25223%2C25300%2C25028%2C25027%2C25302%2C25269%2C25225%2C25304%2C25306%2C25141%2C25140%2C25220%2C25022%2C25021%2C25024%2C25145%2C25221%2C25060%2C25158%2C25036%2C25278%2C25159%2C25038%2C25118%2C25239%2C25117%2C25318%2C25317%2C25270%2C25072%2C25031%2C25030%2C25198%2C25033%2C25274%2C25276%2C25071%2C25202%2C25003%2C25245%2C25127%2C25006%2C25204%2C25126%2C25007%2C25009%2C25282%2C25240%2C25284%2C25042%2C25088%2C25286%2C25241%2C25087%2C25043%2C25002%2C25288%2C25001%2C25280%2C25059%2C25136%2C25135%2C25017%2C25137%2C25217%2C25019%2C25018%2C25219%2C25218%2C25292%2C25053%2C25097%2C25052%2C25096%2C25294%2C25296%2C25134%2C25298%2C25091%2C25090%2C25290&itype=YHB&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1
2024-03-03 23:26:50 UTC	442	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 52 Content-Type: image/gif p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:50 GMT Connection: close
2024-03-03 23:26:50 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:50 UTC	9	IN	Data Raw: 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50351	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	978	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15
2024-03-03 23:26:50 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:26:49 GMT; path=/ Set-Cookie: PugT=1709508409; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:49 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50336	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1797	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2629&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=102615858&pvid=-3&req_size=300x250%7C300x250&req_mtype%3C%3E=2%23%230&adtypes=2%7C0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&pbAcid=234509328780378161709508396847&pbBidId=29440994237180501709508396887&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:50 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:50 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:50 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50362	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1144	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; PugT=1709508408
2024-03-03 23:26:50 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50364	104.36.115.113	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1376	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=19400441&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; PugT=1709458559
2024-03-03 23:26:50 UTC	1081	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=159463:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1710633600%3A261_260_259_263_201_262%7C1709510400%3A248%7C1710028800%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1710028800%3A223_15_2_38%7C1710720000%3A35%7C1710633600%3A176_5_165_71_264_238_104_231_22_56_220_3_243_55_249_96_8_178_266_234_7_54_21_99_214_46_166_48_233_240_13_250_81%7C1714608000%3A69%7C1712016000%3A224%7C1710288000%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Sun, 03 Mar 2024 23:26:49 GMT Transfer-Encoding: chunked Connection: close
2024-03-03 23:26:50 UTC	4027	IN	Data Raw: 66 61 66 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 37 32 31 33 44 42 42 34 2d 38 43 34 45 2d 34 35 46 38 2d 42 41 43 38 2d 32 31 34 39 44 33 32 41 38 42 31 46 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 37 32 31 33 44 42 42 34 2d 38 43 34 45 2d 34 35 46 38 2d 42 41 43 38 2d 32 31 34 39 44 33 Data Ascii: fafPubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50353	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	406	OUT	GET /caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	970	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 39877051 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Sun, 03 Mar 2024 23:26:50 GMT Etag: "2928664fe1fc6aca88583a6f606d60ba" Last-Modified: Mon, 28 Nov 2022 10:20:33 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7890) x-amz-id-2: OBUAdsOmDd22tW19JaFueBSd60StdRsXIBbG3U1ZTetFBvJwR/Mbrr6AMc+dwHZGx6EcCRm9Hwk= x-amz-replication-status: COMPLETED x-amz-request-id: NHD6WF6F3P6HQTDB x-amz-server-side-encryption: AES256 x-amz-version-id: M3sCfyi28qgEfUQomdcrA9y7CjlgkNje X-Cache: HIT Content-Length: 10804 Connection: close
2024-03-03 23:26:50 UTC	10804	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 6c 69 76 65 74 79 70 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 39 2e 36 36 34 30 37 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 39 2e 36 36 34 30 37 20 34 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 5f 6f 6e 5f 74 68 65 5f 41 70 70 5f 53 74 6f 72 65 5f 42 61 64 67 65 5f 55 53 2d 55 4b 5f 52 47 42 5f 62 6c 6b 5f 34 53 56 47 5f 30 39 32 39 31 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 30 2e 31 33 34 37 37 2c 30 48 39 2e 35 33 34 36 38 63 2d 2e 33 36 36 37 Data Ascii: <svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40"> <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title> <g> <g> <g> <path d="M110.13477,0H9.53468c-.3667

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50361	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1206	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=3861fc3c-867b-43e0-b46a-259e2b0cd468&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; PugT=1709508408
2024-03-03 23:26:50 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 09:59:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:59:00 GMT; path=/ Set-Cookie: PugT=1709459940; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:59:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:50 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50363	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1176	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:CA2F41ACCA684739A1CE374B350A0FEF HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; PugT=1709508408
2024-03-03 23:26:50 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:49 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:49 GMT; path=/ Set-Cookie: PugT=1709508409; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:49 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50367	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	589	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-03%2F462e6bf0-d9a6-11ee-8fdb-97e4a78cac99&client=76f99bdb8f78cd44cc0b&signature=80f3b8ccdec8c8efc49aee8b4ef4a62513d778c4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 6513 Cache-Control: public, max-age=2592000 Cache-Tag: 351572234921971056726209063309277148157,460042813648494421772122623019743714917,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21925-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 23a8ee532de2ecbd3115018db76cd731 cld_latency: 694 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:50 GMT Edge-Cache-Tag: 351572234921971056726209063309277148157,460042813648494421772122623019743714917,ae7a14591aaf8d474cdb3f92111c923e Etag: "f037c63994ad5d6119f36567caeaa070" Last-Modified: Sun, 03 Mar 2024 21:38:18 GMT Server: ECAcc (nya/78E7) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=800,height=450,bytes=32876,owidth=5485,oheight=3493,obytes=4424394,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 23a8ee532de2ecbd3115018db76cd731 X-Served-By: cache-lga21925-LGA X-Timer: S1709501897.029068,VS0,VE694 Content-Length: 32876 Connection: close
2024-03-03 23:26:50 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 01 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 ff c2 00 11 08 01 c2 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 32 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee 95 75 df 91 94 51 96 81 a3 a9 10 a0 a4 84 c9 Data Ascii: JFIF!!1&""&18/-/8D==DVQVpp!!1&""&18/-/8D==DVQVpp "2uQ
2024-03-03 23:26:50 UTC	16383	IN	Data Raw: dc 08 ab e8 48 76 06 a6 46 05 70 0f 28 06 dd 51 b1 68 eb 59 20 b1 c0 39 fd a8 d2 c9 31 04 bb 07 90 81 84 89 db 8c a2 e3 dc 69 94 31 6f 7c 36 bd e9 e3 88 ce 57 dc 4d 00 6e 40 01 6e 21 45 43 84 72 d1 a2 10 cf b8 84 62 ee 8c 4e 73 66 0a 5c c5 56 5a 95 92 5a c4 8c 61 d4 6c a4 1c 4d 30 8a e1 51 77 1b 58 9b fc 65 b5 58 e3 24 53 64 29 38 b7 9a 5b 4b b8 e2 0c f7 a8 18 09 21 b2 b9 b4 79 1d 63 94 30 fc ee 07 e7 70 1e 69 ae 14 10 02 ab 6e 1e 2b 22 8b 0f cc 97 31 a7 ca 5d 09 58 e1 7d 5e d7 0b 73 68 e9 46 8e 7a 0a c1 c7 43 c7 42 71 53 b6 78 a8 90 8e 45 7f 53 af c1 97 4e d3 d6 90 ae 5b 2b fd 34 bb 4b 6f 51 2c 46 55 39 14 3a 13 c5 76 11 b2 58 05 55 1c 00 7a 63 35 e2 b7 0a dd 59 a0 6b 34 4d 31 ad 84 fc 85 38 e6 99 03 a9 56 0a aa 80 28 06 89 34 18 d0 70 7e f1 f3 5b b3 e2 Data Ascii: HvFp(QhY 91i1o\|6WMn@n!ECrbNsf\VZZalM0QwXeX$Sd)8[K!yc0pin+"1]X}^shFzCBqSxESN[+4KoQ,FU9:vXUzc5Yk4M18V(4p~[
2024-03-03 23:26:50 UTC	110	IN	Data Raw: 07 89 52 b4 f7 55 c2 f8 c2 be e4 8e 1e 61 57 1b 95 bf 0f 5f 91 8f b9 0f 00 78 6b df 0a fe 40 fb 92 ab a7 0a e3 70 ac 22 38 44 72 f7 00 2b f9 a9 ef 88 f7 12 78 ed dc 11 c0 05 f8 22 78 4c ab f7 1a fb cb ef 52 07 88 9e 36 57 af ba 08 f1 91 f7 4d 65 ef 73 e1 bf 7f 7e ee e7 bb bf bd e7 dd df b9 b7 1d f8 6d c3 6e 1b f0 db ee 7f ff d9 Data Ascii: RUaW_xk@p"8Dr+x"xLR6WMes~mn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50371	104.36.115.113	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1706	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=32039267&p=156078&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_148=19421-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23486-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23489-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23539-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE; PugT=1709458560
2024-03-03 23:26:50 UTC	1031	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156078:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201_262_261_260_259; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Sun, 03 Mar 2024 23:26:50 GMT Transfer-Encoding: chunked Connection: close
2024-03-03 23:26:50 UTC	2437	IN	Data Raw: 39 37 39 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 37 32 31 33 44 42 42 34 2d 38 43 34 45 2d 34 35 46 38 2d 42 41 43 38 2d 32 31 34 39 44 33 32 41 38 42 31 46 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 37 32 31 33 44 42 42 34 2d 38 43 34 45 2d 34 35 46 38 2d 42 41 43 38 2d 32 31 34 39 44 33 Data Ascii: 979PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50366	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	578	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=800%2C450%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_yahoo_sports_800%2F8dfffacdcd577e74bf580a75d703245c&client=76f99bdb8f78cd44cc0b&signature=3ba9c4ced0691ddc3ea96362f7352a2d0c1a2f4d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	1152	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 5253 Cache-Control: public, max-age=2592000 Cache-Tag: 332638251107565655402585787143940510784,460042813648494421772122623019743714917,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100174-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 4ff431663e2ef27aeb3eb1d6e06eb6ce cld_latency: 1229 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:50 GMT Edge-Cache-Tag: 332638251107565655402585787143940510784,460042813648494421772122623019743714917,ae7a14591aaf8d474cdb3f92111c923e Etag: "b897c5425047a66f43134c6976885f72" Last-Modified: Sun, 03 Mar 2024 21:58:22 GMT Server: ECAcc (nya/7962) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=800,height=450,bytes=34936,owidth=3000,oheight=2013,obytes=1055953,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 4ff431663e2ef27aeb3eb1d6e06eb6ce X-Served-By: cache-iad-kjyo7100174-IAD X-Timer: S1709503157.498851,VS0,VE1229 Content-Length: 34936 Connection: close
2024-03-03 23:26:50 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 01 06 06 06 06 06 06 06 07 07 06 09 0a 09 0a 09 0d 0c 0b 0b 0c 0d 14 0e 0f 0e 0f 0e 14 1f 13 16 13 13 16 13 1f 1b 21 1b 19 1b 21 1b 31 26 22 22 26 31 38 2f 2d 2f 38 44 3d 3d 44 56 51 56 70 70 96 ff c2 00 11 08 01 c2 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 03 04 02 05 00 01 06 07 08 09 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e7 84 31 e5 d0 c9 57 35 0e d4 c6 7a Data Ascii: JFIF!!1&""&18/-/8D==DVQVpp!!1&""&18/-/8D==DVQVpp "61W5z
2024-03-03 23:26:50 UTC	16383	IN	Data Raw: b2 e0 72 8e 4e cc 33 5b 8a 82 2a 88 07 d1 67 28 58 47 71 0d 91 5e 23 f8 ed 1e 72 9c a7 2f ae 87 fb 35 15 60 49 c7 71 97 a8 7c c0 22 88 25 12 91 e2 57 17 c7 d1 7e 83 ea a7 b1 a9 8a 41 d4 c7 f8 94 91 d4 ae 21 8a 60 84 cb db cc c8 7f 32 c3 d9 9a dc 36 a2 e3 38 b2 7a d0 b2 97 24 11 90 c1 ba 39 e3 22 e5 1c 6c 34 ad 7f e5 2b a1 ed 3f 6a d5 e9 b9 2f ad 2e 2f a0 97 d1 ba cc 3c 04 a1 55 55 3d 91 f8 cd c3 56 04 81 6f 3a 09 04 a6 5a ee 51 94 9d 4a ec 73 a2 af 66 35 56 8e 60 10 d5 f4 e8 b6 bf 15 22 71 56 4d f1 a8 87 52 0c 0f c4 f1 30 95 41 b4 21 80 d1 d1 e4 06 d4 87 04 eb 60 76 22 22 39 22 c7 18 c8 c0 69 fd 57 11 ad a1 87 1f 49 f4 f6 7a ec ba c4 35 00 18 6a c5 2a 3c f0 1c 76 c1 ab 50 5b bf 71 45 88 86 3b 54 57 71 19 77 6b b2 52 2e b1 ac 62 c9 8d 6e eb a5 4f a4 e1 9a Data Ascii: rN3[g(XGq^#r/5`Iq\|"%W~A!`268z$9"l4+?j/./<UU=Vo:ZQJsf5V`"qVMR0A!`v""9"iWIz5j<vP[qE;TWqwkR.bnO
2024-03-03 23:26:50 UTC	2170	IN	Data Raw: 3e eb 9f cf 74 a7 75 f5 54 c3 68 f5 2a 93 4d 20 2a c9 95 1c f8 69 3c 02 82 0d f5 51 b4 ca 3d 02 a4 4a 8b 4a 10 68 ea d3 aa f2 3a fa c1 2a e0 03 d5 aa da aa 14 76 55 5a d0 ca 3a 90 81 80 ac 51 a6 b0 8d a0 c6 88 d0 98 9a ca 90 40 ac 21 54 40 d4 70 b9 aa 3b a0 1c 4c 4a 2f 7d 62 54 99 89 ed 0a 83 e7 d5 20 23 75 ff 00 13 14 fa 01 44 00 44 42 8a a1 c4 f1 20 a3 c8 d9 72 2a c6 14 8b f4 12 b9 8e 1a 4a d3 8c fd 54 ed dd 6d 3a 85 23 5d 02 d2 34 2a 01 15 31 55 e6 8d 75 1c 23 ad 15 01 34 14 a2 15 84 20 fd 82 03 92 93 15 57 3f 3f 34 fd 50 54 18 67 ee 78 03 9a a7 54 61 0f 54 27 95 4f a0 58 a7 6f 2c 7d d4 72 2e 08 0a 4c 94 23 90 59 a3 eb d8 2a 7d 8a d3 84 79 6e b6 95 aa 9e 17 36 3b a9 e3 59 d1 19 2a 39 9a d0 21 64 04 0a ee b9 74 28 48 57 bc 71 b0 82 75 54 d3 fe 40 a1 0b Data Ascii: >tuThM i<Q=JJh:vUZ:Q@!T@p;LJ/}bT #uDDB rJTm:#]41Uu#4 W??4PTgxTaT'OXo,}r.L#Y}yn6;Y*9!dt(HWquT@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50369	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	568	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_fox_news_text_745%2Fb024f429a6a4b2428f13a5458eb7adbc&client=76f99bdb8f78cd44cc0b&signature=5b0d6c665af85421414393b20dd9525d1315fce1 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2514 Cache-Control: public, max-age=2592000 Cache-Tag: 331913754444848513420536364211490576668,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100091-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 0530b0a187c780cb14ed3b0cc9db52de cld_latency: 386 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:50 GMT Edge-Cache-Tag: 331913754444848513420536364211490576668,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "1cd0aacd59a3d47ab715174a22f2ef21" Last-Modified: Sun, 03 Mar 2024 19:08:19 GMT Server: ECAcc (nya/78CC) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=17124,owidth=1280,oheight=720,obytes=79648,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 0530b0a187c780cb14ed3b0cc9db52de X-Served-By: cache-iad-kjyo7100091-IAD X-Timer: S1709505899.792896,VS0,VE386 Content-Length: 17124 Connection: close
2024-03-03 23:26:50 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 06 08 06 05 09 08 07 08 0a 09 09 0a 0d 16 0e 0d 0c 0c 0d 1a 13 14 10 16 1f 1c 21 20 1f 1c 1e 1e 23 27 32 2a 23 25 2f 25 1e 1e 2b 3b 2c 2f 33 35 38 38 38 21 2a 3d 41 3c 36 41 32 37 38 35 ff db 00 43 01 0e 0e 0e 13 11 13 26 15 15 26 4f 35 2d 35 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f 4f ff c2 00 11 08 01 2c 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 02 07 ff c4 00 1a 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 02 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fa 34 88 30 10 0c 00 Data Ascii: JFIFC! #'2#%/%+;,/35888!=A<6A2785C&&O5-5OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO,40
2024-03-03 23:26:50 UTC	741	IN	Data Raw: 64 23 7c 68 a8 d6 a2 c6 80 e7 bc cc 12 27 82 68 a9 9b 9e 48 90 75 1e 99 26 0a b5 1a 0c 65 26 34 0a 95 2a 05 e6 9c 11 91 1a cf 14 70 54 c4 5f 06 0b bf cb aa ac a6 f2 5a fa 62 48 6e e2 17 52 5e e0 4b c8 b3 42 a4 c7 d0 68 73 e1 b7 83 aa a6 ea a5 f7 00 cc f2 db 05 59 40 85 84 22 51 94 67 9a 70 4e 70 d1 16 30 2c 47 53 11 b0 89 45 b3 b8 04 e7 71 2a c9 84 0d 1e 53 43 1a 3b 2d 06 d0 80 7d 58 97 3a a4 cf 21 a2 a3 d6 38 46 27 38 df e8 a8 b9 8d 24 8a 74 98 47 d5 49 1b d0 65 ac 55 3a b4 2a d5 24 0e af 0b 83 72 de 9c fa b4 6b 37 ac 73 5c 04 34 e6 2f 9a ac c0 0f ea 39 a4 5f 81 44 74 8e ac 54 ed 1b 34 c6 70 8f fb aa d4 c1 0d 76 57 83 13 bf 96 f5 d2 71 f4 bc 34 c9 aa 06 06 b8 49 00 6a 27 2b e7 64 2a 55 d2 99 31 3c 50 35 69 40 61 26 43 60 cd 87 35 4d 8c a2 f0 ea cd 2e 25 Data Ascii: d#\|h'hHu&e&4pT_ZbHnR^KBhsY@"QgpNp0,GSEqSC;-}X:!8F'8$tGIeU:$rk7s\4/9_DtT4pvWq4Ij'+dU1<P5i@a&C`5M.%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50083	74.119.119.150	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	763	OUT	GET /dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f
2024-03-03 23:26:50 UTC	519	IN	HTTP/1.1 302 Found content-length: 0 date: Sun, 03 Mar 2024 23:26:50 GMT server: Kestrel cache-control: no-cache expires: Sun, 03 Mar 2024 00:00:00 GMT location: https://i.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-tlMNFJhyr-U_3dvKgwvX52_tI86DQEgnJgATnw pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1579716 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50368	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=ef85e8cf2223994c333ea8e9159b98ffe0bc6080 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 409588 Cache-Control: public, max-age=2592000 Cache-Tag: 242478970273792402798397858869058529945,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100095-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 91 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:50 GMT Edge-Cache-Tag: 242478970273792402798397858869058529945,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "fb63bb3ad5a7073858b9e60838b00c27" Expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 01 Feb 2024 18:22:02 GMT Server: ECAcc (nya/7983) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=293,owidth=400,oheight=400,obytes=75663,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100095-IAD X-Timer: S1709098822.316054,VS0,VE91 Content-Length: 293 Connection: close
2024-03-03 23:26:50 UTC	293	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 4e 50 4c 54 45 47 70 4c 00 c6 ff 00 c6 ff 61 dc fd 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff c8 f3 fd fa fe fe af ed fd 11 ca fe dc f7 fe bc f0 fd 94 e7 fd 6c de fd ea fa fd 78 e1 fc 3b d3 fe 31 d1 fe 22 ce fe 45 d5 fd 49 d6 fd 43 d5 fd 42 31 89 89 00 00 00 0a 74 52 4e 53 00 c1 ff ff 97 f9 d9 09 9a 31 a3 db f8 54 00 00 00 7c 49 44 41 54 18 d3 65 cf d7 11 02 31 0c 04 d0 bd 95 a3 e4 74 11 e8 bf 51 3e 60 18 c0 af 80 0d 00 80 ec 82 f7 c1 65 bc c4 c4 b7 14 01 20 2e fc 58 22 80 c4 2f 09 c8 fc 91 e1 f6 a6 0f 92 64 d5 8b 74 08 47 1b 4d 45 4b ef 3a f4 0c f0 87 95 ad 98 58 2f 66 65 78 78 d9 6a df cb d8 9a 9a ed 77 8f 70 48 bd d6 ba 4a 13 b9 ad 35 Data Ascii: PNGIHDR(-SNPLTEGpLalx;1"EICB1tRNS1T\|IDATe1tQ>`e .X"/dtGMEK:X/fexxjwpHJ5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50372	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	2332	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=82450978-d9b5-11ee-a770-215513ae5a46 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1710633600%3A261_260_259_263_201_262%7C1709510400%3A248%7C1710028800%3A265; SyncRTB3=1710028800%3A223_15_2_38%7C1710720000%3A35%7C1710633600%3A176_5_165_71_264_238_104_231_22_56_220_3_243_55_249_96_8_178_266_234_7_54_21_99_214_46_166_48_233_240_13_250_81%7C1714608000%3A69%7C1712016000%3A224%7C1710288000%3A63; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; PugT=1709508409
2024-03-03 23:26:50 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 09:58:37 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 09:58:37 GMT; path=/ Set-Cookie: PugT=1709459917; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:58:37 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50370	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	570	OUT	GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_people_articles_471%2Ff2816944f427428b6dbbce36b851f474&client=76f99bdb8f78cd44cc0b&signature=d09cabf23bc17090e996922db5bbf3be311a0dd6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:50 UTC	1494	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2514 Cache-Control: public, max-age=2592000 Cache-Tag: 392181853841396116862568578171727174411,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100108-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: ab6da7e4d81454f38e54dcd0c3644d05 cld_latency: 334 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:50 GMT Edge-Cache-Tag: 392181853841396116862568578171727174411,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e Etag: "f640aebe153a94d3f89d995d692fe8b7" Last-Modified: Sun, 03 Mar 2024 16:46:55 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/78CE) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=500,height=500,bytes=18633,owidth=360,oheight=480,obytes=28332,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: ab6da7e4d81454f38e54dcd0c3644d05 X-Served-By: cache-iad-kjyo7100108-IAD X-Timer: S1709505899.782190,VS0,VE334 Content-Length: 18633 Connection: close
2024-03-03 23:26:50 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c2 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 00 07 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 01 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d3 3a 27 4a 4b d1 b8 24 74 4e 09 15 8a ac Data Ascii: JFIF, ,'/&$&/'F7117FQD@DQbXXb\|v\|, ,'/&$&/'F7117FQD@DQbXXb\|v\|"4:'JK$tN
2024-03-03 23:26:50 UTC	2250	IN	Data Raw: fe 46 0f 42 e0 9a dc ea 1f 6e 14 8c 59 76 48 b5 c8 de fa 32 31 16 8d 8d e8 98 9f 83 f8 17 22 3a c5 bb 1f 26 0e 11 26 d2 46 28 39 33 ab 87 eb 64 45 37 54 45 32 8a 12 d5 8c 43 62 90 a4 85 22 c6 cb 2c bd 2c 6c b1 11 3a c7 c9 2f b1 d3 fa 14 2d 18 e0 a3 c1 96 3d d1 92 62 75 6b fe 98 e3 7b b2 28 a2 bc 18 f4 92 19 18 b6 25 45 8f e0 48 47 5b 24 8e e4 e4 61 7b 23 14 d3 42 63 96 d2 2b fb 8c 82 17 8b 19 ce 94 49 6e 63 96 e3 25 2a 14 bc ec 48 67 5f 76 27 fb 18 1f ea 62 e1 0a c9 5e e4 61 fb 31 09 97 e0 c6 50 90 c9 2d c6 9a 21 26 c7 16 d9 da 59 62 62 d1 ba 3b c4 86 8f ea 11 38 91 d3 70 63 e0 5c 12 e0 5e 6c 9f 22 d5 8d 09 d3 15 34 34 34 31 0b 4c b3 a3 f2 6b d7 8f ec 74 cb f5 31 f0 4b 34 20 b7 63 ea e1 27 da 85 55 a3 13 f0 64 95 b1 6d a3 7a 31 a3 1c bd 68 c9 22 28 5a 67 Data Ascii: FBnYvH21":&&F(93dE7TE2Cb",,l:/-=buk{(%EHG[$a{#Bc+Inc%*Hg_v'b^a1P-!&Ybb;8pc\^l"4441Lkt1K4 c'Udmz1h"(Zg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50377	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	2254	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEAIvvYGKi3MwJbcEVt_pRgM&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1710633600%3A261_260_259_263_201_262%7C1709510400%3A248%7C1710028800%3A265; SyncRTB3=1710028800%3A223_15_2_38%7C1710720000%3A35%7C1710633600%3A176_5_165_71_264_238_104_231_22_56_220_3_243_55_249_96_8_178_266_234_7_54_21_99_214_46_166_48_233_240_13_250_81%7C1714608000%3A69%7C1712016000%3A224%7C1710288000%3A63; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; PugT=1709508409
2024-03-03 23:26:51 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:50 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:26:50 GMT; path=/ Set-Cookie: PugT=1709508410; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50384	104.36.115.113	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	2208	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=849114&p=159463&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1710633600%3A261_260_259_263_201_262%7C1709510400%3A248%7C1710028800%3A265; SyncRTB3=1710028800%3A223_15_2_38%7C1710720000%3A35%7C1710633600%3A176_5_165_71_264_238_104_231_22_56_220_3_243_55_249_96_8_178_266_234_7_54_21_99_214_46_166_48_233_240_13_250_81%7C1714608000%3A69%7C1712016000%3A224%7C1710288000%3A63; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; PugT=1709508409
2024-03-03 23:26:51 UTC	788	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=159463:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Sun, 03 Mar 2024 23:26:50 GMT Content-Length: 692 Connection: close
2024-03-03 23:26:51 UTC	692	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 37 32 31 33 44 42 42 34 2d 38 43 34 45 2d 34 35 46 38 2d 42 41 43 38 2d 32 31 34 39 44 33 32 41 38 42 31 46 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f Data Ascii: PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50390	151.101.65.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	838	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:26:51 UTC	965	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:51 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:26:51 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 19857 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:51 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-ewr18120-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508411.011091,VS0,VE21 X-vcl-time-ms: 21 transfer-encoding: chunked
2024-03-03 23:26:51 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-03 23:26:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-03 23:26:51 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50382	34.111.113.62	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	751	OUT	GET /idsync/ex/receive?partner_id=3205&partner_device_id=9c710547-ba4c-4952-9692-0a9d5f6959dd&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D437%26ssp%3Dcriteo%26user_id%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	200	IN	HTTP/1.1 403 Forbidden Content-Length: 134 Content-Type: text/html; charset=UTF-8 Date: Sun, 03 Mar 2024 23:26:51 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:51 UTC	134	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 34 30 33 3c 2f 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e Data Ascii: <!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50385	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1048	OUT	GET /cksync.php?cs=1&type=zem&ovsid=mo68x8gjbJJi9doJz8TR HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1
2024-03-03 23:26:51 UTC	629	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ze=mo68x8gjbJJi9doJz8TR~~1;Expires=Mon, 03 Mar 2025 23:26:51 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:51 GMT Connection: close
2024-03-03 23:26:51 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:51 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50373	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	1198	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chkChromeAb67Sec=1; KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; DPSync3=1709510400%3A248%7C1710028800%3A265%7C1710633600%3A263_201; SyncRTB3=1710633600%3A5_220_3_104_165_13_54_71_8_21_250_231_46_166_178_55%7C1710288000%3A63%7C1710028800%3A2_223_15; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; PugT=1709508408
2024-03-03 23:26:51 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:50 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:26:50 GMT; path=/ Set-Cookie: PugT=1709508410; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50359	35.186.193.173	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	822	OUT	GET /int/cm?exc=20&gdpr=0&gdpr_consent=&gpp_sid=-1&gpp=DBAA&callback=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26vsid%3D3525099948919525000V10%26type%3Dctn%26refUrl%3D%26vid%3D95083994863525099948919525000V10%26ovsid%3D%3CDSP_USER_ID%3E%26axid_e%3D%26 HTTP/1.1 Host: i.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	757	IN	HTTP/1.1 302 Found Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_006032ff9e2544ada39734a11952c619=1; path=/; domain=.ctnsnet.com; expires=Mon, 03 Mar 2025 23:26:51 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT x-xss-protection: 1; mode=block Status: 302 Location: https://hb.yahoo.net/cksync.php?cs=1&vsid=3525099948919525000V10&type=ctn&refUrl=&vid=95083994863525099948919525000V10&ovsid=006032ff9e2544ada39734a11952c619&axid_e=&y=null&gdpr=0 Content-Type: text/html;charset=UTF-8 Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50360	52.21.191.144	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	656	OUT	GET /fUD7hqXV/v2?_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	373	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:50 GMT Content-Length: 0 Connection: close Location: https://hb.yahoo.net/cksync.php?cs=1&type=58280&ovsid=e4423880-7610-4ca4-94ee-3ab62836ffe1 Set-Cookie: stx_user_id=e4423880-7610-4ca4-94ee-3ab62836ffe1; Max-Age=2592000; Expires=Tue, 02 Apr 2024 23:26:50 GMT; Path=/; Domain=sharethrough.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50344	54.158.147.217	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:50 UTC	694	OUT	GET /getuid/15563?gdpr=0&gdpr_consent=&gpp_sid=&gpp=&r=https%3A%2F%2Fhb.yahoo.net%2Fcksync.php%3Fcs%3D1%26type%3D58601%26ovsid%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	406	IN	HTTP/1.1 302 Date: Sun, 03 Mar 2024 23:26:50 GMT Content-Length: 0 Connection: close Server: nginx Set-Cookie: vst=u_436cb148-05c7-43b4-bf78-0e6201e28826; Domain=.gumgum.com; Expires=Mon, 03 Mar 2025 23:26:50 GMT; Path=/; Secure; SameSite=None Location: https://hb.yahoo.net/cksync.php?cs=1&type=58601&ovsid=u_436cb148-05c7-43b4-bf78-0e6201e28826 Content-Language: en-US Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50358	100.26.88.123	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	472	IN	HTTP/1.1 204 No Content Date: Sun, 03 Mar 2024 23:26:51 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: adtheorent[cuid]=cuid_836e5ca1-d9b5-11ee-acab-125e5676ad8d; path=/; domain=.adentifi.com; expires=03 Mar 2026 23:26:51 Z; SameSite=None; Secure; version=1; path=/ Set-Cookie: adtheorent-legacy[cuid]=cuid_836e5ca1-d9b5-11ee-acab-125e5676ad8d; path=/; domain=.adentifi.com; expires=03 Mar 2026 23:26:51 Z; Secure; version=1; path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50365	34.36.216.150	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	624	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	438	IN	HTTP/1.1 302 Found set-cookie: ssi=071c8962-82a1-4ccf-aa26-4eb6025e5ced#1709508411248; Domain=.sitescout.com; Expires=Mon, 03-Mar-2025 23:26:51 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= Content-Length: 0 date: Sun, 03 Mar 2024 23:26:50 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50189	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	1296	OUT	GET /imp_s2s/v3/OL1J8HlzOVtRfsvCqRLTq3U6sHUWOQCrtvBxbLqaitBXQ06-huFtCYJJfIfFeTJUu54fsGtHMDzTrqS5WF-6R8o833dNla0EBiviQKPKIfNpmD0P3xT9pJDKdQTyp-uGEBuORPyUV3wLD3xPfBwo6z22FBybvI1sxTp-6vtmpMow84Tfp3xPPz5_TLqjkBaY5YW8WVV1yal-useiPntPdHd5YbJjjZ8ygEs0cb5fOkUYPv3ZMY9tDNU3XIoETLUa89lZmSNRZlVYZZ-E8mofB4cKaKZKPSOrSb2xk6Rens5vULra87zdzI4ocBIALpmEntbi8lXX8IEPvo7f4is5sTDnWQWSS3DRfkJ0_9r6sE5TyCjN5kRMPZjBCyKwY_N-uEC3crZpUz1THUrtREouXQ8RaYEEwEGSKI16EL8jps8QvP_Gfpn2YITnA5sXEVH7fvsc2TYh1uTWNPhMoHP_r4I4ug/ZeUHMAAAV_IITwNPAAHsARD4OapjbwedrlduUA?q=1&cbvp=2 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=3b652fc1-53a0-40de-ba73-a4ae557bd47f; c=1709508407; tuuid_lu=1709508409; ssh=!medianet,1709508409!intentiq,1709508407
2024-03-03 23:26:51 UTC	260	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Content-Type: text/html; charset=UTF-8 Date: Sun, 03 Mar 2024 23:26:51 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50375	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	973	OUT	GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFMbzgwN0x5ZzRBQUJRNm1XOFJHUQ&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:51 UTC	743	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Date: Sun, 03 Mar 2024 23:26:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 390 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:51 UTC	390	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 61 64 78 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 62 65 65 5f 73 79 6e 63 5f 70 61 72 74 6e 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50386	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	1063	OUT	GET /cksync.php?type=mf&ovsid=3b652fc1-53a0-40de-ba73-a4ae557bd47f&cs=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1
2024-03-03 23:26:51 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1;Expires=Mon, 03 Mar 2025 23:26:51 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:51 GMT Connection: close
2024-03-03 23:26:51 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:51 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50388	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	778	OUT	GET /crum?cm_dsp_id=45&external_user_id=CAESEOUXsq40wyL1RuRxz9UqLQE&google_cver=1&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:26:51 UTC	985	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 85ed64d2dd9678db-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:51 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:26:51 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yNJI8lvSUSCkg6NkwC1svlicl0arGbr7hvjVetfnUiY9x0GL9SVw7fU3fDnqtlOutCfJwoNGd3QIPK%2BCf7U5bYeQXTad%2BS5a7DS1zXozSziBKusyCVROaPD%2BbeBv%2FHkTTWhSvUEKSLypVA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:26:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
562	192.168.2.4	50376	52.71.191.116	443

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	881	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Csyn%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:26:51 UTC	637	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:51 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AALo807Lyg4AABQ6mW8RGQ&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsyn%252Cpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:51 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50387	52.46.143.56	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	782	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB&gpp=DBAA&gpp_sid=-1&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A5m4uM0keE5RtYimSg3trdQ\|t
2024-03-03 23:26:51 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sun, 03 Mar 2024 23:26:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: GCHM2KRBWYAT2C0JK686 Set-Cookie: ad-id=A5m4uM0keE5RtYimSg3trdQ; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:26:51 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:26:51 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-03 23:26:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50379	162.248.18.34	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	2194	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-nLNhotxE2uVq21nL64vd2.9J7PPx9gY-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1710633600%3A261_260_259_263_201_262%7C1709510400%3A248%7C1710028800%3A265; SyncRTB3=1710028800%3A223_15_2_38%7C1710720000%3A35%7C1710633600%3A176_5_165_71_264_238_104_231_22_56_220_3_243_55_249_96_8_178_266_234_7_54_21_99_214_46_166_48_233_240_13_250_81%7C1714608000%3A69%7C1712016000%3A224%7C1710288000%3A63; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; PugT=1709508409
2024-03-03 23:26:51 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:51 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1709508411; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:51 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50383	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	839	OUT	GET /sync?ssp=bidswitch&bidswitch_ssp_id=medianet&bsw_user_id=9c710547-ba4c-4952-9692-0a9d5f6959dd&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=3b652fc1-53a0-40de-ba73-a4ae557bd47f; c=1709508407; tuuid_lu=1709508409; ssh=!medianet,1709508409!intentiq,1709508407
2024-03-03 23:26:51 UTC	527	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Sun, 03 Mar 2024 23:26:51 GMT Location: //x.bidswitch.net/sync?dsp_id=250&expires=14&user_id=3b652fc1-53a0-40de-ba73-a4ae557bd47f&ssp=medianet&gdpr=0 Set-Cookie: ssh=!bidswitch,1709508411!medianet,1709508409!intentiq,1709508407; path=/; expires=Tue, 03-Mar-2026 23:26:51 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50347	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	1776	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2628&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=659677893&pvid=-3&req_size=300x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&pbAcid=234509328780378161709508396847&pbBidId=85054260041171871709508396886&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1
2024-03-03 23:26:51 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:51 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50389	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	846	OUT	GET /crum?cm_dsp_id=133&external_user_id=VrYooxROk2iWhZayXuk_OT1S2cFU4tRdIMkcva8DRMA&pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZeUHNEt3uSYAABBfAETINAAA%26015&tc=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:26:51 UTC	991	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 85ed64d2e9c943c8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:51 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:26:51 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Y6LBfkg8oFyL6l0obPS98vQltPHX1m%2FWQTdjahHJbJ%2BJnIzFX2o7%2FZQeOY3j3cN%2B57ArI12ONa4G31LoGSV1Fyaph5JFLPe0UqSAbI0m%2BFqvC2fqW6t80%2BQgrmEYbZDEtrvsOW%2FAQcH6Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:26:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50381	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	1382	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=dtm&refUrl=&vid=95083994863525099948919525000V10&ovsid=AAAMobTejwwu5gNlbA8iAAAAAAA&axid_e=&expiration=1709594809&nuid={{AXID}}&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1
2024-03-03 23:26:51 UTC	670	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1;Expires=Fri, 30 Aug 2024 23:26:51 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:51 GMT Connection: close
2024-03-03 23:26:51 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:51 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50374	35.211.178.172	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	1155	OUT	GET /sync?dsp_id=409&expires=14&user_group=1&user_id=9f772c54-4a6c-45eb-91e5-92ed9408d752&ssp=pubmatic HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; c=1709508406; tuuid_lu=1709508408; custom_data=YzXp-V9qdWFuQ2trRyUyRkRua0EzQjFTSFhHZm1WMjB6SUVHY3o1SXVWdDNyTG1RTkpadlFma3dka0hHQW8xbEhQVVhhaW5neHN3JTJGTURKUGh4RUlaOGtBNlBuV3FURW1qNklkNTRhMkZwUFhzZG5DcXlCeTElMkJUc2VKVSUyQjMwRmNsMXE3eEhZN01sbiUyRk1yOFUzbFVVQmw2VWt6NzM3dUVaREE1Y0JQRnRSVnlUTERDV3l2OVFINjA4YXIlMkJHWjBsTDYxdzJEdkc
2024-03-03 23:26:51 UTC	614	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 03 Mar 2024 23:26:51 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=9c710547-ba4c-4952-9692-0a9d5f6959dd&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50378	185.184.8.90	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	704	OUT	GET /cm-notify?pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=OU3AHrVubK0CqVNVWknR_1709508409330; ts=1709508409
2024-03-03 23:26:51 UTC	459	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:51 GMT vary: Accept-Encoding location: https://hb.yahoo.net/cksync.php?cs=1&type=57926&ovsid=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sun, 03 Mar 2024 23:26:51 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50397	52.202.146.197	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	755	OUT	GET /ibs:dpid=30646?dpuuid=y-OXNMhGxE2pE_.U31ZMV5jUVDosg_UYe0w5g-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	736	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:51 GMT Content-Length: 0 Connection: close X-TID: J7XGZT3pTVI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=30646 DCS: dcs-prod-va6-1-v056-0c189c2b6.edge-va6.demdex.com 0 ms set-cookie: demdex=65729931892392140142881563266192020616; Max-Age=15552000; Expires=Fri, 30 Aug 2024 23:26:51 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50396	13.225.214.90	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	611	OUT	GET /adscores/g.pixel?sid=9202214988&yho=y-vT1tesVE2p49QYkHV_eeiJNdnDAIick8CcI-~A HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	969	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Sun, 03 Mar 2024 23:26:51 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A65kLJojRr82v%2F5wbsMF3rXFEGonM0S2N; Path=/; Domain=.agkn.com; Expires=Mon, 03-Mar-2025 23:26:51 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://cms.analytics.yahoo.com/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214750604810009654359&gdpr=&gdpr_consent= X-Cache: Miss from cloudfront Via: 1.1 158c603777b70da7a395beb589ad17da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR50-C1 X-Amz-Cf-Id: 5HQvbyTY_tzLsrvJ44kh0E-oyzQ3_dsW4tZdAzn7ZRur6_OInzPxnw==
2024-03-03 23:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50393	69.194.240.13	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	869	OUT	GET /csync/RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3525100008919577000V10%26type%3Dr1%26refUrl%3D%26vid%3D95084017463525100008919577000V10%26axid_e%3D%26ovsid%3DRX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	663	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:51 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%7D; path=/; expires=Mon, 03 Mar 2025 23:26:51 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://contextual.media.net/cksync.php?cs=8&vsid=3525100008919577000V10&type=r1&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005 etag: RX3c4bc8e3ffb2488a8a78eb15aa2f9706005 connection: close
2024-03-03 23:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50391	104.36.113.111	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	2118	OUT	GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1710633600%3A261_260_259_263_201_262%7C1709510400%3A248%7C1710028800%3A265; SyncRTB3=1710028800%3A223_15_2_38%7C1710720000%3A35%7C1710633600%3A176_5_165_71_264_238_104_231_22_56_220_3_243_55_249_96_8_178_266_234_7_54_21_99_214_46_166_48_233_240_13_250_81%7C1714608000%3A69%7C1712016000%3A224%7C1710288000%3A63; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; PugT=1709508409
2024-03-03 23:26:51 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:51 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1709508411; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:51 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50392	104.36.113.111	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	2123	OUT	GET /AdServer/SPug?partnerID=156078&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; SPugT=1709508409; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; chkChromeAb67Sec=2; pi=159463:4; DPSync3=1710633600%3A261_260_259_263_201_262%7C1709510400%3A248%7C1710028800%3A265; SyncRTB3=1710028800%3A223_15_2_38%7C1710720000%3A35%7C1710633600%3A176_5_165_71_264_238_104_231_22_56_220_3_243_55_249_96_8_178_266_234_7_54_21_99_214_46_166_48_233_240_13_250_81%7C1714608000%3A69%7C1712016000%3A224%7C1710288000%3A63; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; PugT=1709508409
2024-03-03 23:26:51 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:50 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1709508410; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50395	50.57.31.206	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	644	OUT	GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-RKPC2uxE2oP_.YzvaoufWXPgbw9SyuMi_tM-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	671	IN	HTTP/1.1 302 Found Location: /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-RKPC2uxE2oP_.YzvaoufWXPgbw9SyuMi_tM-~A&sInitiator=external UIP-Response-Status: Ok Frontend-ID: 8 Set-Cookie: SEUNCY=727932AC18BCE3A; Expires=Mon, 03 Mar 2025 23:26:51 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Sun, 03 Mar 2024 23:26:51 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50398	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	4299	OUT	POST /p?_V=test&V_sec=pb&evt=ad_tb&t=0.289920817002256&_sqno=4&ts=11635&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=waiting&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=NaN&adUrl=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&view=100%25&mtype=na&ad_sys=&ad_lng=&pos=&taken=&r_code=&tag=&client=&crid=&adlbl=&adTag=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D3.624.0%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&latency=1670&status=200 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:26:51 UTC	1057	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 101 date: Sun, 03 Mar 2024 23:26:51 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50399	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	4281	OUT	POST /p?_V=V&V_sec=pb&evt=ad_tag_passed&t=0.8447437327031773&_sqno=5&ts=11654&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=waiting&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=NaN&adUrl=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&view=100%25&mtype=na&ad_sys=&ad_lng=&pos=&taken=&r_code=&tag=&client=&crid=&adlbl=&adTag=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D3.624.0%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:26:51 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 1 date: Sun, 03 Mar 2024 23:26:51 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50401	142.250.72.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	1177	OUT	GET /pcs/view?xai=AKAOjsusXKVP2l_Sn2kNI6S1iCHQ-xacDw5n967RbE46SE-fncaCR0gR7pXZI0qd4emYvGHIY0y7k5y8BQM25gYfwToZwzNDWBnc23A2Z2yCaJLMj8Cg0y0-sqgeVzEHQ15ikN7651_99qnMgI_kLCWsRihwS7l-tacPPHZmBr0bcCX1i7w9qgOWR9ohqO0CNEm4I9o-32he_lNbsVdga_86fiKXj4ESk7McTM9bnv1gGRObSMoCG3HMaehs22a8xJOxRDOiKw0q4gnUb3n0b6NTtLU38MOR3scI_rJqOSlg_90ql-MMdDUA5budrroOF5-3-B_6Xgg2lElT7m_VHDxDhZkNYuNoz11T5wV2K3t4hO1TtPmBaW7zENpfhyWzCspQBQKty9TAX4Y4N_gF6dF_spbgsHl-3Z4&sai=AMfl-YTBQPBA10TAK-8oDnXhWJUONtBs3FkK-UDXnWG6Y57cBezJtgMNJ7pcDInUeS8sKTgDDedEQ9XJM8YKf1-CI8euABsVdNGtC3z6CqQ8lleX1WjCk_uXxIrYsuDkTjhKYaiJUx-WraJ14u7sftFU0Hg&sig=Cg0ArKJSzGHVxVi5TrMqEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:51 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Sun, 03 Mar 2024 23:26:51 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50402	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	4318	OUT	POST /p?_V=test&V_sec=pb&evt=ad_event&t=0.8719274165624402&_sqno=6&ts=11699&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=waiting&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=NaN&adUrl=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&view=100%25&mtype=na&ad_sys=&ad_lng=&pos=&taken=&r_code=&tag=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&client=&crid=&adlbl=&ad_evt=ads-request&adblocker=false HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:26:51 UTC	1056	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 89 date: Sun, 03 Mar 2024 23:26:51 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50400	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2F64340b00-6982-11ec-a6ee-d01e5d0b5861&client=76f99bdb8f78cd44cc0b&signature=d8586900015e214006818744f76d7ffdbd495d00 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	1126	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2279259 Cache-Control: public, max-age=2592000 Cache-Tag: 417884516681699342842259125334062851322,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21958-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 18 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:51 GMT Edge-Cache-Tag: 417884516681699342842259125334062851322,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "491574b00cd8fb418215debdb2dca2c9" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 23:06:34 GMT Server: ECAcc (nya/1C20) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=535,owidth=400,oheight=401,obytes=176359,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21958-LGA X-Timer: S1707229152.071018,VS0,VE18 Content-Length: 535 Connection: close
2024-03-03 23:26:51 UTC	535	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 d5 50 4c 54 45 47 70 4c 46 60 a3 3a 56 9c d4 75 7d 37 54 9c c3 35 42 be cc e1 e9 b9 bb c7 47 53 80 92 c0 c4 38 45 c7 43 4f dd ba c2 4b 64 a5 c6 58 65 4c 65 a6 c7 4a 56 ff ff ff c8 4e 5a 81 92 be 41 5b 9e fa fa fb a5 b2 d1 5c 73 ad 5e 74 ac dd e1 ec 77 8a ba 7d 90 bc f7 f8 fa c5 53 61 d1 d7 e7 b0 bb d6 c1 2d 3a 8b 9b c5 23 42 92 a6 b2 d1 f5 f7 fa be 22 30 59 70 ac a1 ae cf 95 a4 ca 29 47 94 9b a9 cc 31 4e 98 c9 d1 e2 71 85 b7 dd e2 ed bf 27 35 da 8c 94 4f 68 a7 6b 80 b5 dd 94 9b 61 77 b0 79 8b bc 37 54 9b 48 62 a3 f0 f3 f7 fc fe fe 23 42 91 e3 a9 ae cc 6c 78 d7 82 89 7f 90 be 84 95 c1 bc c5 db 40 5b a0 ea ed f4 ba c4 db e6 b9 be ce 67 72 c4 53 61 0a Data Ascii: PNGIHDR(-SPLTEGpLF`:Vu}7T5BGS8ECOKdXeLeJVNZA[\s^tw}Sa-:#B"0Yp)G1Nq'5Ohkawy7THb#Blx@[grSa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50404	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	2067	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2668&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=771334461&pvid=-3&req_size=728x90%7C970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center&pbAcid=291303319049048931709508396925&pbBidId=19881000005188811709508396926&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1
2024-03-03 23:26:51 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:51 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50405	142.251.40.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	1739	OUT	GET /pagead/adview?ai=Ca7amMAflZfKvAc-GvPIPgdiH2ASO1rX8YLrSurXDCcCNtwEQASAAYMkGggEXY2EtcHViLTIzMDUzMDQ5OTkxODg2NTPIAQngAgCoAwHIAwKqBK4CT9DvSMJSpyCyAhWqjPawHm60WGrlSSuI1jiKunzcK7g_taPHaSal6xuEv6HI0XIij_AjKSt5PKGMsBuWAoDeHIvqjVRELKO2nwcEgiSFy3xxy-0m0TKbQrUzkwSUzKPJXHE6DUdAqEivkKXA5Y82F8DXxOXksw1NrV9fumwmym67yeKDsHngoFi7mDK4dst112_4cBiTQ2mhB5k23KyrwM9oqgtIwn8T8dX5kQlV_WEN1-6HiqreIz3JsSsRddikwXVkPZ0BuB_805WabouBMa6FVmNBasDASOeMka1WUzK3ty62HLhihsLR3g5D2cu4YEaBFJWrC3ObvjzJoCjYfqkN_EtYoYgprA9-VB9Od7nXGztrri51averw1ln0Vt4US05p5xJlp5tsoQ-lqPgBAGABvGLmIbm6JGasQGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOliG9q-Hn9mEA4AKA_oLAggBgAwB4g0TCJ2_sIef2YQDFU8DTwgdAewBS9AVAYAXAbIXHQobEhRwdWItMjMwNTMwNDk5OTE4ODY1Mxiaq5AB&sigh=9gj_CU_djz8&uach_m=%5BUACH%5D&cid=CAQSTgB7FLtqIC6c2xhbYUxTjdtwxcFKEatG9Hg15woZxaaD3JCYBtfB8D_hOqlV_3tCsG-VSmL43Y6Qs7gyx9eDdqkYZ5RNip_72GV8-O5D2BgB&cbvp=2&vis=1 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:52 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sun, 03 Mar 2024 23:26:52 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50403	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	1985	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2673&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25014&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1
2024-03-03 23:26:52 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:51 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:52 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50408	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	575	OUT	GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F9bd8fadceb9b5eb9917c1c48de181771&client=76f99bdb8f78cd44cc0b&signature=59ab14b5e625248cf28afb5053ca5d32e497ded0 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	1150	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 21232 Cache-Control: public, max-age=2592000 Cache-Tag: 440703356820040898492982900862065025245,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000145-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 59000d33d202568a757b2e03b96787f0 cld_latency: 568 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:51 GMT Edge-Cache-Tag: 440703356820040898492982900862065025245,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e Etag: "b61112ac42f1fdbc326e5dd508e05d0c" Last-Modified: Fri, 01 Mar 2024 22:04:15 GMT Server: ECAcc (nya/7956) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=500,height=500,bytes=45182,owidth=1677,oheight=1153,obytes=219503,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 59000d33d202568a757b2e03b96787f0 X-Served-By: cache-iad-kiad7000145-IAD X-Timer: S1709487182.616913,VS0,VE568 Content-Length: 45182 Connection: close
2024-03-03 23:26:51 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 00 01 08 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 c8 dc 6d fc fd 26 3c 5f 27 b2 1e af 58 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"5m&<_'X
2024-03-03 23:26:51 UTC	1	IN	Data Raw: 8d Data Ascii:
2024-03-03 23:26:51 UTC	16383	IN	Data Raw: 13 88 78 20 3c 28 39 67 d8 ec 12 b7 d3 db 46 33 24 65 8f 2a d5 ac 83 32 1b 4e a6 d9 83 83 0c fe bf 7b 55 f8 8d ae 7a 5d 51 6f 94 4f d7 84 e6 ae c0 06 7a ac e8 df 87 4d 1d b9 e6 bb d7 b7 6d 01 20 86 cd c9 ee 59 92 c4 cd f0 82 b7 ab bb be fc 25 86 29 32 a6 2c 92 81 f6 2f 4c 9e dd bb 0c a9 c0 83 b7 35 7f cd 9b 00 c9 47 da 31 86 73 c4 90 9c 78 a3 9b d2 ef 5e ae aa f2 c4 24 32 7c 35 d5 7e 1f d2 74 41 5a d3 42 93 95 7c 6f 72 46 23 ba fb 37 ab 2f ee c6 46 fe dc 8f dd 63 b2 e8 bd a3 1a 60 ff 00 a9 4a 57 3e f1 01 10 00 0c 5b 92 80 07 33 ad 7b 2c 1a 6a ef 43 5c df fa a9 da aa 15 54 cd 1a b0 04 b3 0c 88 f6 c2 ed 9b 49 fd 0d 7d 99 31 7d 86 44 fc 76 9c d4 d8 f3 d9 c8 39 bf a6 eb 47 67 5d 45 9d 7d 78 0c 0f 6d 16 9e b8 b4 d1 c1 52 38 bb 23 88 85 ab f6 fa de 37 c3 fd 45 Data Ascii: x <(9gF3$e*2N{Uz]QoOzMm Y%)2,/L5G1sx^$2\|5~tAZB\|orF#7/Fc`JW>[3{,jC\TI}1}Dv9Gg]E}xmR8#7E
2024-03-03 23:26:52 UTC	12415	IN	Data Raw: 07 13 58 92 f5 ab a5 5a 22 46 43 7f cb 1e fb a7 f6 d9 8f 10 28 f4 aa 83 dc 51 6c 44 07 e4 68 1c 2e 08 cf 40 1a b5 b6 ff 00 53 bb 4b 8c 3e 86 89 a2 29 16 67 76 58 0d 2c 22 05 58 ed 00 b9 4f 7d 02 a4 64 68 95 64 c3 03 33 04 cd 39 3d 82 1c 09 43 12 34 e1 58 58 51 c4 ae a5 63 9c e5 40 57 0d dc 47 d2 8e ed 2e 38 dd aa 8d da da 6a 38 c0 05 63 59 04 11 40 5c 0b 9b 0c b3 ac 48 cf 84 ab 89 d3 43 4a ae 76 b3 86 32 92 2a 1d 0c 30 3a 82 37 00 6e ab 28 fc 63 31 41 b1 34 83 11 20 8d c5 04 68 b9 51 62 13 05 c5 5d 61 74 34 ef 73 ee 01 98 f1 ab 36 bb 89 c4 7d a8 5d 18 c2 b2 e0 c3 af 99 a5 22 e5 b9 05 74 91 a8 ac d9 82 8f 12 62 8d ce 94 34 ca c4 15 ac 53 7a e3 66 24 0c f3 26 90 58 33 8b 67 2a 41 46 06 4f 46 45 3e d1 61 c8 7b 57 38 a8 1a a7 95 11 75 d5 8b 8c e7 13 0c cc 53 Data Ascii: XZ"FC(QlDh.@SK>)gvX,"XO}dhd39=C4XXQc@WG.8j8cY@\HCJv20:7n(c1A4 hQb]at4s6}]"tb4Szf$&X3gAFOFE>a{W8uS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50411	23.105.14.106	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	970	OUT	GET /redir?partneruserid=AALo807Lyg4AABQ6mW8RGQ&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsyn%252Cpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:52 UTC	815	IN	HTTP/1.1 302 Found content-length: 0 date: Sun, 03 Mar 2024 23:26:51 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=syn%2Cpp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=7346742891256766101&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: pid=7346742891256766101; expires=Tue, 01 Apr 2025 23:26:52 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: TestIfCookieP=ok; expires=Tue, 01 Apr 2025 23:26:52 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: csync=127:AALo807Lyg4AABQ6mW8RGQ; expires=Mon, 03 Mar 2025 23:26:52 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50406	151.101.194.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	1388	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/6s/rendition.m3u8?fastly_token=NjVlNTVmNmVfMjExYmUzODAyYzk1ODc2YzlmN2U2MTNlMzE3OWZlODEyZGQzZDQzNDhhNWRlNDJmMzllMDE4MTI1ZTU1NTEyOA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:52 UTC	628	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Date: Sun, 03 Mar 2024 23:26:52 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-lga21956-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508412.007218,VS0,VE54 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-03-03 23:26:52 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-03-03 23:26:52 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 56 6c 4e 54 56 6d 4e 7a 42 66 4d 7a 63 7a 4e 7a 4a 69 59 32 59 35 4f 54 67 77 4e 7a 49 79 59 6d 46 68 4d 6a 4a 6a 4d 6a 45 32 5a 6d Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNzBfMzczNzJiY2Y5OTgwNzIyYmFhMjJjMjE2Zm
2024-03-03 23:26:52 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:52 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-03-03 23:26:52 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 32 4f 54 6b 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 4d 35 4f 58 30 2e 57 6f 4c 69 59 6a 6c 56 69 6f 41 65 61 6d 33 6a 7a 58 74 32 51 6c 42 68 6e 52 38 51 6b 5a 6f 2d 65 30 39 78 4f 6f 47 46 58 76 Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv
2024-03-03 23:26:52 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:52 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-03-03 23:26:52 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 37 38 65 35 33 66 63 31 36 61 61 37 31 66 65 64 30 62 30 61 30 39 62 34 37 33 30 61 30 38 64 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 32 65 38 37 66 65 36 61 2d 64 32 34 30 2d 34 Data Ascii: ",IV=0x78e53fc16aa71fed0b0a09b4730a08d3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-4
2024-03-03 23:26:52 UTC	1371	IN	Data Raw: 66 35 2f 32 65 38 37 66 65 36 61 2d 64 32 34 30 2d 34 38 66 33 2d 38 33 36 34 2d 33 33 38 36 30 36 30 33 39 37 65 65 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 2f 2a 7e 68 6d 61 63 3d 37 35 33 34 62 63 37 39 34 61 63 36 35 63 37 36 61 34 63 33 63 64 34 64 38 36 61 63 37 32 64 65 39 37 64 63 33 36 38 39 36 63 63 31 65 34 66 62 39 32 65 34 30 37 66 65 35 31 65 31 64 33 39 38 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 Data Ascii: f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=7534bc794ac65c76a4c3cd4d86ac72de97dc36896cc1e4fb92e407fe51e1d398#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e
2024-03-03 23:26:52 UTC	1371	IN	Data Raw: 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 32 65 38 37 66 65 36 61 2d 64 32 34 30 2d 34 38 66 33 2d 38 33 36 34 2d 33 33 38 36 30 36 30 33 39 37 65 65 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 2f 2a 7e 68 6d 61 63 3d 37 35 33 34 62 63 37 39 34 61 63 36 35 63 37 36 61 34 63 33 63 64 34 64 38 36 61 63 37 32 64 65 39 37 64 63 33 36 38 39 36 63 63 31 65 34 66 62 39 32 65 34 30 37 66 65 35 31 65 31 64 33 39 38 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=7534bc794ac65c76a4c3cd4d86ac72de97dc36896cc1e4fb92e407fe51e1d398#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50410	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	2470	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=9c710547-ba4c-4952-9692-0a9d5f6959dd&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; PugT=1709508410; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508411
2024-03-03 23:26:51 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:26:50 GMT; path=/ Set-Cookie: PugT=1709508410; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:51 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50407	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:51 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fdd3f1af0-6985-11ec-bffd-65bff269a401&client=76f99bdb8f78cd44cc0b&signature=0b14194fa91554247f3b182be18f5c009196e427 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:51 UTC	1488	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 721890 Cache-Control: public, max-age=2592000 Cache-Tag: 468864823684501135681590585182668908237,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000022-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 49 Content-Type: image/png Date: Sun, 03 Mar 2024 23:26:51 GMT Edge-Cache-Tag: 468864823684501135681590585182668908237,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "7d2be088ad917300c315484257e2b54a" Expiration: expiry-date="Mon, 22 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 23 Jan 2024 22:16:16 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7940) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=303,owidth=400,oheight=400,obytes=34443,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100176-IAD X-Timer: S1706194521.337345,VS0,VE139 Content-Length: 303 Connection: close
2024-03-03 23:26:51 UTC	303	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 4b 50 4c 54 45 47 70 4c ee 29 31 ec 1c 24 ed 22 2a ee 29 31 ee 29 31 ed 24 2c ee 29 31 ee 29 31 ee 29 31 ef 3c 42 f2 5e 63 ff ff ff f7 9d a1 fe ef ef f9 b2 b5 f6 92 96 fa c6 c8 fd e2 e3 f0 4e 54 fc d6 d7 ee 30 38 f8 a7 aa f9 bc be f3 77 7c 01 39 f8 f8 00 00 00 0a 74 52 4e 53 00 ff ff ff d9 31 c1 99 f9 09 a7 73 6c 68 00 00 00 89 49 44 41 54 18 d3 65 8f cb 16 c3 20 08 44 05 34 18 ad 8f 18 4d fa ff 5f 5a 68 6b 16 c9 ec b8 87 81 19 63 44 8e ad f7 96 9d f9 69 65 f8 8b d7 ef bc d0 a5 45 09 d3 5e 8e 82 69 2b 84 c4 e2 07 ea fb c8 18 5e 11 91 c0 19 06 6a 6f 4c 13 b0 b1 40 47 0e 38 81 35 1e 68 b4 bc 4f e0 15 60 68 79 5c 40 2c 15 43 4e 0a a2 5a e4 68 07 ac 9b Data Ascii: PNGIHDR(-SKPLTEGpL)1$"*)1)1$,)1)1)1<B^cNT08w\|9tRNS1slhIDATe D4M_ZhkcDieE^i+^joL@G85hO`hy\@,CNZh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50412	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:52 UTC	881	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:26:52 UTC	637	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:52 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AALo807Lyg4AABQ6mW8RGQ&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:52 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50414	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:52 UTC	1279	OUT	POST /p?s=1197803361&t=1709508411886&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=us-east-1&test=aol-aa-2&rid=02r7skdiua1p4&pd=unknown&pt=home&A_utm=%7B%22GAM_TOP_RIGHT_BRSTIME%22%3A5644%2C%22GAM_TOP_RIGHT_FTIME%22%3A11613%2C%22GAM_TOP_RIGHT_RTIME%22%3A24919%7D HTTP/1.1 Host: geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:26:53 UTC	1117	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:26:53 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:53 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:26:53 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-03-03 23:26:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50416	23.105.14.106	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:52 UTC	1055	OUT	GET /redir?partneruserid=AALo807Lyg4AABQ6mW8RGQ&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=7346742891256766101; TestIfCookieP=ok; csync=127:AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:26:53 UTC	556	IN	HTTP/1.1 302 Found content-length: 0 date: Sun, 03 Mar 2024 23:26:52 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=7346742891256766101&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=127:AALo807Lyg4AABQ6mW8RGQ; expires=Tue, 04 Mar 2025 23:26:53 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50415	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:52 UTC	906	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=syn%2Cpp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=7346742891256766101&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:26:53 UTC	648	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:53 GMT location: https://sync.technoratimedia.com/services?uid=AALo807Lyg4AABQ6mW8RGQ&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:53 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50417	52.86.42.47	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:52 UTC	730	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-tlMNFJhyr-U_3dvKgwvX52_tI86DQEgnJgATnw HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgjdARCtFw; lidid=30dbf990-58ab-4bd6-b77c-df8285912a1c
2024-03-03 23:26:53 UTC	590	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:53 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-tlMNFJhyr-U_3dvKgwvX52_tI86DQEgnJgATnw Set-Cookie: _li_ss=ChMKBgjdARCtFwoJCP____8HELcX; Max-Age=2592000; Expires=Tue, 02 Apr 2024 23:26:53 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=30dbf990-58ab-4bd6-b77c-df8285912a1c; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:53 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50418	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:52 UTC	2406	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=0349ad77-5ea1-447f-9167-09b58573447a&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; PugT=1709508410; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd
2024-03-03 23:26:53 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:26:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:53 GMT; path=/ Set-Cookie: PugT=1709508413; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:26:53 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:53 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50419	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:52 UTC	2413	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=4228731401736629831&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; PugT=1709508410; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd
2024-03-03 23:26:53 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 21:25:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 21:25:59 GMT; path=/ Set-Cookie: PugT=1709501159; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 21:25:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:53 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50421	34.36.216.150	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:53 UTC	698	OUT	GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=071c8962-82a1-4ccf-aa26-4eb6025e5ced#1709508411248
2024-03-03 23:26:53 UTC	840	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=071c8962-82a1-4ccf-aa26-4eb6025e5ced#1709508411248; Domain=.sitescout.com; Expires=Mon, 03-Mar-2025 23:26:53 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcwOTUwODQxMzEzM30; Domain=.sitescout.com; Expires=Tue, 02-Apr-2024 23:26:53 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Sun, 03 Mar 2024 23:26:52 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50423	151.101.194.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:53 UTC	1388	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/6s/rendition.m3u8?fastly_token=NjVlNTVmNmVfNDUxNmZkY2Q2YWI5ZWQ0YTdmMGQ3ZmNhZDdmNzYzMzA4MmY1N2Y0MmI0OTQzZjY2OTEzNDEyYTViM2E3MTRjZQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:53 UTC	626	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Date: Sun, 03 Mar 2024 23:26:53 GMT Via: 1.1 varnish Age: 4 X-Served-By: cache-ewr18158-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1709508413.228943,VS0,VE5 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-03-03 23:26:53 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-03-03 23:26:53 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 56 6c 4e 54 56 6d 4e 6d 4e 66 59 7a 41 7a 59 54 42 6d 4f 54 51 32 59 7a 45 33 59 6a 63 79 4e 6d 4d 30 5a 47 4e 6a 4e 6d 49 32 4d 7a Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNmNfYzAzYTBmOTQ2YzE3YjcyNmM0ZGNjNmI2Mz
2024-03-03 23:26:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:53 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-03-03 23:26:53 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 32 4f 54 6b 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 4d 35 4f 58 30 2e 57 6f 4c 69 59 6a 6c 56 69 6f 41 65 61 6d 33 6a 7a 58 74 32 51 6c 42 68 6e 52 38 51 6b 5a 6f 2d 65 30 39 78 4f 6f 47 46 58 76 Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv
2024-03-03 23:26:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:26:53 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-03-03 23:26:53 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 37 38 65 35 33 66 63 31 36 61 61 37 31 66 65 64 30 62 30 61 30 39 62 34 37 33 30 61 30 38 64 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 61 34 63 64 32 36 63 32 2d 65 36 30 37 2d 34 Data Ascii: ",IV=0x78e53fc16aa71fed0b0a09b4730a08d3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4
2024-03-03 23:26:53 UTC	1371	IN	Data Raw: 66 35 2f 61 34 63 64 32 36 63 32 2d 65 36 30 37 2d 34 62 36 61 2d 39 37 64 65 2d 33 62 62 33 37 39 64 32 65 65 31 61 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 2f 2a 7e 68 6d 61 63 3d 65 38 62 34 30 61 32 34 36 33 64 33 35 35 61 65 65 37 39 63 65 31 36 64 30 32 66 32 36 36 66 62 38 39 35 38 32 38 63 62 32 32 66 36 35 38 36 37 33 33 66 35 36 66 30 33 35 62 36 34 33 62 34 61 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 Data Ascii: f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e8b40a2463d355aee79ce16d02f266fb895828cb22f6586733f56f035b643b4a#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e
2024-03-03 23:26:53 UTC	1371	IN	Data Raw: 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 61 34 63 64 32 36 63 32 2d 65 36 30 37 2d 34 62 36 61 2d 39 37 64 65 2d 33 62 62 33 37 39 64 32 65 65 31 61 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 2f 2a 7e 68 6d 61 63 3d 65 38 62 34 30 61 32 34 36 33 64 33 35 35 61 65 65 37 39 63 65 31 36 64 30 32 66 32 36 36 66 62 38 39 35 38 32 38 63 62 32 32 66 36 35 38 36 37 33 33 66 35 36 66 30 33 35 62 36 34 33 62 34 61 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e8b40a2463d355aee79ce16d02f266fb895828cb22f6586733f56f035b643b4a#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50422	151.101.194.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:53 UTC	1362	OUT	GET /license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNzBfMzczNzJiY2Y5OTgwNzIyYmFhMjJjMjE2ZmIzZjJiMTdkNzQyNjBkNTk1YzM1Yjk2MTUyOWU3ZWIzZTQ1ZDhmNA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:53 UTC	563	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Bcov-Jwt-Validity: success Bcov-Request-Id: 3f08a0ae-f833-4fb5-9b79-96d4c52e44d4 Cache-Control: private, max-age=137 Content-Type: application/octet-stream X-Hosted-On: Gantry X-Powered-By: BC X-Powered-From: us-east-1c Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:53 GMT Via: 1.1 varnish X-Served-By: cache-ewr18128-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508413.230392,VS0,VE50 X-Device-Group: desktop-chrome
2024-03-03 23:26:53 UTC	16	IN	Data Raw: 95 99 1f 54 b1 04 e2 19 16 2f ee 49 37 f6 c3 01 Data Ascii: T/I7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50425	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:53 UTC	906	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=7346742891256766101&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:26:53 UTC	646	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:53 GMT location: https://bh.contextweb.com/bh/rtset?ev=AALo807Lyg4AABQ6mW8RGQ&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:53 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50426	193.122.128.135	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:53 UTC	981	OUT	GET /services?uid=AALo807Lyg4AABQ6mW8RGQ&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:53 UTC	1494	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Sun, 03 Mar 2024 23:26:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D2E84A48E09184096882C93C926E94179%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D7346742891256766101%2526gdpr%253D0%2526gdpr_consent%253D%2526bee_sync_partners%253Dpp%25252Cpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D3%26uid%3D Set-Cookie: tads_uidp_73=AALo807Lyg4AABQ6mW8RGQ; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:53 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=2E84A48E09184096882C93C926E94179; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:53 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240303232653+0000; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:53 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:53 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 1071998307 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50427	151.101.194.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:53 UTC	1362	OUT	GET /license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNmNfYzAzYTBmOTQ2YzE3YjcyNmM0ZGNjNmI2Mzc1NDc4ZGE4YmZlODY5M2JmM2EyZjYyZGVkYTMwNmQ3NjEwMDg4OQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:54 UTC	563	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Bcov-Jwt-Validity: success Bcov-Request-Id: 1cd8ee33-ae15-45b3-83ab-eb573123b385 Cache-Control: private, max-age=137 Content-Type: application/octet-stream X-Hosted-On: Gantry X-Powered-By: BC X-Powered-From: us-east-1c Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:26:53 GMT Via: 1.1 varnish X-Served-By: cache-lga21954-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508414.881165,VS0,VE84 X-Device-Group: desktop-chrome
2024-03-03 23:26:54 UTC	16	IN	Data Raw: 95 99 1f 54 b1 04 e2 19 16 2f ee 49 37 f6 c3 01 Data Ascii: T/I7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50430	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:54 UTC	1220	OUT	GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D2E84A48E09184096882C93C926E94179%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D7346742891256766101%2526gdpr%253D0%2526gdpr_consent%253D%2526bee_sync_partners%253Dpp%25252Cpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D3%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:26:54 UTC	1340	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:26:54 GMT Content-Length: 0 Connection: close Location: https://sync.technoratimedia.com/services?srv=cs&nuid=2E84A48E09184096882C93C926E94179&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&uid=ZeUHNEt3uSYAABBfAETINAAA%26015 CF-Ray: 85ed64e43dcd72a1-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:26:54 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:26:54 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JlbLUdYDNMIjKPXEvfmvtNKvmnqwF8WvtdymEXioLt5JRM9%2FwGA2JrPgWYJqf8hm2omzSDp1VTzZjuPsDNjVE9dpNCxM3Y7t24rTO0rNSExE3lpm8pc6nYQtW7uBUrWuzQwm2yhpecwvIw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50429	198.148.27.131	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:54 UTC	979	OUT	GET /bh/rtset?ev=AALo807Lyg4AABQ6mW8RGQ&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:54 UTC	1158	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-5fddfb9bb8-m7dt9 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=BmowkNKlNKYw;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Wed, 26-Feb-2025 23:26:54 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1q16\|7dN.0.AALo807Lyg4AABQ6mW8RGQ;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 03-Mar-2025 23:26:54 GMT;Max-Age=31536000;SameSite=None Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=7346742891256766101&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AALo807Lyg4AABQ6mW8RGQ&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=79158c5a935c1312; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50437	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:54 UTC	951	OUT	GET /cookie-sync?gdpr=0&userid=7346742891256766101&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AALo807Lyg4AABQ6mW8RGQ&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:26:54 UTC	634	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:54 GMT location: https://sync.technoratimedia.com/services?uid=AALo807Lyg4AABQ6mW8RGQ&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:54 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50438	193.122.128.135	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:54 UTC	1160	OUT	GET /services?srv=cs&nuid=2E84A48E09184096882C93C926E94179&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&uid=ZeUHNEt3uSYAABBfAETINAAA%26015 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AALo807Lyg4AABQ6mW8RGQ; tads_uid=2E84A48E09184096882C93C926E94179; tads_uid_cd=20240303232653+0000; tads_zora=2
2024-03-03 23:26:54 UTC	1214	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Sun, 03 Mar 2024 23:26:54 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=7346742891256766101&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Cpm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=3 Set-Cookie: tads_uidp_82=ZeUHNEt3uSYAABBfAETINAAA&015; Max-Age=259200; Expires=Wed, 06 Mar 2024 23:26:54 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=2E84A48E09184096882C93C926E94179; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:54 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240303232653+0000; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:54 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:54 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 1072811920 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50439	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:54 UTC	1286	OUT	GET /cksync.php?cs=1&type=58259&ovsid=VqqzSffDDzfVzTkSfzaT&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1
2024-03-03 23:26:54 UTC	663	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ylm=VqqzSffDDzfVzTkSfzaT~~1;Expires=Fri, 30 Aug 2024 23:26:54 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:54 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:54 GMT Connection: close
2024-03-03 23:26:54 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:54 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50440	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:54 UTC	1253	OUT	GET /cksync.php?cs=1&type=mn2&ovsid=3525100008919577000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1
2024-03-03 23:26:54 UTC	665	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-mn2=3525100008919577000V10~~1;Expires=Fri, 30 Aug 2024 23:26:54 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:54 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:54 GMT Connection: close
2024-03-03 23:26:54 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:54 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50443	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:54 UTC	1263	OUT	GET /cksync.php?cs=1&type=58601&ovsid=u_436cb148-05c7-43b4-bf78-0e6201e28826 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1
2024-03-03 23:26:54 UTC	681	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1;Expires=Wed, 17 Apr 2024 23:26:54 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:54 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:54 GMT Connection: close
2024-03-03 23:26:54 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:54 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50442	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:54 UTC	1261	OUT	GET /cksync.php?cs=1&type=58280&ovsid=e4423880-7610-4ca4-94ee-3ab62836ffe1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1
2024-03-03 23:26:54 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1;Expires=Fri, 30 Aug 2024 23:26:54 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:54 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:54 GMT Connection: close
2024-03-03 23:26:54 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:54 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50441	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:54 UTC	1350	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=ctn&refUrl=&vid=95083994863525099948919525000V10&ovsid=006032ff9e2544ada39734a11952c619&axid_e=&y=null&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1
2024-03-03 23:26:54 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ctn=006032ff9e2544ada39734a11952c619~~1;Expires=Fri, 30 Aug 2024 23:26:54 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:54 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:54 GMT Connection: close
2024-03-03 23:26:54 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:54 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50452	69.194.240.13	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:57 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-03-03 23:26:57 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50450	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:58 UTC	900	OUT	GET /cookie-sync?gdpr=0&userid=7346742891256766101&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Cpm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=3 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:26:58 UTC	620	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:26:58 GMT location: https://bh.contextweb.com/bh/rtset?ev=AALo807Lyg4AABQ6mW8RGQ&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:26:58 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50451	193.122.128.135	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:58 UTC	1144	OUT	GET /services?uid=AALo807Lyg4AABQ6mW8RGQ&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AALo807Lyg4AABQ6mW8RGQ; tads_uid=2E84A48E09184096882C93C926E94179; tads_uid_cd=20240303232653+0000; tads_zora=2; tads_uidp_82=ZeUHNEt3uSYAABBfAETINAAA&015
2024-03-03 23:26:59 UTC	1290	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Sun, 03 Mar 2024 23:26:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D2E84A48E09184096882C93C926E94179%26att%3D1%26pid%3D46%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D7346742891256766101%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D%24UID set-cookie: tads_uid=2E84A48E09184096882C93C926E94179; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:59 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240303232653+0000; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:59 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:26:59 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 1071707058 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50459	74.119.119.150	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:58 UTC	924	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f
2024-03-03 23:26:59 UTC	531	IN	HTTP/1.1 302 Found content-length: 0 date: Sun, 03 Mar 2024 23:26:58 GMT server: Kestrel cache-control: no-cache expires: Sun, 03 Mar 2024 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 671778 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50454	52.202.146.197	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:58 UTC	629	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=65729931892392140142881563266192020616
2024-03-03 23:26:59 UTC	903	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:59 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: iQM6iBT6R2w= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v056-0ca594811.edge-va6.demdex.com 0 ms set-cookie: dpm=65729931892392140142881563266192020616; Max-Age=15552000; Expires=Fri, 30 Aug 2024 23:26:59 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=65729931892392140142881563266192020616; Max-Age=15552000; Expires=Fri, 30 Aug 2024 23:26:59 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-03 23:26:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50457	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:58 UTC	1326	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=pba&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:26:59 UTC	646	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-pba=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~8;Expires=Mon, 03 Mar 2025 23:26:59 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:59 GMT Connection: close
2024-03-03 23:26:59 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:59 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50455	50.57.31.206	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:58 UTC	677	OUT	GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-RKPC2uxE2oP_.YzvaoufWXPgbw9SyuMi_tM-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=727932AC18BCE3A
2024-03-03 23:26:59 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 0 Set-Cookie: SEUNCY=727932AC18BCE3A; Expires=Mon, 03 Mar 2025 23:26:59 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:59 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-03-03 23:26:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50456	35.211.178.172	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:58 UTC	757	OUT	GET /sync?dsp_id=250&expires=14&user_id=3b652fc1-53a0-40de-ba73-a4ae557bd47f&ssp=medianet&gdpr=0 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9c710547-ba4c-4952-9692-0a9d5f6959dd; c=1709508406; tuuid_lu=1709508408
2024-03-03 23:26:59 UTC	540	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 03 Mar 2024 23:26:59 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //contextual.media.net/cksync.php?cs=1&type=bs&ovsid=9c710547-ba4c-4952-9692-0a9d5f6959dd&gdpr=0&gdpr_consent=&gdpr_pd= Set-Cookie: cs=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50460	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:58 UTC	1666	OUT	GET /cksync.html?cs=1&vsid=3525099948919525000V10&type=pub&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:26:59 UTC	694	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 227 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1;Expires=Wed, 17 Apr 2024 23:26:59 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:59 GMT Connection: close
2024-03-03 23:26:59 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-03 23:26:59 UTC	77	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50461	69.194.240.13	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	731	OUT	GET /usersync/turn/4228731401736629831?dspret=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%7D
2024-03-03 23:26:59 UTC	313	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:26:59 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005 connection: close
2024-03-03 23:26:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50465	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	1233	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=r1&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:26:59 UTC	652	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-r1=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005~~8;Expires=Sun, 02 Mar 2025 23:26:59 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:26:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:59 GMT Connection: close
2024-03-03 23:26:59 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:26:59 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50464	35.236.220.17	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=CA2F41ACCA684739A1CE374B350A0FEF
2024-03-03 23:26:59 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 03 Mar 2024 23:26:59 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:CA2F41ACCA684739A1CE374B350A0FEF&gdpr=0&gdpr_consent= Expires: Sat, 02 Mar 2024 23:26:59 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-03 23:26:59 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50514	142.250.72.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	1180	OUT	GET /pcs/view?xai=AKAOjssP9ZWoydsPxqYI_HwCe0lVWcUyYlDQIemS4De-36ppn4MedZ-5GhUyKfxjB3M1AemvsD7pfpmbkCUWHZ3Bp0cPQpp83YRsWjLMh0Gk3Go2TXHM4QWAV14E6ITmT1kzt3jn6EDEDabe78b5IWG9rbFHD0TDgL3PmwQIkvnGu8_rA4Skposw2U4CicTEoxaujM_wfgDB3Ux8_5-_9zXa2g-qZyV-agvemwD0rTbkFFkN8TZf56UkTTchdLyq19aXqmMkOyMrxdnzAf0snggbYjfVX_4FFGaKJapZLDYYkVhiwKVnwHxym4jN9Ck7YIleURLn0NM3m60d-tjHMm-ymLnehKpwkgae-E7ZQc7eOm6pLoVeti6m47pmCiE1yj0xyfs6UqU8ZnldNEDNxKg0CWaZDds0uqRAEQ&sai=AMfl-YTHWUfOdY2MMgVGf3wN5R2xsOUjPAsT5e5HIhvO7E8DlP4g-BecPP_u3aK2RHX0tWjpF1roAC8kNAKAB-RqppMjJVX3X-K-NrS9lXlwvwhBqlIH1RinuqwoTP9h8267NzDxOdcFIiraYLEEXH-haa8&sig=Cg0ArKJSzO6VnUfeUIi4EAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:26:59 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Sun, 03 Mar 2024 23:26:59 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50506	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	2551	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:26:59 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 10:15:27 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:26:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50497	35.244.159.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	716	OUT	GET /w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404
2024-03-03 23:26:59 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sun, 03 Mar 2024 23:26:59 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:26:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50511	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	534	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F2022136b017401181a8dbbdb1388592a&client=76f99bdb8f78cd44cc0b&signature=6c01f52bdd151aa1eefa1c3038c29a48e748304f HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:59 UTC	1129	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1775 Cache-Control: public, max-age=2592000 Cache-Tag: 509916679421782607181804174656665477005,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21969-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 6b2c1fadf1079650d952a28fca4dd3e2 cld_latency: 843 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:59 GMT Edge-Cache-Tag: 509916679421782607181804174656665477005,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "b25fcc90389fad9346b135b311cd46c7" Last-Modified: Sun, 03 Mar 2024 22:57:27 GMT Server: ECAcc (nya/7908) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=8737,owidth=1200,oheight=800,obytes=134199,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 6b2c1fadf1079650d952a28fca4dd3e2 X-Served-By: cache-lga21969-LGA X-Timer: S1709506646.292534,VS0,VE843 Content-Length: 8737 Connection: close
2024-03-03 23:26:59 UTC	8737	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 c8 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 00 03 04 05 07 02 01 08 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 bf b0 85 3a dd 5e fc 60 8e 47 17 1d 1d 7b Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"4:^`G{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50510	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	2244	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2674&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25082&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:26:59 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:26:59 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:26:59 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:26:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50516	34.193.135.180	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:59 UTC	456	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:26:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=2915c649-ae77-0a2c-593b-d018ec0afcda; Path=/; Domain=kargo.com; Expires=Mon, 03 Mar 2025 23:26:59 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-03 23:26:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50503	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	534	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F0e7c99eede3c65dbdfa94e708cbe3f3a&client=76f99bdb8f78cd44cc0b&signature=6501e3a1ec216a84f598237330a2a286f6998c01 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:59 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 10913 Cache-Control: public, max-age=2592000 Cache-Tag: 452408294624539213144069566397095572462,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21979-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 25489f170baeeb9f1ff19de9805dd47f cld_latency: 1169 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:26:59 GMT Edge-Cache-Tag: 452408294624539213144069566397095572462,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "5b97cada95c2d86de0e78d3767e91753" Last-Modified: Sun, 03 Mar 2024 20:25:08 GMT Server: ECAcc (nya/7941) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=11598,owidth=1200,oheight=675,obytes=165409,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 25489f170baeeb9f1ff19de9805dd47f X-Served-By: cache-lga21979-LGA X-Timer: S1709497506.270278,VS0,VE1169 Content-Length: 11598 Connection: close
2024-03-03 23:26:59 UTC	11598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 c8 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 06 00 03 04 05 07 02 08 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f8 a9 38 28 6f 86 24 03 cb b4 4b 9f 8b 47 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"48(o$KG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50467	54.165.23.128	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	718	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:26:59 UTC	1411	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sun, 03 Mar 2024 23:26:59 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&gdpr=0&gdpr_consent= Set-Cookie: sa-user-id=s%3A0-6402661c-a64b-515e-58a7-5b6a514405cc.aSa%2FDx6PNChGmO%2FVbinnHNE%2BrkCG%2Fhf%2FSG5E8ignv5s; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-6402661c-a64b-515e-58a7-5b6a514405cc.aSa%2FDx6PNChGmO%2FVbinnHNE%2BrkCG%2Fhf%2FSG5E8ignv5s; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AZAJmHKZLUV5Yp1tqUUQFzJoQwMs.IbK6HOE%2F6jfpxoiB8Nj1boq9h1fZO0hSfhsuPiFgoHA; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AZAJmHKZLUV5Yp1tqUUQFzJoQwMs.IbK6HOE%2F6jfpxoiB8Nj1boq9h1fZO0hSfhsuPiFgoHA; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIBh8ui9B9b58R8QKWp1n0oxfs9BYZo2SQA1tr7GoAQDfEHwYBCDDjpSvBjABOgT87-jmQgSrKdUp.i%2FWpYAMDwKg0U3Z%2BLy%2FNUJbh%2FfTIQAkvHtzHbUfPJ5I; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIBh8ui9B9b58R8QKWp1n0oxfs9BYZo2SQA1tr7GoAQDfEHwYBCDDjpSvBjABOgT87-jmQgSrKdUp.i%2FWpYAMDwKg0U3Z%2BLy%2FNUJbh%2FfTIQAkvHtzHbUfPJ5I; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 188 Connection: Close
2024-03-03 23:26:59 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 5a 41 4a 6d 48 4b 5a 4c 55 56 35 59 70 31 74 71 55 55 51 46 7a 4a 6f 51 77 4d 73 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50512	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	2244	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2675&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25307&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:00 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:27:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:27:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50470	104.18.25.173	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	939	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 3788 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=arnoeUNZaiMMAmemDnPW2xEGpQbPaPZcKq1VZcDm9ZaM; path=/; domain=.tribalfusion.com; expires=Sat, 01-Jun-2024 23:27:00 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=arnoeUNZaiMMAmemDnPW2xEGpQbPaPZcKq1VZcDm9ZaM; path=/; domain=.tribalfusion.com; expires=Sat, 01-Jun-2024 23:27:00 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 85ed65093d7ec3ee-EWR alt-svc: h3=":443"; ma=86400
2024-03-03 23:27:00 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-03-03 23:27:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50463	34.200.65.202	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:26:59 UTC	1062	OUT	GET /cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214750604810009654359&gdpr=&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b:18z8~2h3b"
2024-03-03 23:27:00 UTC	581	IN	HTTP/1.1 302 Redirect Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close Server: ATS/9.1.10.94 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214750604810009654359&gdpr=&gdpr_consent= Content-Type: text/html Content-Language: en Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 427
2024-03-03 23:27:00 UTC	427	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50466	52.202.127.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	708	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-tlMNFJhyr-U_3dvKgwvX52_tI86DQEgnJgATnw HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssum-sec.casalemedia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=30dbf990-58ab-4bd6-b77c-df8285912a1c
2024-03-03 23:27:01 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50481	74.121.140.211	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	872	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	709	IN	HTTP/1.1 302 Moved Temporarily Date: Sun, 03 Mar 2024 23:27:41 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1487 7fd7a36 master iad iad-pixel-x32 config_version:"2817" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=e33b65e5-0744-4800-9e03-a305d43d5738; domain=.mathtag.com; path=/; expires=Mon, 31-Mar-2025 23:27:00 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:e33b65e5-0744-4800-9e03-a305d43d5738&gdpr=0&gdpr_consent= Expires: Sun, 03 Mar 2024 23:27:40 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50547	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	3075	OUT	POST /p?_V=V&V_sec=pb&evt=ad_err&t=0.3443237986977843&_sqno=7&ts=19722&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=waiting&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=NaN&adUrl=&view=100%25&mtype=&ad_sys=&ad_lng=&pos=&taken=&r_code=1&tag=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&client=ima3&crid=&adlbl=&estring=undefined&a_dlv_err=102&r_type=102 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:00 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:26:59 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50534	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	1326	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=son&refUrl=&vid=95083994863525099948919525000V10&ovsid=22b49095-3dec-4c47-8a7b-1d7936dda128&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:00 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1;Expires=Fri, 30 Aug 2024 23:27:00 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close
2024-03-03 23:27:00 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:00 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50525	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	987	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=son&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=2e1e420d-8454-4533-a1ab-2d47cb95dd71 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:27:00 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8;Expires=Sun, 31 Mar 2024 23:27:00 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close
2024-03-03 23:27:00 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:00 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50531	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	663	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&event=player_init&time=1709508405310&autoplay=false&seq=0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50486	52.201.82.109	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	570	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=3562a2a6-75ba-40ba-8019-c2dff6a6ce99 P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjM1NjJhMmE2LTc1YmEtNDBiYS04MDE5LWMyZGZmNmE2Y2U5OSIsImwiOjE3MDk1MDg0MjA0MTMsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sun, 03 Mar 2024 23:27:00 GMT; Max-Age=17280000; Secure; SameSite=None
2024-03-03 23:27:00 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 37 32 31 33 44 42 42 34 2d 38 43 34 45 2d 34 35 46 38 2d 42 41 43 38 2d 32 31 34 39 44 33 32 41 38 42 31 46 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 33 35 36 32 61 32 61 36 2d 37 35 62 61 2d 34 30 62 61 2d 38 30 31 39 2d 63 32 64 66 66 36 61 36 63 65 39 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=3562a2a6-75ba-40ba-8019-c2dff6a6ce99">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50513	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	534	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F36824bd1fd4d41014ce41b12a880833a&client=76f99bdb8f78cd44cc0b&signature=d2d0d0c6211286d34012cd7d6f5266200dd03b5d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	1148	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 21052 Cache-Control: public, max-age=2592000 Cache-Tag: 405449641805607417369415337342548600064,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000162-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: e7fbea9364f40122a8e11275ce56764f cld_latency: 1062 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:27:00 GMT Edge-Cache-Tag: 405449641805607417369415337342548600064,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "fa1778fbc0a931dc76d48f4c45cd77c3" Last-Modified: Sun, 03 Mar 2024 17:36:11 GMT Server: ECAcc (nya/7929) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=10088,owidth=1200,oheight=675,obytes=285352,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: e7fbea9364f40122a8e11275ce56764f X-Served-By: cache-iad-kiad7000162-IAD X-Timer: S1709487369.158647,VS0,VE1062 Content-Length: 10088 Connection: close
2024-03-03 23:27:01 UTC	10088	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 c8 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 06 07 04 05 00 03 08 01 02 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 05 00 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 37 c1 12 f7 0f cf cf 9e 0e ed 81 33 e3 de Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"473

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50474	44.195.157.207	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	816	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	337	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=d953ac44-6100-4cfd-8e83-2e663fb0f73c&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50529	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	2343	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&usage=thumbnails!2.0.0&usage=qualityLevels!3.0.0&usage=qualityMenu!3.0.0&usage=inpage-embed&event=player_load&time=1709508405380&qos.events.content.volumechange=1709508405370&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=11490577&qos.performance.memory.totalJSHeapSize=17653853&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1709508396507&qos.performance.timing.loadEventStart=1709508396506&qos.performance.timing.domComplete=1709508396506&qos.performance.timing.domContentLoadedEventEnd=1709508396444&qos.performance.timing.domContentLoadedEventStart=1709508396444&qos.performance.timing.domInteractive=1709508396444&qos.performance.timing.domLoading=1709508395519&qos.performance.timing.responseEnd=1709508395508&qos.performance.timing.responseStart=1709508395387&qos.performance.timing.requestStart=1709508395215&qos.performance.timing.secureConnectionStart=1709508394978&qos.performance.timing.connectEnd=1709508395214&qos.performance.timing.connectStart=1709508394957&qos.performance.timing.domainLookupEnd=1709508394957&qos.performance.timing.domainLookupStart=1709508394832&qos.performance.timing.fetchStart=1709508394721&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1709508394719&qos.player.dimensions=%5B%5B1709508405380%2C%220x0%22%2C%22368x276%22%5D%5D&qos.player.pixelratio=%5B%5B1709508405380%2C1%5D%5D&qos.player.screendimensions=%5B%5B1709508405380%2C%221280x1024%22%5D%5D&seq=1 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50498	185.184.8.90	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	678	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=OU3AHrVubK0CqVNVWknR_1709508409330; ts=1709508409
2024-03-03 23:27:00 UTC	482	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:27:00 GMT vary: Accept-Encoding location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&pi=pubmatic&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sun, 03 Mar 2024 23:27:00 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50535	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	1322	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=ayl&refUrl=&vid=95083994863525099948919525000V10&ovsid=1c28c32b083001573fcc1989b44fa248&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:00 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ayl=1c28c32b083001573fcc1989b44fa248~~1;Expires=Fri, 30 Aug 2024 23:27:00 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close
2024-03-03 23:27:00 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:00 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50536	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	1238	OUT	GET /cksync.php?cs=1&type=mn&ovsid=3525100008919577000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:01 UTC	664	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-mn=3525100008919577000V10~~1;Expires=Fri, 30 Aug 2024 23:27:00 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:01 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50491	35.186.193.173	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	861	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid_006032ff9e2544ada39734a11952c619=1
2024-03-03 23:27:00 UTC	649	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid=006032ff9e2544ada39734a11952c619; path=/; domain=.ctnsnet.com; expires=Mon, 03 Mar 2025 23:27:00 GMT; Secure; SameSite=None; Set-Cookie: cid_006032ff9e2544ada39734a11952c619=null; path=/; domain=.ctnsnet.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Sun, 03 Mar 2024 23:27:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50473	54.165.23.128	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	718	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	1407	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Sun, 03 Mar 2024 23:27:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&gdpr=0&gdpr_consent= Set-Cookie: sa-user-id=s%3A0-6402661c-a64b-515e-58a7-5b6a514405cc.aSa%2FDx6PNChGmO%2FVbinnHNE%2BrkCG%2Fhf%2FSG5E8ignv5s; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-6402661c-a64b-515e-58a7-5b6a514405cc.aSa%2FDx6PNChGmO%2FVbinnHNE%2BrkCG%2Fhf%2FSG5E8ignv5s; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AZAJmHKZLUV5Yp1tqUUQFzJoQwMs.IbK6HOE%2F6jfpxoiB8Nj1boq9h1fZO0hSfhsuPiFgoHA; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AZAJmHKZLUV5Yp1tqUUQFzJoQwMs.IbK6HOE%2F6jfpxoiB8Nj1boq9h1fZO0hSfhsuPiFgoHA; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIBh8ui9B9b58R8QKWp1n0oxfs9BYZo2SQA1tr7GoAQDfEHwYBCDEjpSvBjABOgT87-jmQgTsp0r0.%2F4kidm7%2FbE70GwxSD%2F6yHcYr0M6ldppdTu37S8uxGiQ; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIBh8ui9B9b58R8QKWp1n0oxfs9BYZo2SQA1tr7GoAQDfEHwYBCDEjpSvBjABOgT87-jmQgTsp0r0.%2F4kidm7%2FbE70GwxSD%2F6yHcYr0M6ldppdTu37S8uxGiQ; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 188 Connection: Close
2024-03-03 23:27:01 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 5a 41 4a 6d 48 4b 5a 4c 55 56 35 59 70 31 74 71 55 55 51 46 7a 4a 6f 51 77 4d 73 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50502	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	534	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F6ef5be46479c981bdac4bb73b42d643c&client=76f99bdb8f78cd44cc0b&signature=bfc7d32d8d9dbfc92ecf53c0948be318dad2632c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	1129	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 23633 Cache-Control: public, max-age=2592000 Cache-Tag: 402892854596831474061896702417254302692,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21981-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 280519789d19b6a9d3c6d765d65af95a cld_latency: 569 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:27:00 GMT Edge-Cache-Tag: 402892854596831474061896702417254302692,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "d9ede0be89101a8321565977239e2f6e" Last-Modified: Sun, 03 Mar 2024 16:53:08 GMT Server: ECAcc (nya/7997) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=9556,owidth=1280,oheight=720,obytes=133500,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 280519789d19b6a9d3c6d765d65af95a X-Served-By: cache-lga21981-LGA X-Timer: S1709484787.178578,VS0,VE569 Content-Length: 9556 Connection: close
2024-03-03 23:27:00 UTC	9556	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 00 c8 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 00 02 03 01 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 33 20 6d 2f 79 be bc ab ac a8 b7 5d 45 f1 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|"43 m/y]E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50524	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	948	OUT	GET /cksync.php?cs=1&type=crt&ovsid=3022bf5d-8a4d-4027-8fa8-8c2880782f3f&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:27:00 UTC	850	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1;Expires=Tue, 02 Apr 2024 23:27:00 GMT;path=/;domain=.media.net; sameSite=none; secure=true Set-Cookie: data-c-ts=1709508420;Expires=Tue, 02 Apr 2024 23:27:00 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close
2024-03-03 23:27:00 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:00 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50488	82.145.213.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	709	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	809	IN	HTTP/1.1 302 Found Server: Tengine Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU0d427bac8188466daae7f5b623a0353a Pragma: no-cache Set-Cookie: UID=OPU0d427bac8188466daae7f5b623a0353a; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-03-03 23:27:00 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 30 64 34 32 37 62 61 63 38 31 38 38 34 36 36 64 61 61 65 37 66 35 62 36 32 33 61 30 33 35 33 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU0d427bac8188466daae7f5b623a0353a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50482	35.186.193.173	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	861	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid_006032ff9e2544ada39734a11952c619=1
2024-03-03 23:27:01 UTC	649	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid=006032ff9e2544ada39734a11952c619; path=/; domain=.ctnsnet.com; expires=Mon, 03 Mar 2025 23:27:00 GMT; Secure; SameSite=None; Set-Cookie: cid_006032ff9e2544ada39734a11952c619=null; path=/; domain=.ctnsnet.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Sun, 03 Mar 2024 23:27:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50493	162.55.120.196	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	814	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.3 Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50490	74.121.140.211	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	872	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	709	IN	HTTP/1.1 302 Moved Temporarily Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1487 7fd7a36 master iad iad-pixel-x12 config_version:"2817" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=052965e5-0745-4000-9327-cb3c56f7de4d; domain=.mathtag.com; path=/; expires=Mon, 31-Mar-2025 23:27:01 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:052965e5-0745-4000-9327-cb3c56f7de4d&gdpr=0&gdpr_consent= Expires: Sun, 03 Mar 2024 23:26:59 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50550	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	1988	OUT	OPTIONS /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1709508418330&event=video_view&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&seq=7_0&start_time_ms=20 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://s.yimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	493	IN	HTTP/1.1 200 OK Content-Length: 0 content-type: text/plain; version=0.0.4; charset=utf-8 cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50468	44.195.157.207	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	816	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	337	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50522	18.238.55.58	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	718	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:00 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 6ecf35677ede41c0a96f262ec39b4894.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: RL0wJNYtprgsgxTUR_eTxl1scuxqD-Q_pHl-pd9uKTHZ76LAUtwSlw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50561	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	1326	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=pba&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:27:01 UTC	646	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-pba=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~8;Expires=Mon, 03 Mar 2025 23:27:00 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:01 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50501	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	2244	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2675&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=25308&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:01 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:27:00 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:00 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50505	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	572	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_the_hill_articles_315%2F832bdc7eaa27b3ad1dd61fb1de4d98ae&client=76f99bdb8f78cd44cc0b&signature=3aa299cb02c431ddc9f5f1b2db950faaf51d5655 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	1494	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 4050 Cache-Control: public, max-age=2592000 Cache-Tag: 253177630285564262967693489410443441036,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000171-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 729922e380c9a5d2ecef775ccecc0105 cld_latency: 453 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:27:01 GMT Edge-Cache-Tag: 253177630285564262967693489410443441036,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "2f41f436487237cb242c6a932a6c49b8" Last-Modified: Sun, 03 Mar 2024 21:14:56 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/792F) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=10363,owidth=900,oheight=505,obytes=48198,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 729922e380c9a5d2ecef775ccecc0105 X-Served-By: cache-iad-kiad7000171-IAD X-Timer: S1709504374.978442,VS0,VE453 Content-Length: 10363 Connection: close
2024-03-03 23:27:01 UTC	10363	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 01 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 ff c2 00 11 08 01 2c 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 03 04 02 05 01 06 07 00 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 b2 e7 bb ff 00 3a cf b3 54 f0 c9 9f b7 82 Data Ascii: JFIF%%!(!!(!;/))/;E:7:ESJJSici%%!(!!(!;/))/;E:7:ESJJSici,"4:T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50553	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	2050	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=ad_timeout&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&time=1709508418310&seq=6_0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50530	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	800	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348145722112&time=1709508405585&seq=2 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50527	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	1036	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=con&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=AAAF_91Z8VIwGQMdv4qvAAAAAAA&expiration=1709594806&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:27:01 UTC	636	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8;Expires=Sun, 02 Mar 2025 23:27:01 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:01 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50548	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	3068	OUT	POST /p?_V=test&V_sec=pb&evt=ad_event&t=0.5366433926138656&_sqno=8&ts=19725&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=waiting&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=NaN&adUrl=&view=100%25&mtype=na&ad_sys=&ad_lng=&pos=&taken=&r_code=1&tag=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&client=&crid=&adlbl=&ad_evt=adtimeout&adblocker=false HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:01 UTC	1057	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 127 date: Sun, 03 Mar 2024 23:27:01 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50541	52.223.22.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:00 UTC	462	OUT	GET /xuid?mid=7976&xuid=5286816B-07A3-4831-82CF-92827DD7440E&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=205552980141694412277
2024-03-03 23:27:01 UTC	448	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=205552980141694412277; Max-Age=7776000; Expires=Sat, 01 Jun 2024 23:27:01 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-03 23:27:01 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50509	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2317	OUT	GET /log?logid=kfk&evtid=brqlog&itype=YHB&tElp=2676&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&crid=586167089&pvid=-3&req_size=970x250&req_mtype%3C%3E=0&adtypes=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&pbAcid=350543395124497111709508396929&pbBidId=31161139041156191709508396934&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:01 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50544	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	407	OUT	GET /playback/v1/accounts/6415665815001/videos/6348145722112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	417	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 78 Retry-After: 0 Content-Type: application/json Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:27:01 GMT X-Served-By: cache-ewr18179-EWR X-Cache: MISS X-Cache-Hits: 0 Bcov-Request-Id: epa-9ffaf0af462a, epa-9ffaf0af462a-cr Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: *
2024-03-03 23:27:01 UTC	78	IN	Data Raw: 5b 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 22 54 4f 4b 45 4e 5f 52 45 51 55 49 52 45 44 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 20 72 65 71 75 69 72 65 73 20 61 20 74 6f 6b 65 6e 2e 22 20 7d 5d 20 Data Ascii: [{"error_code":"TOKEN_REQUIRED", "message":"The request requires a token." }]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50542	52.223.22.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	462	OUT	GET /xuid?mid=7976&xuid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=205552980141694412277
2024-03-03 23:27:01 UTC	448	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=205552980141694412277; Max-Age=7776000; Expires=Sat, 01 Jun 2024 23:27:01 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-03-03 23:27:01 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50556	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2037	OUT	GET /v1/video/sapi/streams/6eb22e94-b4f9-360b-9efe-9314028f9017,8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e,c3db04e7-3946-37de-9e67-03698b49bef9,50fcb985-df33-3558-865d-77035ff99fce,2d3534f1-addb-34bd-bf8b-476c6c63e7f2,dc9d9f9b-83fb-3136-a15f-b4c3ea328ae1,a6807d85-b340-3fab-9d17-ac1ddc74cbf8,519694c4-e078-39f5-a25c-a880feb8099e,23b205a8-99d1-3662-b169-2b335bd13ba3,c4030192-96df-34c7-8f55-f7df83598032,ca4223ee-c954-3bd7-9453-64a45f676a29?ad.pubfamily=aol&srid=3072249782&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=b9b3c6c5-2cd7-4937-8390-628222cda75f&region=US&site=aolhomepage&expb=aol-aa-2&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=93knqf67%2Cdexzzysv%2Cbwmsum1c%2Ct3cjguyy%2Cnv4g2qkv%2C3cg171as%2C6kh83y71%2Cfqbgknpp%2C6l5yyhbl%2C331yoakf%2Cfvtlzpgu&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.3.9&try=1&failover_count=0&ads=ima&nad=0&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aolfrontpage&evp=bcp&hlspre=false&plseq=2&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1 Host: video-api.yql.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:02 UTC	1087	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 ps: 93knqf67%2Cdexzzysv%2Cbwmsum1c%2Ct3cjguyy%2Cnv4g2qkv%2C3cg171as%2C6kh83y71%2Cfqbgknpp%2C6l5yyhbl%2C331yoakf%2Cfvtlzpgu cache-control: private access-control-allow-origin: https://www.aol.com access-control-allow-methods: GET, POST, HEAD, OPTIONS timing-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Content-Type access-control-expose-headers: Access-Control-Allow-Credentials, Access-Control-Allow-Headers, Access-Control-Allow-Origin, Content-Length, SKT y-rid: 2kce0m5iua1q5 x-yahoo-request-id: 2kce0m5iua1q5 x-request-id: 56a3fd1e-337c-48f4-9a2b-3c999688e1e0 x-envoy-upstream-service-time: 32 date: Sun, 03 Mar 2024 23:27:00 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:27:02 UTC	1300	IN	Data Raw: 31 33 64 35 0d 0a 7b 22 71 75 65 72 79 22 3a 7b 22 72 65 73 75 6c 74 73 22 3a 7b 22 6d 65 64 69 61 4f 62 6a 22 3a 5b 7b 22 69 64 22 3a 22 36 65 62 32 32 65 39 34 2d 62 34 66 39 2d 33 36 30 62 2d 39 65 66 65 2d 39 33 31 34 30 32 38 66 39 30 31 37 22 2c 22 6d 65 74 61 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 20 42 65 6c 69 7a 65 2d 66 6c 61 67 67 65 64 20 61 6e 64 20 55 2e 4b 2e 2d 6f 77 6e 65 64 20 63 6f 6d 6d 65 72 63 69 61 6c 20 73 68 69 70 20 63 61 72 72 79 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 32 30 2c 30 30 30 20 6d 65 74 72 69 63 20 74 6f 6e 73 20 6f 66 20 66 65 72 74 69 6c 69 7a 65 72 20 68 61 73 20 73 75 6e 6b 20 69 6e 20 74 68 65 20 52 65 64 20 53 65 61 20 61 66 74 65 72 20 62 Data Ascii: 13d5{"query":{"results":{"mediaObj":[{"id":"6eb22e94-b4f9-360b-9efe-9314028f9017","meta":{"attribution":"","description":"A Belize-flagged and U.K.-owned commercial ship carrying more than 20,000 metric tons of fertilizer has sunk in the Red Sea after b
2024-03-03 23:27:02 UTC	1300	IN	Data Raw: 5f 74 68 75 6d 62 6e 61 69 6c 73 22 3a 5b 5d 2c 22 63 6f 6e 63 75 72 72 65 6e 74 5f 76 69 65 77 65 72 5f 63 6f 75 6e 74 22 3a 30 2c 22 62 6c 6f 63 6b 5f 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 76 69 65 77 5f 63 6f 75 6e 74 22 3a 38 32 34 33 32 2c 22 6e 69 65 6c 73 65 6e 5f 62 65 61 63 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 75 70 6c 79 6e 6b 5f 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 69 76 65 5f 77 69 74 68 5f 61 64 73 22 3a 66 61 6c 73 65 7d 2c 22 73 74 72 65 61 6d 73 22 3a 5b 7b 22 68 6f 73 74 22 3a 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2e 61 70 69 2e 62 72 69 67 68 74 63 6f 76 65 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 70 6c 61 79 62 61 63 6b 2f 76 31 2f 61 63 63 6f 75 6e 74 73 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 76 69 64 65 6f Data Ascii: _thumbnails":[],"concurrent_viewer_count":0,"block_autoplay":false,"view_count":82432,"nielsen_beacons":false,"uplynk_live":false,"live_with_ads":false},"streams":[{"host":"https://edge.api.brightcove.com","path":"/playback/v1/accounts/6415665815001/video
2024-03-03 23:27:02 UTC	1300	IN	Data Raw: 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 33 4d 6a 45 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 51 79 4d 58 30 2e 61 39 7a 43 49 7a 34 49 62 7a 5f 61 77 38 52 7a 5f 70 38 68 43 5a 6a 6a 6a 35 31 6b 70 78 77 71 47 30 4e 4a 30 43 5a 64 73 6d 54 5a 4c 54 56 52 32 74 6d 5a 79 5f 70 77 35 6d 74 41 35 6b 76 43 6f 52 46 6c 65 74 67 6c 33 6e 5a 67 59 5a 36 Data Ascii: eWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg3MjEsImlhdCI6MTcwOTUwODQyMX0.a9zCIz4Ibz_aw8Rz_p8hCZjjj51kpxwqG0NJ0CZdsmTZLTVR2tmZy_pw5mtA5kvCoRFletgl3nZgYZ6
2024-03-03 23:27:02 UTC	1185	IN	Data Raw: 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 77 38 38 2e 67 6f 2e 63 6f 6d 2f 62 2f 73 73 2f 77 64 67 6e 65 77 67 6d 61 6f 6e 79 2c 77 64 67 61 73 65 63 2f 31 2f 48 2e 32 37 2e 32 2f 37 36 32 31 36 3f 65 76 65 6e 74 73 3d 65 76 65 6e 74 31 26 70 65 3d 6c 6e 6b 5f 6f 26 70 65 76 32 3d 76 69 64 65 6f 53 74 61 72 74 26 63 34 3d 76 69 64 65 6f 26 63 33 3d 31 30 37 37 35 32 37 30 38 7c 32 34 30 33 30 33 5f 67 6d 61 5f 6e 65 77 73 76 6f 5f 68 6f 75 74 68 69 5f 37 31 33 5f 76 69 64 65 6f 7c 73 65 63 5f 67 6d 61 7e 73 65 63 5f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 7c 73 68 69 70 2d 61 74 74 61 63 6b 65 64 2d 62 79 2d 68 6f 75 74 68 69 2d 72 65 62 65 6c 73 2d 73 69 6e 6b 73 2d 69 6e 2d 72 65 64 2d 73 65 61 26 76 32 3d 31 30 37 37 35 32 37 30 38 7c 32 34 Data Ascii: mplate":"https://sw88.go.com/b/ss/wdgnewgmaony,wdgasec/1/H.27.2/76216?events=event1&pe=lnk_o&pev2=videoStart&c4=video&c3=107752708\|240303_gma_newsvo_houthi_713_video\|sec_gma~sec_international\|ship-attacked-by-houthi-rebels-sinks-in-red-sea&v2=107752708\|24
2024-03-03 23:27:02 UTC	1300	IN	Data Raw: 36 63 32 62 0d 0a 6d 2e 74 79 70 65 3d 56 4f 44 26 64 65 76 69 63 65 3d 64 65 73 6b 74 6f 70 26 76 3d 31 26 66 3d 6a 73 6f 6e 26 73 32 73 3d 74 72 75 65 26 67 64 70 72 3d 66 61 6c 73 65 26 63 6f 6e 74 65 6e 74 5f 6c 65 6e 3d 32 32 26 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 3d 53 68 69 70 2b 61 74 74 61 63 6b 65 64 2b 62 79 2b 48 6f 75 74 68 69 2b 72 65 62 65 6c 73 2b 73 69 6e 6b 73 2b 69 6e 2b 52 65 64 2b 53 65 61 26 63 6f 6e 74 65 6e 74 5f 69 64 3d 31 30 37 37 35 32 37 30 38 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 70 76 65 72 3d 31 2e 33 2e 39 26 61 76 65 72 3d 5b 45 56 50 5f 41 44 53 44 4b 56 45 52 5d 26 63 6f 75 6e 74 72 79 3d 55 53 26 73 74 61 74 65 3d 4e 6f 72 74 68 2b 43 61 72 6f 6c 69 6e 61 26 70 6c 73 65 71 3d 32 26 61 64 2e Data Ascii: 6c2bm.type=VOD&device=desktop&v=1&f=json&s2s=true&gdpr=false&content_len=22&content_title=Ship+attacked+by+Houthi+rebels+sinks+in+Red+Sea&content_id=107752708&gpp=DBAA&gpp_sid=-1&pver=1.3.9&aver=[EVP_ADSDKVER]&country=US&state=North+Carolina&plseq=2&ad.
2024-03-03 23:27:02 UTC	1300	IN	Data Raw: 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 33 4d 6a 45 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 51 79 4d 58 30 2e 61 39 7a 43 49 7a 34 49 62 7a 5f 61 77 38 52 7a 5f 70 38 68 43 5a 6a 6a 6a 35 31 6b 70 78 77 71 47 30 4e 4a 30 43 5a 64 73 6d 54 5a 4c 54 56 52 32 74 6d 5a 79 5f 70 77 35 6d 74 41 35 6b 76 43 6f 52 46 6c 65 74 67 6c 33 6e 5a 67 59 5a 36 6e 63 79 72 30 4b 50 4a 75 63 53 6f 54 35 36 7a 4f 34 47 65 77 79 4b 75 4a 56 6d 39 49 34 31 35 65 70 48 68 72 61 59 5f 36 62 76 77 77 57 59 63 54 53 77 74 4f 54 64 64 73 53 48 54 4c 58 77 31 37 4e 54 6e 49 5a 67 7a 4e 57 37 45 71 41 64 50 72 75 31 41 67 6f 6d 78 32 78 56 75 61 6c 6d 49 76 6b 78 6b 69 64 4e 59 6f 56 37 73 36 32 2d 57 45 4b 65 5f 7a 37 79 56 6e 31 57 58 78 5f 7a 5a 6a 4d Data Ascii: JleHAiOjE3MDk1MDg3MjEsImlhdCI6MTcwOTUwODQyMX0.a9zCIz4Ibz_aw8Rz_p8hCZjjj51kpxwqG0NJ0CZdsmTZLTVR2tmZy_pw5mtA5kvCoRFletgl3nZgYZ6ncyr0KPJucSoT56zO4GewyKuJVm9I415epHhraY_6bvwwWYcTSwtOTddsSHTLXw17NTnIZgzNW7EqAdPru1Agomx2xVualmIvkxkidNYoV7s62-WEKe_z7yVn1WXx_zZjM
2024-03-03 23:27:02 UTC	1300	IN	Data Raw: 5f 69 64 22 3a 22 66 39 35 39 35 61 30 35 2d 30 64 32 62 2d 33 30 38 62 2d 61 35 66 33 2d 65 63 30 66 62 34 34 61 33 39 36 30 22 7d 2c 22 74 68 75 6d 62 6e 61 69 6c 5f 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 33 36 38 2c 22 68 65 69 67 68 74 22 3a 32 37 36 7d 2c 22 63 72 65 64 69 74 73 22 3a 7b 22 66 65 61 74 75 72 65 64 5f 61 72 74 69 73 74 73 22 3a 22 22 2c 22 64 69 72 65 63 74 6f 72 22 3a 22 22 2c 22 6d 61 69 6e 5f 61 72 74 69 73 74 73 22 3a 22 22 2c 22 6c 61 62 65 6c 22 3a 22 22 7d 2c 22 70 72 6f 76 69 73 69 6f 6e 69 6e 67 5f 73 6f 75 72 63 65 22 3a 22 22 2c 22 73 68 6f 77 5f 6e 61 6d 65 22 3a 22 46 6f 78 20 4e 65 77 73 22 2c 22 61 67 65 5f 67 61 74 65 22 3a 22 22 2c 22 65 76 65 6e 74 5f 73 74 61 72 74 22 3a 30 2c 22 65 76 65 6e Data Ascii: _id":"f9595a05-0d2b-308b-a5f3-ec0fb44a3960"},"thumbnail_dimensions":{"width":368,"height":276},"credits":{"featured_artists":"","director":"","main_artists":"","label":""},"provisioning_source":"","show_name":"Fox News","age_gate":"","event_start":0,"even
2024-03-03 23:27:02 UTC	1300	IN	Data Raw: 2c 22 6d 69 6d 65 5f 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 70 70 6c 65 2e 6d 70 65 67 75 72 6c 22 2c 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 70 72 69 6d 61 72 79 22 3a 66 61 6c 73 65 2c 22 63 64 6e 22 3a 22 62 63 70 22 2c 22 66 6f 72 6d 61 74 22 3a 22 6d 33 75 38 22 2c 22 66 72 61 6d 65 72 61 74 65 22 3a 30 2c 22 63 68 61 6e 6e 65 6c 73 22 3a 30 2c 22 66 6f 72 63 65 64 22 3a 66 61 6c 73 65 2c 22 73 74 61 72 74 42 69 74 72 61 74 65 22 3a 74 72 75 65 2c 22 61 75 74 6f 5f 73 65 6c 65 63 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 61 76 67 62 69 74 72 61 74 65 22 3a 30 7d 5d 2c 22 73 74 72 65 61 6d 50 72 6f 66 69 6c 65 73 22 3a 5b 7b 22 68 6f 73 74 22 3a 22 68 74 74 70 73 3a 2f 2f Data Ascii: ,"mime_type":"application/vnd.apple.mpegurl","live":false,"is_primary":false,"cdn":"bcp","format":"m3u8","framerate":0,"channels":0,"forced":false,"startBitrate":true,"auto_select":false,"default":false,"avgbitrate":0}],"streamProfiles":[{"host":"https://
2024-03-03 23:27:02 UTC	1300	IN	Data Raw: 67 69 6e 61 74 69 6e 67 5f 70 72 6f 70 65 72 74 79 22 3a 22 4e 65 77 73 22 2c 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 30 30 31 37 30 30 30 30 30 30 4e 79 31 33 59 41 41 52 22 2c 22 73 61 6c 65 73 66 6f 72 63 65 5f 69 64 22 3a 22 61 30 37 37 30 30 30 30 30 30 32 6c 6d 62 64 41 41 41 22 2c 22 69 73 5f 64 72 6d 22 3a 66 61 6c 73 65 2c 22 61 6c 6c 6f 77 5f 6c 69 76 65 73 65 65 6b 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 6d 73 63 6f 72 65 5f 63 6d 35 22 3a 22 30 32 22 2c 22 79 77 61 22 3a 5b 5d 2c 22 63 6f 6d 73 63 6f 72 65 36 22 3a 22 59 41 48 4f 4f 46 4f 58 4e 45 57 53 22 2c 22 62 65 61 63 6f 6e 73 22 3a 5b 7b 22 61 63 74 69 6f 6e 22 3a 22 61 64 64 22 2c 22 64 61 74 61 22 3a 22 43 41 31 3d 31 26 43 41 32 3d 39 30 31 33 31 38 31 Data Ascii: ginating_property":"News","account_id":"0017000000Ny13YAAR","salesforce_id":"a0770000002lmbdAAA","is_drm":false,"allow_liveseek":false},"metrics":{"comscore_cm5":"02","ywa":[],"comscore6":"YAHOOFOXNEWS","beacons":[{"action":"add","data":"CA1=1&CA2=9013181
2024-03-03 23:27:02 UTC	1300	IN	Data Raw: 3d 68 6f 6d 65 26 61 64 2e 70 75 62 66 61 6d 69 6c 79 3d 61 6f 6c 26 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 65 76 70 3d 62 63 70 26 66 6d 74 3d 76 6d 61 70 26 70 73 3d 64 65 78 7a 7a 79 73 76 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 67 69 76 6e 3d 5b 47 4f 4f 47 4c 45 5f 49 4e 53 54 52 45 41 4d 5f 56 49 44 45 4f 5f 4e 4f 4e 43 45 5d 26 70 62 63 6b 74 3d 54 72 65 61 74 6d 65 6e 74 5f 4f 61 74 68 5f 50 6c 61 79 65 72 26 6e 70 61 3d 30 26 6c 74 64 3d 30 26 70 70 69 64 3d 79 57 48 32 55 32 6c 45 32 75 4a 34 54 51 4a 5a 79 34 45 74 5a 64 32 6b 4e 42 6c 4a 47 6c 34 67 41 22 7d 2c 22 62 63 70 22 3a 7b 22 76 5f 69 64 22 3a 22 36 33 34 38 31 34 36 37 35 38 31 31 32 22 2c 22 61 5f 69 64 22 3a 22 36 34 31 35 36 36 Data Ascii: =home&ad.pubfamily=aol&pos=preroll&evp=bcp&fmt=vmap&ps=dexzzysv&r=https%3A%2F%2Fwww.aol.com%2F&givn=[GOOGLE_INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid=yWH2U2lE2uJ4TQJZy4EtZd2kNBlJGl4gA"},"bcp":{"v_id":"6348146758112","a_id":"641566

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50521	35.244.154.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	656	OUT	GET /712188.gif?partner_uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDcyMTNEQkI0LThDNEUtNDVGOC1CQUM4LTIxNDlEMzJBOEIxRhAAGg0IxY6UrwYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=DZfJCBo2tAX1CGJz9gkplJ3tcIsGCswUSSTuW70AX0Y=; Path=/; Domain=rlcdn.com; Expires=Mon, 03 Mar 2025 23:27:01 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Thu, 02 May 2024 23:27:01 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50499	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=9db333fbfbd97c489dfb11e31107155b55541a73 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1914648 Cache-Control: public, max-age=2592000 Cache-Tag: 352991030521014136013954760138177611573,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100076-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: fcdbe153f8d9ea817ff09855e347f430 cld_latency: 483 Content-Type: image/png Date: Sun, 03 Mar 2024 23:27:01 GMT Edge-Cache-Tag: 352991030521014136013954760138177611573,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "6e73e8b5f42f8eb2a888e9482f70c0d2" Last-Modified: Sat, 10 Feb 2024 19:36:14 GMT Server: ECAcc (nya/790D) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=331,owidth=400,oheight=400,obytes=35383,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: fcdbe153f8d9ea817ff09855e347f430 X-Served-By: cache-iad-kjyo7100076-IAD X-Timer: S1707593773.290230,VS0,VE483 Content-Length: 331 Connection: close
2024-03-03 23:27:01 UTC	331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 57 50 4c 54 45 47 70 4c 3c 5b aa 3c 5a aa 4c 68 b1 3b 5a aa 3b 5a a9 47 64 af 41 5f ac 3c 5b aa 3c 5b aa 43 61 ad 3b 5a aa 3c 5b aa 3b 5a a9 3a 59 a9 47 64 af d1 d8 eb 93 a5 d0 53 6e b4 5e 77 b9 77 8d c4 71 87 c1 a2 b0 d6 8a 9d cc 7f 93 c8 68 7f bd c0 ca e4 3f 5d ab 4d 69 b2 95 87 8f 5c 00 00 00 0e 74 52 4e 53 00 d9 f9 09 d9 f9 09 31 97 9a 09 c1 c1 c1 e6 cc 46 c8 00 00 00 95 49 44 41 54 18 d3 65 8f d9 0e 83 30 0c 04 43 0a 24 81 76 9d fb 80 fe ff 77 d6 29 08 2a 75 f2 e4 b1 56 f1 0a c1 28 3d 48 39 68 25 0e 1e 06 27 66 fe ce 4f 5c ac dd 18 fc 60 38 0f 0a c1 07 e2 e7 09 50 42 a3 c5 9c 36 b2 b0 ef 06 68 31 00 c9 61 f3 2c d2 0e 8c 42 02 31 f3 d6 92 0d 15 Data Ascii: PNGIHDR(-SWPLTEGpL<[<ZLh;Z;ZGdA_<[<[Ca;Z<[;Z:YGdSn^wwqh?]Mi\tRNS1FIDATe0C$vw)*uV(=H9h%'fO\`8PB6h1a,B1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50526	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	966	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=dxu&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=IKSGvoFb1RGVed5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:27:01 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-xu=IKSGvoFb1RGVed5~~8;Expires=Sun, 02 Mar 2025 23:27:01 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:01 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50576	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	521	OUT	GET /rum?cm_dsp_id=39&external_user_id=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&expiration=1712100407&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:27:01 UTC	983	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 85ed6510db7f4302-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:27:01 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:27:01 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qsYYQtTZdDik5ZUBT6hMGPZ26eFewAUbgujfId49b6r2qIhAw8DirxdJWqmrnN%2FuCLGwCsmV549m9nXvBs89C68o9kj2uCpjKJGsqAdPT%2B7lSaJNxf2%2F63LplyLKEaXsmUPVopQ9RapyVg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50528	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	988	OUT	GET /cksync.html?cs=8&vsid=3525100008919577000V10&type=opx&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=a470c6a3-f372-0895-098c-2413748bee6d HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:27:01 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 227 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8;Expires=Sun, 02 Mar 2025 23:27:01 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close
2024-03-03 23:27:01 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-03 23:27:01 UTC	77	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50566	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2055	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=ad_hard_timeout&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&time=1709508418830&seq=8_0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50495	52.201.82.109	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	570	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=18eb0dcf-ed6a-4763-bd9a-3f2b8b726233 P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjE4ZWIwZGNmLWVkNmEtNDc2My1iZDlhLTNmMmI4YjcyNjIzMyIsImwiOjE3MDk1MDg0MjEyNzYsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sun, 03 Mar 2024 23:27:01 GMT; Max-Age=17280000; Secure; SameSite=None
2024-03-03 23:27:01 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 37 32 31 33 44 42 42 34 2d 38 43 34 45 2d 34 35 46 38 2d 42 41 43 38 2d 32 31 34 39 44 33 32 41 38 42 31 46 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 31 38 65 62 30 64 63 66 2d 65 64 36 61 2d 34 37 36 33 2d 62 64 39 61 2d 33 66 32 62 38 62 37 32 36 32 33 33 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=18eb0dcf-ed6a-4763-bd9a-3f2b8b726233">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50508	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	4673	OUT	GET /log?logid=kfk&evtid=gptslog&itype=YHB&tElp=4346&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&sid=top_right_0&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c_0&szs=300x600&tp=loc%3Dtop_right%7Cnoads%3D1&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=&btm=&lft=&rght=&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=top_right_1&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b_0&szs=300x250&tp=loc%3Dtop_right&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=121&btm=721&lft=855.3125&rght=1155.3125&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=top_right_2&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a_0&szs=300x250&tp=loc%3Dtop_right&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=733&btm=733&lft=855.3125&rght=1155.3125&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=horizon-e2e&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center_0&szs=728x90%7C970x250%7C3x1&tp=loc%3Dtop_center&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=0&btm=0&lft=0&rght=1263&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&sid=mid_center&dsid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center_0&szs=970x250&tp=loc%3Dmid_center&late=0&srt=-1&lzl=0&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&istgt=1&tref=0&ads_disabled=0&td=%7B%22ydevice%22%3A%22desktop%22%2C%22ylang%22%3A%22en-US%22%2C%22yregion%22%3A%22US%22%2C%22ysection%22%3A%22main%22%2C%22ysite%22%3A%22aol%22%2C%22ysrc%22%3A%222%22%7D&top=1530.8125&btm=1820.8125&lft=121.90625&rght=1243&ydt=desktop&ylang=en-US&yr=US&ysec=main&ys=aol&lper=10&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:01 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50560	198.148.27.131	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1056	OUT	GET /bh/rtset?ev=AALo807Lyg4AABQ6mW8RGQ&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=BmowkNKlNKYw; pb_rtb_ev=3-1q16\|7dN.0.AALo807Lyg4AABQ6mW8RGQ; INGRESSCOOKIE=79158c5a935c1312
2024-03-03 23:27:01 UTC	1053	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-5fddfb9bb8-m7dt9 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=BmowkNKlNKYw;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Wed, 26-Feb-2025 23:27:01 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1q16\|7dN.0.AALo807Lyg4AABQ6mW8RGQ;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 03-Mar-2025 23:27:01 GMT;Max-Age=31536000;SameSite=None Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=7346742891256766101&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=4&ev=AALo807Lyg4AABQ6mW8RGQ&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50478	69.90.254.78	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	27	IN	HTTP/1.1 204 No Content
2024-03-03 23:27:01 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	27	IN	HTTP/1.1 204 No Content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50496	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1331	OUT	GET /cksync.php?cs=1&type=57926&ovsid=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1
2024-03-03 23:27:01 UTC	686	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-rhs=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do~~1;Expires=Wed, 17 Apr 2024 23:27:01 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:01 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	50515	18.238.79.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	389	OUT	GET /8528a8ca9f4220ae15851111192c47cd.webp HTTP/1.1 Host: de9a11s35xj3d.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	645	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 117906 Connection: close Date: Sun, 03 Mar 2024 23:27:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Last-Modified: Sun, 03 Mar 2024 14:29:17 GMT ETag: "8987b601123fe20c6f821fb4bcf4c22a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f5c697bd298aa5fde836b2908d51005c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P5 X-Amz-Cf-Id: 3eMW2BXeGBXYNzz0pcXhSTX1vi3sJ-i8ws3BlaJEfltxcX6sLNwRWw==
2024-03-03 23:27:01 UTC	15641	IN	Data Raw: 52 49 46 46 8a cc 01 00 57 45 42 50 56 50 38 20 7e cc 01 00 b0 51 07 9d 01 2a b0 04 73 02 3e 6d 30 94 47 24 23 22 28 28 d5 3b c9 00 0d 89 4d 76 55 ab 6a 7b 43 08 3e 9e 56 57 8a fc e4 b4 f3 6b 99 f3 41 39 5c 3e 62 64 7a 47 2a 8d 75 d7 9f a4 79 44 73 0f ea bf f3 bb 7e f8 18 79 d7 f7 5f 60 2d f7 4e e9 fe ab d8 03 c1 97 99 3c f7 ff dc 7a 22 7e a3 fe cb a7 ff fb fe 44 be d0 bf 3a ed ea 57 bf c8 e9 e3 ff 00 7e 79 f8 bf 55 5f eb 78 af da 5e 73 dd 59 e6 b7 fe df ed e7 be 5f d8 9e c2 9f d2 7f ca fe cf 7a f5 fb 19 f3 63 e6 b7 ff a3 d8 07 f6 0f 51 bf e8 5f f2 ff ff fb 68 fa c9 7a 16 f9 7a fe f3 7c 45 ff 61 ff c7 fb cd ed 93 ff ff b3 df 9d 9f ca 3c 91 7c d3 ee 8f 84 bf 9c 7d 9f fb ff f0 df ea ff f1 ff 92 f7 69 ca 3f b8 ff af ff c3 fd df a9 3f d0 bf 42 ff 73 fc cf b6 Data Ascii: RIFFWEBPVP8 ~Qs>m0G$#"((;MvUj{C>VWkA9\>bdzGuyDs~y_`-N<z"~D:W~yU_x^sY_zcQ_hzz\|Ea<\|}i??Bs
2024-03-03 23:27:01 UTC	16384	IN	Data Raw: 8c 31 a2 d3 85 33 61 55 95 3c c0 a7 0a 2a 77 e8 c4 f7 f5 12 a2 ea fe 48 84 78 84 18 3e b1 1b 68 6a 9a 53 fa 1f 02 84 c9 cf 96 0f 6f 8e 7f 17 03 97 71 4a ed 20 c1 6e cc 4b ba 9e 9b 27 04 7d fc a7 c5 d9 7d b3 da 4b 43 8b 0f 61 ae 1b 0e 72 c7 7d fc 52 c6 f2 bb ad 72 2a 40 ad 23 aa 38 21 30 cc f8 07 9e cc 7d a8 28 44 01 02 b7 0e 4a c7 50 27 64 0c ef e2 91 e6 8e 27 bc d9 4e 90 9d b7 c7 e6 b5 9e 92 a8 0d 64 a4 6d aa aa 3d 7a cb 94 fe 02 7e 14 91 bb f1 53 75 d9 d4 18 62 0e bf 5a 1b bd 54 f5 69 d7 f2 40 a0 0a 69 e9 22 a0 e1 13 10 e6 c4 0a 23 5d 9b 04 77 3e 6f 72 5b 7c 50 a2 83 56 a7 09 75 69 78 d7 3e 41 7a 11 c5 35 0e 88 12 84 51 87 c5 9c 0b 67 a7 34 2c 1d 09 5c a0 18 22 c1 9f 71 4e fa a1 69 a5 30 c0 4f 23 f4 33 02 72 99 e4 c1 31 ad 7e 30 f8 4e 28 e1 f5 f9 fe 37 Data Ascii: 13aU<wHx>hjSoqJ nK'}}KCar}Rr@#8!0}(DJP'd'Ndm=z~SubZTi@i"#]w>or[\|PVuix>Az5Qg4,\"qNi0O#3r1~0N(7
2024-03-03 23:27:01 UTC	16384	IN	Data Raw: 79 de 21 65 ab eb 6e d9 a9 92 0c 6a a7 a8 0d 10 ce dd 0e 4e 57 40 ff f3 3e 61 4c a3 3d 4e f1 0b fc 87 97 ad f0 6d 1b 66 5c 50 de 5c ff 3e f1 93 b6 6c 03 db a9 da 60 bf 80 33 8e 7d 77 b1 73 71 d9 28 09 51 62 09 50 ad 4b 70 50 9b 30 c0 31 26 5b 49 40 ef 41 dc cf d0 46 12 c2 f8 ae 1e 84 0c e6 c4 c9 3c 63 94 8a 8d 83 4f 6d 4a 46 9b 89 17 b3 81 35 a2 3a 37 77 1e 98 e2 5d b1 4f 3c ae ad bb 2f 8f 08 ad 53 b2 ea 2f f9 e8 9b 82 9b 21 42 96 79 2f f5 08 57 e0 4f b0 18 b9 0f 5d 1d ae 84 0e 62 d7 02 cf 3a ff 27 d7 21 01 42 56 b0 49 7d 3d 3c 1b a7 5e 11 40 04 74 0a d7 e4 46 58 d0 3b 0f 0d 24 60 5d ba a5 30 e0 b0 fb 9d 35 c5 42 87 f2 72 64 ca df c2 bb 59 1c 3e 1a 21 00 39 76 f3 e9 fe 0c c5 46 78 21 cf ac 6d 5a 9f 6e c4 22 80 0a a4 8b 58 0d b6 03 f0 c0 9f 5f d7 9d a9 e0 Data Ascii: y!enjNW@>aL=Nmf\P\>l`3}wsq(QbPKpP01&[I@AF<cOmJF5:7w]O</S/!By/WO]b:'!BVI}=<^@tFX;$`]05BrdY>!9vFx!mZn"X_
2024-03-03 23:27:01 UTC	4848	IN	Data Raw: a4 98 af 32 8a c4 77 20 6f 4b 60 8d 5d c0 20 30 ef 63 69 a2 71 cd d3 f7 c2 f4 f3 e6 72 9d 0b 6b 84 9c 88 47 1b b1 84 4c f3 15 02 a7 17 0c 76 af bf da 50 db 16 81 f2 96 13 37 8f 43 bb de aa 28 31 8f 3d b5 a2 0a 9e 34 83 1e 3f c3 30 f2 1a 4e 04 ec 66 60 60 4f 5b 89 ce 9a 60 9c cd 93 7f 14 ad c9 d1 42 f8 20 58 2d f6 b1 bb 07 0e 91 bc 8b ed d4 a1 5f ab 7f 18 ce 2d 5f d0 01 c2 c8 b7 87 d9 e2 d3 d0 64 0d 20 1d f4 98 a1 bf fc e1 80 6c d2 bc 3a 25 27 d4 6e e3 f3 ce 1a 70 0c cf fe 7e 8f 05 e8 3e 24 03 eb aa 04 a3 e7 21 f3 8f 71 05 ab ca 2c 95 ce 30 e0 4d 7a a7 d8 a3 0a 53 02 71 b4 b3 60 25 91 51 b6 10 ff 95 5b 22 73 0c 76 ac 08 8a 38 aa e9 85 a7 05 bb f4 c8 fd b4 45 04 be 87 35 df 00 61 de 59 bf 7d 6b 55 b6 28 0a be 98 58 91 2b f9 03 57 05 cf 97 fc 83 77 bd 96 37 Data Ascii: 2w oK`] 0ciqrkGLvP7C(1=4?0Nf``O[`B X-_-_d l:%'np~>$!q,0MzSq`%Q["sv8E5aY}kU(X+Ww7
2024-03-03 23:27:01 UTC	16384	IN	Data Raw: ed 85 27 60 a2 8a 62 9c 75 f7 fe bb 79 8a a3 99 7f fc da b4 fc 6c 33 7d 35 2f 09 49 b9 15 21 e3 c8 e7 0b 30 42 52 8f 68 dd fc 66 23 5f 54 97 90 de 6e d8 b8 d3 80 eb 6c eb 5a bf cc f9 2a 9e 89 c9 4e be 70 96 0a e1 92 a9 b8 9a cf b7 4c e4 ca f3 2a f7 da 8c 8c 48 df 04 b3 17 43 c9 33 99 ac 35 cd 51 5f 29 6e 50 c2 0c ab 7e f1 e6 c9 20 1a c4 69 31 15 08 ea d4 ef f2 e8 d8 cd 8c b9 68 f6 b9 aa 0e 5d 3a a8 a2 d3 4e 70 10 02 27 cd 36 61 fd 42 c4 9b c1 42 0b 41 cf ab 34 1f 60 aa ae 02 3c e3 af c8 52 29 a1 8e 73 ae 3f 15 45 ab 32 c8 f4 de 66 b3 71 e5 2e b1 82 f3 13 b3 18 0b b6 2c 01 88 85 4f b3 b0 b1 b5 5e e1 ba 69 e8 bb 40 f0 f4 fc 49 37 67 30 b5 66 17 f1 fa 14 85 33 f1 05 94 6e 71 6c 67 a0 13 ff 7b 0f 05 7c e7 f7 27 64 10 aa 36 0c 20 3a ef 7e 22 f3 bb 35 4d bf 08 Data Ascii: '`buyl3}5/I!0BRhf#_TnlZNpLHC35Q_)nP~ i1h]:Np'6aBBA4`<R)s?E2fq.,O^i@I7g0f3nqlg{\|'d6 :~"5M
2024-03-03 23:27:01 UTC	16384	IN	Data Raw: 1d 69 fe 58 2c bc d0 37 52 a8 92 a2 cd 98 97 c4 96 47 71 ae 96 d4 77 a3 75 ef 01 a6 43 09 2e 04 2d 66 6d 5a f2 45 04 17 9b f4 b8 d4 9e 81 44 2c 97 81 5e 4f b3 ed 24 0d b7 3c 64 29 0e ed 4e ef 3f 17 75 17 dc b6 be 98 ac 7b f1 58 70 fb 46 76 05 24 83 dc 60 5b 6a 24 83 80 c2 50 ee 5f 7b b3 34 ea 06 ac de 85 55 fd 60 3c bd 2c ba a2 41 c5 01 83 34 7c b4 ec 3f 0c 7b ed 98 3c 5e 68 ca 91 22 d0 9d 7e 6a 9b be e8 c0 ca c4 3b 38 ab b4 ab 40 93 29 1b 42 f9 1b 14 df 81 04 39 d9 0c fd 5f 5c 59 56 70 44 b3 72 a1 cb ac 7e 10 31 05 ff ca c2 85 aa ba ac 48 30 c4 42 b8 d6 20 f6 8c 1e 20 3a bb e1 cb 73 d9 4c 38 a1 d3 42 7d 92 b9 d1 78 1a bc 05 a5 b8 92 89 e8 86 1a 34 4c 6b ac 40 80 b2 df 12 c0 f1 20 4b f7 0c 06 16 c2 e8 3d 5a 1f af 21 b3 9b 6d 3a 82 28 03 34 ee 7d 33 0b a3 Data Ascii: iX,7RGqwuC.-fmZED,^O$<d)N?u{XpFv$`[j$P_{4U`<,A4\|?{<^h"~j;8@)B9_\YVpDr~1H0B :sL8B}x4Lk@ K=Z!m:(4}3
2024-03-03 23:27:01 UTC	16384	IN	Data Raw: 3b b3 7c bc ee e7 76 ea c6 48 6b aa 0b 2a 1d 7f d3 99 0a 93 05 1b 17 d9 50 28 4c cb a4 94 aa 5d c2 db 17 b5 a4 31 a0 1c 4f 25 e1 12 d9 8a 9c e2 59 99 f9 eb d4 49 45 6c ad 0c bf 2f d7 c5 32 83 4d c1 a8 6f 50 f6 7f c6 b2 f9 bd 55 1b 7e 6f ea 01 f8 47 41 4f 84 08 f7 6e d6 22 00 21 9e 6e bd 02 b0 94 fe 21 77 b8 22 a5 d8 42 eb 4a 8d a0 e9 b3 98 f9 6a 78 cd 88 62 0d 2c 34 1e 9e 66 e1 b2 b0 de d4 5a b0 0a 81 a2 11 7b e1 a3 66 6c e5 11 e6 5a de b5 72 5e b7 74 3b 4f fd 58 0e 49 4e e6 71 f0 5c 7b 97 f6 f9 82 be f0 a2 b2 de f2 bb 8f ff c9 8f 69 84 17 e1 c2 4b 4b ae 33 2e 98 d2 a2 ba 9c 2b ca df 98 35 7e 76 f1 64 72 13 92 d6 fb df 23 7b 50 a3 cb 92 e3 1d 3b 58 e0 f9 a5 90 af 4b 93 ea d2 ac c7 dc 8f cf ba 15 95 fa cd d8 23 d2 83 09 ef c6 81 76 08 88 1a 93 72 6f 1b a2 Data Ascii: ;\|vHk*P(L]1O%YIEl/2MoPU~oGAOn"!n!w"BJjxb,4fZ{flZr^t;OXINq\{iKK3.+5~vdr#{P;XK#vro
2024-03-03 23:27:01 UTC	15497	IN	Data Raw: 94 f4 15 be 5d 45 03 30 7d da 2b 85 c6 4a dd 7c 8a f1 95 99 33 38 15 ff e4 b7 63 70 e8 f3 8a 3e 7c 00 23 60 51 b2 e3 6f fc a9 3e 70 4f c0 09 98 03 a3 db f8 d4 65 51 b1 f9 8b f5 4e ca c3 82 1e 80 ae 63 05 00 98 3a 59 eb 3e 82 f3 fb b9 c0 0e d0 3e 7c 3d c8 26 3e 50 3a 83 cb f8 09 8b a6 eb 88 21 7e e1 d8 42 30 10 4d 63 e4 57 15 70 4d e3 0f d5 80 a5 25 92 c4 b2 f4 f4 7f 2c ac 98 19 7e cc cc 05 c0 fa 73 82 d6 98 09 9a 08 86 d6 b6 91 da 19 af be 28 b8 02 77 d5 2b 03 75 0f 83 ff 83 96 9a 9c ae 5e 33 41 a7 ae 48 46 ad 41 3c 0d ac 14 54 8e 02 42 62 c9 f5 b3 f4 d5 1a 29 d1 16 ae af ca ac f2 57 35 02 64 09 21 59 18 58 a9 63 1d b6 e5 64 e9 63 64 d6 57 e0 88 31 ff 77 fa e3 d5 a1 83 ed 1f 37 6c 73 65 41 a8 79 40 8f a0 9a 32 59 c7 95 b2 56 cf 5b 05 55 d3 64 22 06 23 f6 Data Ascii: ]E0}+J\|38cp>\|#`Qo>pOeQNc:Y>>\|=&>P:!~B0McWpM%,~s(w+u^3AHFA<TBb)W5d!YXcdcdW1w7lseAy@2YV[Ud"#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	50500	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	7270	OUT	GET /log?logid=aplog&itype=YHB&tElp=4352&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&acid=409702088720264621709508396926&astat=&auMxTm=1400&actltime=1128&acwtime=1128&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=2&agid%3C%3E=&asagid=&asbkt=&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=3x1%7C728x90%7C970x250&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_top_center&sec=&chnl=&csent=1&zn=e&crid=771334461&g=0&nms=2&ptype=43&supcrid=us_aol_hp_dt_top_center&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=3x1%7C728x90%7C970x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=0&btm=0&lft=0&rght=1263&dspltime=1129&dfpDiv=horizon-e2e&lper=4&acid=213699153252948111709508396854&astat=&auMxTm=1400&actltime=1404&acwtime=1407&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=-1&agid%3C%3E=55636776151632581709508396855&asagid=55636776151632581709508396855&asbkt=v2&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=300x250&size=-1x-1&adtypes=2%7C0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=2%23%230&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_a&sec=&chnl=&csent=1&zn=e&crid=102615858&g=0&nms=1&ptype=43&supcrid=us_aol_hp_dt_as_top_right_a&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=300x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_right%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=733&btm=733&lft=855.3125&rght=1155.3125&dspltime=1407&dfpDiv=top_right_2&lper=4&acid=018482128756829541709508396854&astat=&auMxTm=1400&actltime=1404&acwtime=1424&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=1&agid%3C%3E=55636776151632581709508396855&asagid=55636776151632581709508396855&asbkt=v2&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=300x250&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_b&sec=&chnl=&csent=1&zn=e&crid=659677893&g=0&nms=1&ptype=43&supcrid=us_aol_hp_dt_as_top_right_b&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=300x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_right%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=121&btm=721&lft=855.3125&rght=1155.3125&dspltime=1424&dfpDiv=top_right_1&lper=4&acid=168728230364804131709508396854&astat=&auMxTm=1400&actltime=1405&acwtime=1430&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=1&agid%3C%3E=55636776151632581709508396855&asagid=55636776151632581709508396855&asbkt=v2&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=300x600&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_as_top_right_c&sec=&chnl=&csent=1&zn=e&crid=585477397&g=0&nms=1&ptype=43&supcrid=us_aol_hp_dt_as_top_right_c&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=300x600&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22top_right%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=&btm=&lft=&rght=&dspltime=1430&dfpDiv=top_right_0&lper=4&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:01 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	50504	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2581	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU0d427bac8188466daae7f5b623a0353a HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 10:14:40 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 17-Mar-2024 10:14:40 GMT; path=/ Set-Cookie: PugT=1709460880; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 10:14:40 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	50586	35.244.159.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	716	OUT	GET /w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404
2024-03-03 23:27:01 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	50551	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1725	OUT	POST /p?_V=V&V_sec=pb&evt=v_start&t=0.8984101064173748&_sqno=9&ts=19736&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&buf_dur=0.000&ucl=10051&ad=0 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:01 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 2 date: Sun, 03 Mar 2024 23:27:01 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	50571	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	823	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348145722112&time=1709508408212&seq=3&response_time_ms=2627 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	50533	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1234	OUT	GET /cksync.php?cs=1&type=58160&ovsid=LTC55UNV-1B-13RH&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:01 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-mag=LTC55UNV-1B-13RH~~1;Expires=Mon, 03 Mar 2025 23:27:01 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:01 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.4	50552	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1908	OUT	POST /p?s=1197803361&t=Gl3Samrum67mNjir,0.8535675650384968&_I=&_AO=0&_NOL=1&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-aa-2%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03KjBZped2yRrWXXhX%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aolfrontpage%04site%03aolfrontpage%04mrkt%03us%04lang%03en-US%04colo%03us-east-1%04_yrid%0302r7skdiua1p4%04_rid%0302r7skdiua1p4%04abk%03%04A_utm%03%7B%22vp_contentplayback_start%22%3A31380.5%2C%22vp_playback_start%22%3A31380.5%2C%22vp_ready%22%3A21264%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031709508418%04_ms%03364%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:01 UTC	730	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:27:01 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.4	50537	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1342	OUT	GET /cksync.php?gpp=DBAA&gpp_sid=-1&cs=1&vsid=3525099948919525000V10&type=idx&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:01 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1;Expires=Wed, 17 Apr 2024 23:27:01 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:01 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.4	50612	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2265	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.4	50567	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1738	OUT	POST /p?_V=V&V_sec=pb&evt=ui_pp&t=0.42523768462105926&_sqno=10&ts=19746&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&value=play&dur=0&req_type=api&req_action= HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:02 UTC	1056	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 60 date: Sun, 03 Mar 2024 23:27:01 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.4	50613	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2273	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=3861fc3c-867b-43e0-b46a-259e2b0cd468&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.4	50539	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	576	OUT	GET /sync?ssp=google&no_redirect=1&google_gid=CAESEHCGma9YkBLeeRR1TOzfYEc&google_cver=1 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=3b652fc1-53a0-40de-ba73-a4ae557bd47f; c=1709508407; tuuid_lu=1709508409; ssh=!bidswitch,1709508411!medianet,1709508409!intentiq,1709508407
2024-03-03 23:27:01 UTC	246	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Sun, 03 Mar 2024 23:27:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.4	50577	35.236.220.17	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=CA2F41ACCA684739A1CE374B350A0FEF
2024-03-03 23:27:01 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:CA2F41ACCA684739A1CE374B350A0FEF&gdpr=0&gdpr_consent= Expires: Sat, 02 Mar 2024 23:27:01 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-03-03 23:27:01 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.4	50583	68.67.161.182	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1279	OUT	GET /getuid?https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D2E84A48E09184096882C93C926E94179%26att%3D1%26pid%3D46%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D7346742891256766101%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; receive-cookie-deprecation=1; uuid2=2056953496763385149
2024-03-03 23:27:01 UTC	1716	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.technoratimedia.com/services?srv=cs&nuid=2E84A48E09184096882C93C926E94179&att=1&pid=46&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=2056953496763385149 AN-X-Request-Uuid: cfcb83e0-63ed-4bb1-a6f3-6a67ee9688e6 Set-Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:27:01 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 19-Feb-2034 23:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=2056953496763385149; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:27:01 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.203; 154.16.192.203; 797.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.4	50578	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2612	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:CA2F41ACCA684739A1CE374B350A0FEF&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.4	50483	195.5.165.20	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	242	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: leviathan-3588ed0b595b@version_1.6.0-pre8 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 1ms Date: Sun, 03 Mar 2024 23:27:01 GMT
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.4	50614	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1856	OUT	GET /v1/evp/asset?bcid=5afc769f7239855a15fcee15&pid=5afc75ea3a04293dad9f1a1f&secure=true&rssId=3caca4ca-191c-3933-bab5-595ca1d1495a&firstVideo=true&height=276&width=368&sid=b9b3c6c5-2cd7-4937-8390-628222cda75f&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-aa-2&b_id=btnlfjdiua1pb&licensor_id=a0a6T00000R2KYJQA3&us_privacy=1YNN&isDockable=false&m.type=VOD&device=desktop&v=1&f=json&s2s=true&gdpr=false&content_len=68&content_title=Winter+storm+wreaks+havoc+across+Sierra+Nevadas&content_id=https%3A%2F%2Fwww.cnn.com%2Fvideos%2Fweather%2F2024%2F03%2F03%2Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn&gpp=DBAA&gpp_sid=-1&pver=1.3.9&aver=3.624.0&country=US&state=North+Carolina&ad.plseq=1&ad.pct=aolfrontpage&ad.pl=up&ad.pt=home&ad.pubfamily=aol&pos=preroll&evp=bcp&fmt=vmap&ps=bdud5hbm&r=https%3A%2F%2Fwww.aol.com%2F&givn=[GOOGLE_INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid= HTTP/1.1 Host: tb.video.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:01 UTC	563	IN	HTTP/1.1 200 OK server: ATS strict-transport-security: max-age=31536000 content-type: application/xml content-length: 11987 date: Sun, 03 Mar 2024 23:27:01 GMT x-envoy-upstream-service-time: 160 x-envoy-decorator-operation: thunderball--production-bf1.video--thunderball-server-k8s.svc.yahoo.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 76 6d 61 70 3a 56 4d 41 50 20 78 6d 6c 6e 73 3a 76 6d 61 70 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 69 61 62 2e 6e 65 74 2f 76 69 64 65 6f 73 75 69 74 65 2f 76 6d 61 70 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 0a 09 3c 76 6d 61 70 3a 41 64 42 72 65 61 6b 20 62 72 65 61 6b 49 64 3d 22 76 63 65 4c 7a 58 79 66 49 53 7a 4e 70 67 79 6f 22 20 62 72 65 61 6b 54 79 70 65 3d 22 6c 69 6e 65 61 72 22 20 74 69 6d 65 4f 66 66 73 65 74 3d 22 73 74 61 72 74 22 3e 0a 09 09 3c 76 6d 61 70 3a 41 64 53 6f 75 72 63 65 3e 0a 09 09 09 3c 76 6d 61 70 3a 56 41 53 54 41 64 44 61 74 61 3e 0a 09 09 09 09 3c 56 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><vmap:VMAP xmlns:vmap="http://www.iab.net/videosuite/vmap" version="1.0"><vmap:AdBreak breakId="vceLzXyfISzNpgyo" breakType="linear" timeOffset="start"><vmap:AdSource><vmap:VASTAdData><V
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 33 44 30 25 32 36 79 5f 65 78 70 62 6b 74 25 33 44 2d 33 30 30 5f 2d 31 32 32 33 25 32 36 79 5f 64 6e 62 25 33 44 31 25 32 36 79 5f 63 69 64 25 33 44 38 59 48 42 36 34 50 53 49 25 32 36 79 5f 61 64 74 79 70 65 25 33 44 73 5f 76 69 64 65 6f 5d 5d 3e 3c 2f 56 41 53 54 41 64 54 61 67 55 52 49 3e 0a 09 09 09 09 09 09 09 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 62 61 74 73 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 3f 65 76 74 3d 61 64 5f 64 6c 76 66 26 5f 45 3d 61 64 5f 64 6c 76 66 26 6f 75 74 63 6d 3d 61 64 5f 64 6c 76 66 26 5f 56 3d 56 26 56 5f 73 65 63 3d 70 62 26 5f 77 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 70 76 65 72 3d 31 2e 33 2e 39 26 61 76 65 Data Ascii: 3D0%26y_expbkt%3D-300_-1223%26y_dnb%3D1%26y_cid%3D8YHB64PSI%26y_adtype%3Ds_video...</VASTAdTagURI><Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&outcm=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&ave
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 63 6b 74 3d 70 72 6f 64 26 6f 6d 69 64 3d 6e 75 6c 6c 26 74 70 3d 79 5f 65 78 70 62 6b 74 25 33 44 2d 33 30 30 5f 2d 31 32 32 33 25 32 36 79 5f 64 6e 62 25 33 44 31 25 32 36 79 5f 63 69 64 25 33 44 38 59 48 42 36 34 50 53 49 25 32 36 79 5f 61 64 74 79 70 65 25 33 44 73 5f 76 69 64 65 6f 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 0a 09 09 09 09 09 09 09 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 62 61 74 73 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 3f 65 76 74 3d 61 64 5f 6f 70 70 74 79 26 5f 45 3d 61 64 5f 6f 70 70 74 79 26 6f 75 74 63 6d 3d 61 64 5f 6f 70 70 74 79 26 5f 56 3d 56 26 56 5f 73 65 63 3d 70 62 26 5f 77 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 Data Ascii: ckt=prod&omid=null&tp=y_expbkt%3D-300_-1223%26y_dnb%3D1%26y_cid%3D8YHB64PSI%26y_adtype%3Ds_video...</Impression><Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&outcm=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 3d 6e 75 6c 6c 26 68 62 72 3d 6e 75 6c 6c 26 6c 73 63 70 3d 6e 75 6c 6c 26 63 69 6d 70 3d 6e 75 6c 6c 26 74 62 63 6b 74 3d 70 72 6f 64 26 70 6c 5f 62 63 6b 74 3d 70 72 6f 64 26 6f 6d 69 64 3d 6e 75 6c 6c 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 0a 09 09 09 09 09 09 09 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 62 61 74 73 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 3f 65 76 74 3d 61 64 5f 69 6e 69 74 26 5f 45 3d 61 64 5f 69 6e 69 74 26 6f 75 74 63 6d 3d 61 64 5f 69 6e 69 74 26 5f 56 3d 56 26 56 5f 73 65 63 3d 70 62 26 5f 77 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 70 76 65 72 3d 31 2e 33 2e 39 26 61 76 65 72 3d 33 2e 36 32 34 2e 30 26 61 6e 3d 6e Data Ascii: =null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null...</Impression><Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&outcm=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=n
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 75 6c 6c 26 74 62 63 6b 74 3d 70 72 6f 64 26 70 6c 5f 62 63 6b 74 3d 70 72 6f 64 26 6f 6d 69 64 3d 6e 75 6c 6c 26 6d 65 64 54 3d 5b 45 52 52 4f 52 43 4f 44 45 5d 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 0a 09 09 09 09 09 09 09 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 62 61 74 73 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 3f 65 76 74 3d 61 64 5f 62 65 67 26 5f 45 3d 61 64 5f 62 65 67 26 6f 75 74 63 6d 3d 61 64 5f 62 65 67 26 5f 56 3d 56 26 56 5f 73 65 63 3d 70 62 26 5f 77 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 70 76 65 72 3d 31 2e 33 2e 39 26 61 76 65 72 3d 33 2e 36 32 34 2e 30 26 61 6e 3d 6e 75 6c 6c 26 6f 73 3d 6e 75 6c 6c 26 70 73 7a 3d 33 Data Ascii: ull&tbckt=prod&pl_bckt=prod&omid=null&medT=[ERRORCODE]...</Impression><Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_beg&_E=ad_beg&outcm=ad_beg&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=3
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 5f 62 63 6b 74 3d 70 72 6f 64 26 6f 6d 69 64 3d 6e 75 6c 6c 5d 5d 3e 3c 2f 49 6d 70 72 65 73 73 69 6f 6e 3e 0a 09 09 09 09 09 09 09 3c 45 72 72 6f 72 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 62 61 74 73 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 3f 65 76 74 3d 61 64 5f 64 6c 76 66 26 5f 45 3d 61 64 5f 64 6c 76 66 26 6f 75 74 63 6d 3d 61 64 5f 64 6c 76 66 26 5f 56 3d 56 26 56 5f 73 65 63 3d 70 62 26 5f 77 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 70 76 65 72 3d 31 2e 33 2e 39 26 61 76 65 72 3d 33 2e 36 32 34 2e 30 26 61 6e 3d 6e 75 6c 6c 26 6f 73 3d 6e 75 6c 6c 26 70 73 7a 3d 33 36 38 78 32 37 36 26 65 78 70 6e 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 61 62 69 64 3d 6e 75 6c 6c 26 73 3d Data Ascii: _bckt=prod&omid=null...</Impression><Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&outcm=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=
2024-03-03 23:27:01 UTC	382	IN	Data Raw: 59 48 42 36 34 50 53 49 25 32 36 79 5f 61 64 74 79 70 65 25 33 44 73 5f 76 69 64 65 6f 5d 5d 3e 3c 2f 45 72 72 6f 72 3e 0a 09 09 09 09 09 09 09 3c 45 72 72 6f 72 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 62 61 74 73 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 3f 65 76 74 3d 61 64 5f 6f 70 70 74 79 26 5f 45 3d 61 64 5f 6f 70 70 74 79 26 6f 75 74 63 6d 3d 61 64 5f 6f 70 70 74 79 26 5f 56 3d 56 26 56 5f 73 65 63 3d 70 62 26 5f 77 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 70 76 65 72 3d 31 2e 33 2e 39 26 61 76 65 72 3d 33 2e 36 32 34 2e 30 26 61 6e 3d 6e 75 6c 6c 26 6f 73 3d 6e 75 6c 6c 26 70 73 7a 3d 33 36 38 78 32 37 36 26 65 78 70 6e 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 61 62 69 64 3d Data Ascii: YHB64PSI%26y_adtype%3Ds_video...</Error><Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&outcm=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.3.9&aver=3.624.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 6e 74 6c 3d 75 73 26 73 69 74 65 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 62 63 6b 74 3d 54 72 65 61 74 6d 65 6e 74 5f 4f 61 74 68 5f 50 6c 61 79 65 72 26 70 61 6c 6e 3d 66 61 6c 73 65 26 67 69 76 6e 3d 66 61 6c 73 65 26 72 73 7a 3d 30 26 70 6c 73 3d 62 39 62 33 63 36 63 35 2d 32 63 64 37 2d 34 39 33 37 2d 38 33 39 30 2d 36 32 38 32 32 32 63 64 61 37 35 66 26 76 73 3d 62 64 75 64 35 68 62 6d 26 70 73 74 61 69 64 3d 33 63 61 63 61 34 63 61 2d 31 39 31 63 2d 33 39 33 33 2d 62 61 62 35 2d 35 39 35 63 61 31 64 31 34 39 35 61 26 61 72 3d 31 2e 33 33 26 63 6f 6e 74 3d 31 26 70 6c 74 79 70 65 3d 64 65 73 6b 74 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 61 2d 32 26 74 65 73 74 3d 61 6f 6c 2d 61 61 2d 32 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e Data Ascii: ntl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=n
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 74 68 5f 50 6c 61 79 65 72 26 70 61 6c 6e 3d 66 61 6c 73 65 26 67 69 76 6e 3d 66 61 6c 73 65 26 72 73 7a 3d 30 26 70 6c 73 3d 62 39 62 33 63 36 63 35 2d 32 63 64 37 2d 34 39 33 37 2d 38 33 39 30 2d 36 32 38 32 32 32 63 64 61 37 35 66 26 76 73 3d 62 64 75 64 35 68 62 6d 26 70 73 74 61 69 64 3d 33 63 61 63 61 34 63 61 2d 31 39 31 63 2d 33 39 33 33 2d 62 61 62 35 2d 35 39 35 63 61 31 64 31 34 39 35 61 26 61 72 3d 31 2e 33 33 26 63 6f 6e 74 3d 31 26 70 6c 74 79 70 65 3d 64 65 73 6b 74 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 61 2d 32 26 74 65 73 74 3d 61 6f 6c 2d 61 61 2d 32 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 66 72 6f 6e 74 70 61 67 65 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 Data Ascii: th_Player&paln=false&givn=false&rsz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v
2024-03-03 23:27:01 UTC	1205	IN	Data Raw: 73 7a 3d 30 26 70 6c 73 3d 62 39 62 33 63 36 63 35 2d 32 63 64 37 2d 34 39 33 37 2d 38 33 39 30 2d 36 32 38 32 32 32 63 64 61 37 35 66 26 76 73 3d 62 64 75 64 35 68 62 6d 26 70 73 74 61 69 64 3d 33 63 61 63 61 34 63 61 2d 31 39 31 63 2d 33 39 33 33 2d 62 61 62 35 2d 35 39 35 63 61 31 64 31 34 39 35 61 26 61 72 3d 31 2e 33 33 26 63 6f 6e 74 3d 31 26 70 6c 74 79 70 65 3d 64 65 73 6b 74 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 61 2d 32 26 74 65 73 74 3d 61 6f 6c 2d 61 61 2d 32 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 66 72 6f 6e 74 70 61 67 65 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 Data Ascii: sz=0&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&vs=bdud5hbm&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&ar=1.33&cont=1&pltype=desktop&expb=aol-aa-2&test=aol-aa-2&mode=EVP&pt=home&pd=null&pct=aolfrontpage&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.4	50602	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	507	OUT	GET /uu/api/res/1.2/PVU5gM.eKAfa6cKZLZNPDg--~B/Zmk9c3RyaW07aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/cnn_videos_177/755b42ce7295132b4d278d6cd57b891f HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	1228	IN	HTTP/1.1 200 OK Content-Length: 118025 Content-Type: image/png Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Cache-Control: public, max-age=2592000 Cache-Tag: 323966970705321969767231122595833882628,263774590154713776034489356190572916191,ae7a14591aaf8d474cdb3f92111c923e Edge-Cache-Tag: 323966970705321969767231122595833882628,263774590154713776034489356190572916191,ae7a14591aaf8d474cdb3f92111c923e Etag: "c067439d3abf10293ff87374d1b478fb" Expiration: expiry-date="Sat, 31 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 03 Mar 2024 09:54:12 GMT Server: ATS Surrogate-Reporting: width=368,height=276,bytes=118025,owidth=960,oheight=540,obytes=479129,ef=(1,13,17,23,30) Timing-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 03 Mar 2024 10:12:09 GMT X-Served-By: cache-iad-kiad7000125-IAD X-Cache: Miss from cloudfront, MISS X-Cache-Hits: 0 X-Timer: S1709460729.112697,VS0,VE152 Age: 47692 Strict-Transport-Security: max-age=31536000 cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_by: cache-iad-kiad7000125-IAD cld_latency: 152 Referrer-Policy: no-referrer-when-downgrade ATS-Carp-Promotion: 1 Connection: close
2024-03-03 23:27:01 UTC	201	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 41 54 53 2d 43 61 72 70 2d 50 72 6f 6d 6f 74 69 6f 6e 3a 20 31 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffATS-Carp-Promotion: 1
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 70 00 00 01 14 08 02 00 00 00 bd 1e fa 24 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 01 cc bb 49 44 41 54 18 19 ac c1 6b ac ad 07 5d ef fb ef f7 ff 3c 63 ce b9 2e ad b5 9e 52 10 b4 52 0a 62 e5 26 28 c8 45 82 21 31 36 51 41 13 13 13 43 62 8c 12 50 e9 0b 88 96 78 23 be d2 44 c5 17 fb 44 5f a8 21 c1 9c 1d 14 c3 06 22 2a 0a 22 81 10 41 6d 65 73 91 4b 6d 97 94 42 95 76 ad d5 75 1b 63 8e 31 9e ff ef 3c 63 ce 55 28 1e dd ba 73 f6 e7 e3 6d ff d7 77 2e ca 3d c7 c5 c0 50 75 a2 6a bf c6 bd 71 3c 18 86 71 70 31 d4 a2 b2 a8 71 ac 5a 0c b5 a8 1a ad c1 1a 86 1a 93 d2 b2 aa 10 4b 0b 45 01 15 2c 81 70 55 48 00 09 95 ae 89 4e e8 f4 44 48 35 dd 30 05 92 2d dd 74 32 44 12 3a b4 99 4d dd 9d 84 8e Data Ascii: PNGIHDRp$pHYsO%IDATk]<c.RRb&(E!16QACbPx#DD_!"*"AmesKmBvuc1<cU(smw.=Pujq<qp1qZKE,pUHNDH50-t2D:M
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: b3 0d 6e 33 6b 20 64 26 21 99 12 a1 ca 52 43 34 08 62 c0 19 4a 62 80 84 90 b4 6d 29 ce 80 45 0d 89 c6 32 84 99 8a 24 71 56 a5 9d 90 00 41 06 04 03 18 8e 25 04 12 41 64 47 1d a0 c8 84 4c 3d c1 04 01 15 da a0 55 a8 08 c8 8e c8 4e 80 24 28 e1 aa 80 41 45 20 4e a2 54 68 6d 1d 64 84 04 0c 47 1a 22 44 30 22 d0 a1 4c 20 01 3a 60 08 11 23 91 40 64 16 42 6c 23 84 48 21 3b 32 0b 44 90 80 7c 59 12 14 90 47 0b 57 c9 11 93 26 01 23 81 66 27 e1 7f 21 10 1e 2d 8a 10 21 21 c4 d8 81 e2 d1 12 54 8c c8 bf 15 08 24 51 5b 22 82 fc d7 c8 4c 65 c7 19 8f a2 3c c2 00 26 5a 40 40 76 02 05 12 8e c8 4e f8 5f 93 9d 10 8e c8 57 19 03 09 93 bd b5 f6 9b 49 ba 65 22 c8 4c a6 b2 74 b0 3a b6 26 c6 04 26 29 42 f7 58 03 3b 31 1a 62 54 1e c5 20 b3 21 18 a6 06 2b 66 26 94 4e 61 aa a2 b3 63 52 Data Ascii: n3k d&!RC4bJbm)E2$qVA%AdGL=UN$(AE NThmdG"D0"L :`#@dBl#H!;2D\|YGW&#f'!-!!T$Q["Le<&Z@@vN_WIe"Lt:&&)BX;1bT !+f&NacR
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 72 c4 08 9a 9a 05 aa d0 40 4c a6 a9 7b 93 04 d2 b3 29 08 26 69 ba 73 a4 6a a8 99 19 6b 8c 23 c9 76 bb 9d a6 89 af 68 66 21 ec 28 ce 00 09 96 8c e3 50 45 12 34 0d 5d 42 98 92 ce 0c 1a 01 31 09 11 28 33 0c 58 2d a9 b6 a7 29 5a e3 20 88 21 80 0a 05 86 d0 09 8d d8 62 07 4b ca 52 81 52 29 c9 0e c4 29 84 0e a1 c1 50 58 16 15 62 69 a0 e9 8a 0a 42 d2 36 44 83 10 d9 89 32 08 11 18 08 31 65 e8 a4 69 3b 84 23 66 46 c7 aa 51 85 34 49 30 91 48 44 4d 08 50 55 61 96 a4 a1 62 39 43 2d 05 2d c1 8a 96 14 0d 4a 20 42 12 50 81 10 d2 d1 24 08 32 4b 40 20 71 96 80 01 49 80 a4 04 84 c8 4e 08 20 49 c8 8c 50 e1 2b 92 be 78 b8 fc 87 f3 f7 6f 4c 41 4b 64 27 ec c8 cc 08 89 56 08 49 d8 11 92 48 45 21 ec 44 66 22 c7 12 84 88 3c 22 60 0c 08 18 24 91 20 01 a2 86 59 88 88 21 42 82 b2 23 Data Ascii: r@L{)&isjk#vhf!(PE4]B1(3X-)Z !bKRR))PXbiB6D21ei;#fFQ4I0HDMPUab9C--J BP$2K@ qIN IP+xoLAKd'VIHE!Df"<"`$ Y!B#
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: b3 e0 28 41 52 d6 48 8d 8b 31 c4 32 34 74 1a ad ec 54 32 b1 a3 20 41 28 8c 83 83 02 c1 19 50 84 92 84 08 52 08 42 70 0b 45 82 44 22 8f 12 14 12 ed 74 61 5b 84 d2 e2 58 12 62 68 28 02 62 d8 89 89 cc 0a 22 11 d9 11 43 42 27 84 00 49 d8 71 3b 6d 97 cb e5 da 8e 42 d2 a8 49 9e f5 ac 67 fd e4 4f fe e4 ef fe ee ef 1e 1e 1e de 7e fb ed f7 dc 73 cf ad b7 de 7a f7 dd 77 af 56 ab 93 27 4f be f8 c5 2f 7e eb 5b df fa 9c e7 3c e7 b3 9f fd ec 3f fc c3 3f bc e2 15 af a8 aa df ff fd df ef ee 7b ef bd f7 2f ff f2 2f 7f e4 47 7e e4 81 07 1e 78 df fb de 77 f1 e2 c5 27 3f f9 c9 c3 30 5c bc 78 f1 d4 a9 53 9f fa d4 a7 aa ea 9b bf f9 9b 3f f1 89 4f 5c 7b ed b5 df f1 1d df 51 55 77 de 79 e7 38 8e cf 7d ee 73 df fe f6 b7 df 78 e3 8d c3 30 9c 39 73 e6 9b 8f 9c 39 73 e6 a3 1f fd 28 Data Ascii: (ARH124tT2 A(PRBpED"ta[Xbh(b"CB'Iq;mBIgO~szwV'O/~[<??{//G~xw'?0\xS?O\{QUwy8}sx09s9s(
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 4f 1c 76 4f e9 69 d3 db cd 74 ed d7 ec 9f 9c f6 4e 2c f6 5c 54 0d 1d 19 ab a4 93 00 96 0d 89 12 40 da 10 42 47 30 72 ac 20 01 44 76 92 a8 14 01 02 04 e4 98 91 86 6a b6 04 d6 24 24 08 22 d2 66 46 a0 0c 06 11 39 12 c2 4c 30 60 84 86 44 ba b4 d5 60 64 32 95 ea 44 89 dd 15 cc cc 2e a4 87 70 44 94 80 cc 3a 19 14 3a 30 89 a2 44 24 2a 24 20 86 04 50 71 06 84 80 62 48 b8 2a 09 50 a5 9d a4 b7 d3 76 b5 3a 5c b1 8d ec 84 d9 62 b1 d8 db db bb ff fe fb 97 cb 25 f0 b9 cf 7d 6e 3a f2 d4 a7 3e 55 3d 38 38 58 2c 16 ab d5 6a 9a a6 1f fe e1 1f 7e e1 0b 5f 38 0c c3 6f fe e6 6f 5e b9 72 05 48 32 0c c3 34 4d 9b cd 66 b9 5c ae 8e dc 71 c7 1d 0f 3d f4 d0 ed b7 df be 5a ad 92 00 d7 5d 77 dd e3 1f ff f8 3b ee b8 e3 e2 c5 8b b7 dc 72 cb 7a bd be e1 86 1b ee b8 e3 8e 37 bd e9 4d 1f Data Ascii: OvOitN,\T@BG0r Dvj$$"fF9L0`D`d2D.pD::0D$$ PqbHPv:\b%}n:>U=88X,j~_8oo^rH24Mf\q=Z]w;rz7M
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 94 63 8a 68 21 20 10 8e 24 21 cc 92 10 25 61 96 1d 20 9d 5e af 57 eb 69 33 95 cc 1a 15 f8 c3 3f fc c3 6f ff f6 6f ff 9d df f9 9d 24 87 87 87 1f f9 c8 47 9e ff fc e7 5f bc 78 71 b9 5c 5e b9 72 e5 a1 87 1e 5a af d7 e7 cf 9f bf ef be fb ce 9c 39 33 4d 93 ca 23 aa ea fc f9 f3 17 2f 5e 5c ad 56 87 87 87 67 cf 9e 3d 3c 3c bc 72 e5 ca fb df ff fe 37 bc e1 0d 97 2e 5d 3a 77 ee dc dd 77 df fd be f7 bd ef 0d 6f 78 c3 c1 c1 c1 a7 3e f5 a9 bb ee ba eb 9e 7b ee f9 ed df fe ed 57 bd ea 55 df f7 7d df f7 b6 b7 bd ed 97 7e e9 97 5e fe f2 97 df 7c f3 cd bf fe eb bf fe e6 37 bf f9 17 7e e1 17 7e e0 07 7e e0 e9 4f 7f fa 7b df fb de 97 bc e4 25 af 7d ed 6b 97 cb 65 77 8f e3 f8 d0 43 0f 5d be 7c 79 79 e4 fc f9 f3 ab d5 ea e2 c5 8b e7 cf 9f bf fb ee bb 4f 9c 38 f1 1b bf f1 1b Data Ascii: ch! $!%a ^Wi3?oo$G_xq\^rZ93M#/^\Vg=<<r7.]:wwox>{WU}~^\|7~~~O{%}kewC]\|yyO8
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: dd 01 ab 20 53 12 48 44 2b a2 8c 85 0e 46 a7 a4 d2 4c 44 31 74 44 82 04 65 10 43 60 7b fd c8 35 7b 8b 41 2c 94 91 92 54 d5 20 82 42 51 28 56 59 a2 55 56 95 83 43 89 45 79 04 95 aa 8a 68 21 21 86 4a 91 60 02 d9 e9 90 74 02 99 91 ff f9 4f 9f f9 bf ff e2 7f 5c 9a b6 ec 84 ab 14 21 21 fc fb 84 f0 1f 11 c2 57 11 c2 7f 99 10 ae 2a 08 84 ff bf 84 f0 bf 69 7f 7f ff c7 7e ec c7 36 db cd 7f ff 7f fe fb ea 70 45 b8 4a 08 b3 b1 89 e9 30 04 3a 21 f4 44 0f 26 85 26 a6 13 69 68 69 49 e8 d0 a6 08 10 12 0c 10 22 51 68 50 8e 85 1d 09 c7 92 80 08 44 76 a4 82 0a dd b1 a0 a0 09 33 45 04 25 90 26 d0 a4 ab 8c 05 5d 32 d4 30 90 90 c1 2a 4c 42 b2 ed d6 a9 d5 12 a5 83 54 53 d4 54 a9 42 46 1c b7 2e 36 96 8b 03 f7 4f 66 71 6a e3 c1 5e 1d f4 c1 e9 30 6e a6 de f6 a2 b7 d9 9a ae 71 aa Data Ascii: SHD+FLD1tDeC`{5{A,T BQ(VYUVCEyh!!J`tO\!!Wi~6pEJ0:!D&&ihiI"QhPDv3E%&]20LBTSTBF.6Ofqj^0nq
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: 06 3a 5b df 7c e3 8d bf fa 23 3f 6e 77 13 a0 ab 1e 5b ed 3f 7c e9 92 01 92 22 89 42 50 03 58 20 04 39 21 01 05 44 20 10 36 02 b2 21 48 c2 65 82 3c 4e 21 04 94 13 42 e4 84 02 42 90 2b a2 c8 56 40 36 0c 08 84 2b 14 03 91 2b 54 22 5b 11 31 b2 21 1b 36 41 36 0c 48 38 11 14 48 40 d0 0a 69 03 54 4b d9 62 47 41 17 09 61 74 62 2a b1 21 90 4e 4b 17 b6 d1 54 80 26 73 58 a0 21 a1 25 26 92 34 5d 51 d3 41 50 09 24 71 83 80 18 90 b0 25 05 68 40 50 8a 0a c6 08 54 98 53 a4 3b 68 0a 3a 8a 20 11 25 86 c0 5c b4 09 49 23 26 28 44 41 2c 24 8c b1 a4 ca 65 95 cb 84 14 f3 62 1c 8d 53 3d 76 5c 3e e1 78 f7 1b a6 9d af 9b 74 ea 3e f6 68 3a 5a 1d cc f3 1a 4e ed 2d d9 ad 39 f3 7a 3e 3e e8 9e cb 5a d6 44 e6 2e 93 69 9e 77 27 98 f7 e7 8b 8f 8e d5 63 1c 3e e2 e1 c3 1e 3e e2 f1 6a 64 6d Data Ascii: :[\|#?nw[?\|"BPX 9!D 6!He<N!BB+V@6++T"[1!6A6H8H@iTKbGAatb*!NKT&sX!%&4]QAP$q%h@PTS;h: %\I#&(DA,$ebS=v\>xt>h:ZN-9z>>ZD.iw'c>>jdm
2024-03-03 23:27:01 UTC	1300	IN	Data Raw: fd e9 4f af 56 ab eb af bf 7e 6f 6f ef fc f9 f3 37 dc 70 c3 67 3f fb d9 69 9a ae bb ee ba 1b 6e b8 e1 de 7b ef 5d ad 56 40 12 4e 08 5d 8c 27 ef de 60 55 81 a5 85 66 c0 c0 c2 92 a1 a5 55 0e 2d b5 6a 88 a3 8a 44 0a 4a ad 1a 1a 50 ab 84 16 4f 14 35 a4 0a 45 64 ab 02 72 99 b2 25 94 88 84 13 1a 02 04 45 44 79 9c 10 21 a9 98 83 3a fd e0 bc 20 9a 2a 36 42 90 04 4c 89 52 58 33 4e b5 db 3b 57 8d d3 4f 72 f7 ba 79 79 f5 b1 57 ad dc 7b 4c 0e 32 ed e7 f8 88 35 99 07 23 c9 a2 aa 32 1d 4f eb 79 ee ce a8 5a ee 8c e5 02 07 0e 58 24 7b 35 cd fb 0f ae cf 7d 7a 7a ec 5f a7 83 c7 72 74 e8 b4 26 93 09 06 a2 04 83 71 86 2e 6a 50 55 40 27 e9 58 6e 10 48 10 b5 46 8d d2 80 43 b0 88 89 0d 65 01 c3 51 94 6d 05 02 a9 74 4a 2c ad 48 c4 ce 7a 5a 4f 73 2c 6b d4 58 96 68 09 ce dd 1a 34 Data Ascii: OV~oo7pg?in{]V@N]'`UfU-jDJPO5Edr%EDy!: *6BLRX3N;WOryyW{L25#2OyZX${5}zz_rt&q.jPU@'XnHFCeQmtJ,HzZOs,kXh4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.4	50588	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	3341	OUT	GET /log?logid=aplog&itype=YHB&tElp=4352&adt=desktop&cid=8YHB8F956&ct=NEWYORK&cc=US&ugd=4&app=0&pht=907&pid=8PR6KY355&dn=aol.com&servname=ssp-serving-yin-fbfb8b955-fmr8d&svr=278_5_5_ssp&sc=NY&version=4&vh=907&vw=1280&vsid=&vid=00001709508394451025847891957772&sspAbBucket=CONTROL&lw=1&dapp=green&nob=&bx_dc=sc&itypeid=84&sd=-1&adbd=0&npa=0&gdpr=0&csstr=&tcf_cmp=14&tcf_status=loaded&tcf_prp=0000--0%7C--&suc=0&tcf_api=1&tcf_gdpr=0&usp_enf=1&usp_status=0&usp_ldf=&usp_string=1YNN&ufca=13&coppa_status=&coppa_applied=&id_details=&gpp_status=3&gpp_dec_sid%3C%3E=&gpp_sid%3C%3E=-1&uspca_status=-----------&uspco_status=-----------&uspct_status=-----------&uspnat_status=-----------&usput_status=-----------&uspva_status=-----------&abte=SSP_CLIENT&rtype=&lbr=1&mnkv=&pabte=&pc=&ccat=&floc_id=&floc_ver=&gfundl=&gtd=400&inid=&ngfundl=1400&rdl=1400&r_tim%3C%3E=3822156&pubdpa=2&acid=168655130584537831709508396930&astat=&auMxTm=1400&actltime=1407&acwtime=1407&gFunDl=-1&ngFunDl=1400&aucToK=ngfd&aucTic=1400&aer=1&agid%3C%3E=&asagid=&asbkt=&sr=0&pvid=-2&s=2&snm=nobid&toconsider=1&nbr=99&iwb=0&req_size=970x250&size=-1x-1&adtypes=0&pv_adtype=&res_mtype=&pbasrc=0&req_mtype%3C%3E=0&ems_version_code=fb52d&ems_version_entity=PROV%3A25125%3A205_CU%3A5329_PR%3A107507_AT%3A107259_NPR%3A107507&uid_keys%3C%3E=&tref=0&rfc=0&mnrf=0&mnrfc=0&invw=-1&dfpAdPath=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_mid_center&sec=&chnl=&csent=1&zn=e&crid=586167089&g=0&nms=2&ptype=43&supcrid=us_aol_hp_dt_mid_center&r_fp%3C%3E=3900446&abtest_status=&bucket_id=&exp_id=&def_size=970x250&k1=%7B%22k%22%3A%22publisherblob%22%2C%22v%22%3A%22colo%3Aus-east-1%3Bdevice%3Adesktop%3Blang%3Aen-US%3Blu%3A0%3Bpct%3Aaolfrontpage%3Bpt%3Ahome%3Bregion%3AUS%3Bsite%3Aaol%3Bver%3Atd-app-aol%7C%7C1197803361%7C%7C%7C%7Caol-aa-2%7C%22%7D&k2=%7B%22k%22%3A%22bucket%22%2C%22v%22%3A%22aol-aa-2%22%7D&k4=%7B%22k%22%3A%22lang%22%2C%22v%22%3A%22en-US%22%7D&k7=%7B%22k%22%3A%22loc%22%2C%22v%22%3A%22mid_center%22%7D&k8=%7B%22k%22%3A%22site%22%2C%22v%22%3A%22aol%22%7D&k39=aol&top=1530.8125&btm=1820.8125&lft=121.90625&rght=1243&dspltime=1407&dfpDiv=mid_center&lper=4&requrl=https%3A%2F%2Fwww.aol.com%2F&kwrf= HTTP/1.1 Host: lg1.hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:01 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.4	50489	172.104.70.67	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	688	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	627	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=q3P69gSJDFemduV8RQflZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=q3P69gSJDFemduV8RQflZQ; Path=/; Domain=c.appier.net; Expires=Mon, 03 Mar 2025 23:27:01 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
2024-03-03 23:27:02 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 71 33 50 36 39 67 53 4a 44 46 65 6d 64 75 56 38 52 51 66 6c 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=q3P69gSJDFemduV8RQflZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.4	50582	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2211	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 10:14:40 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.4	50517	52.4.203.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	648	OUT	GET /sync?pid=187&uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	420	IN	HTTP/1.1 204 Date: Sun, 03 Mar 2024 23:27:01 GMT Set-Cookie: __187_cid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; Domain=.bfmio.com; Max-Age=31536000; Expires=Mon, 03-Mar-2025 18:27:01 GMT-0500; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=98ac3c4baf96e95b1497f3a3b59b21128d1473ff; Domain=.bfmio.com; Max-Age=31536000; Expires=Mon, 03-Mar-2025 18:27:01 GMT-0500; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.4	50532	23.77.240.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	923	OUT	GET /cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid=CAESEH9ooPefLktf1tmqMqyKXrY&google_cver=1 HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:27:02 UTC	560	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8;Expires=Sun, 17 Mar 2024 23:27:01 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.4	50605	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	996	OUT	GET /cksync.php?cs=1&type=zem&ovsid=mo68x8gjbJJi9doJz8TR HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1; data-pba=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~8; data-r1=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005~~8
2024-03-03 23:27:02 UTC	629	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ze=mo68x8gjbJJi9doJz8TR~~1;Expires=Mon, 03 Mar 2025 23:27:01 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.4	50573	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1602	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&time=1709508408279&event=play_request&video_data=&video_ads_supported=false&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&seq=4_-1 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.4	50591	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2609	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:e33b65e5-0744-4800-9e03-a305d43d5738&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:e33b65e5-0744-4800-9e03-a305d43d5738; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.4	50623	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	833	OUT	GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:27:01 UTC	708	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&process_consent=T&gdpr=0&put=CAESEOr4unjD8T-vEL2LxAdfEPY&google_cver=1 Date: Sun, 03 Mar 2024 23:27:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 359 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	359	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 61 6d 70 3b 6e 69 64 3d 32 32 34 39 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 70 72 6f 63 65 73 73 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&process

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.4	50617	35.214.170.179	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	840	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	403	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=01d815ed-1975-4476-8f77-9508d05ee887; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Mon, 03-Jun-2024 23:27:01 GMT; SameSite=None location: https://simage2.pubmatic.com/AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 content-length: 0 date: Sun, 03 Mar 2024 23:27:01 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.4	50575	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	460	OUT	GET /rum?cm_dsp_id=4&external_user_id=4228731401736629831 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:27:01 UTC	981	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 85ed65137e4c8c3f-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:27:01 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:27:01 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KAs7VI7XwIPzKS2O0Qb9aVsrVi%2BfNGltJdiri4FdljXmrBTPpPN%2FxeB25v78aeEC0pIbv3dgkfmVgy7KN8519XJ2qkQPZ4ylZGlxyVQxyXPw7XVcuPH1loiKPrIPpxWAiBz59o8i0GizAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.4	50615	3.225.218.10	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1072	OUT	GET /ups/58692/cms?partner_id=NEUAR&_origin=false&_redirect=false&_hosted_id=214750604810009654359&gdpr=&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b:18z8~2h3b"
2024-03-03 23:27:01 UTC	659	IN	HTTP/1.1 204 No Content Date: Sun, 03 Mar 2024 23:27:01 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2h3b:19e0~2h3b:19e7~2h3b:19ea~2h3b:18z8~2h3b:19ac~2h3b";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Mon, 03-Mar-2025 23:27:01 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:01 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.4	50625	142.250.72.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	588	OUT	GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.aol.com%2F HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:27:01 UTC	693	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Date: Sun, 03 Mar 2024 23:27:01 GMT Expires: Sun, 03 Mar 2024 23:27:01 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 13732 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	559	IN	Data Raw: 5b 6e 75 6c 6c 2c 5b 5b 5b 22 31 30 33 35 31 32 36 39 38 22 5d 2c 5b 22 31 30 38 33 34 37 31 30 35 22 5d 2c 5b 22 31 32 31 31 32 34 35 39 34 22 5d 2c 5b 22 32 31 37 38 33 33 34 37 33 30 39 22 5d 2c 5b 22 32 32 30 36 30 30 36 39 35 31 34 22 5d 2c 5b 22 32 32 38 38 38 31 35 32 32 37 39 22 5d 2c 5b 22 32 34 37 34 36 37 37 39 22 5d 2c 5b 22 33 33 37 39 22 5d 2c 5b 22 36 31 37 36 33 38 30 36 22 5d 2c 5b 22 31 30 30 30 39 30 38 22 5d 2c 5b 22 31 30 30 30 39 32 32 22 5d 2c 5b 22 31 30 30 31 30 34 39 22 5d 2c 5b 22 31 30 30 31 32 31 39 22 5d 2c 5b 22 31 30 30 31 32 38 30 32 30 22 5d 2c 5b 22 31 30 30 31 35 33 35 22 5d 2c 5b 22 31 30 30 31 37 33 33 22 5d 2c 5b 22 31 30 30 32 33 30 34 22 5d 2c 5b 22 31 30 30 32 34 35 33 22 5d 2c 5b 22 31 30 30 32 36 30 31 22 5d 2c Data Ascii: [null,[[["103512698"],["108347105"],["121124594"],["21783347309"],["22060069514"],["22888152279"],["24746779"],["3379"],["61763806"],["1000908"],["1000922"],["1001049"],["1001219"],["100128020"],["1001535"],["1001733"],["1002304"],["1002453"],["1002601"],
2024-03-03 23:27:01 UTC	1252	IN	Data Raw: 30 31 30 38 39 33 22 5d 2c 5b 22 31 30 31 31 36 34 32 22 5d 2c 5b 22 31 30 31 31 37 39 32 22 5d 2c 5b 22 31 30 31 32 34 36 37 22 5d 2c 5b 22 31 30 31 33 30 31 35 22 5d 2c 5b 22 31 30 31 33 33 36 31 22 5d 2c 5b 22 31 30 31 33 33 36 36 39 22 5d 2c 5b 22 31 30 31 33 37 36 35 22 5d 2c 5b 22 31 30 31 33 39 36 32 22 5d 2c 5b 22 31 30 31 33 39 36 34 22 5d 2c 5b 22 31 30 31 34 37 36 31 22 5d 2c 5b 22 31 30 31 34 37 36 33 22 5d 2c 5b 22 31 30 31 35 31 30 31 22 5d 2c 5b 22 31 30 31 35 33 39 31 22 5d 2c 5b 22 31 30 31 35 36 38 31 22 5d 2c 5b 22 31 30 31 35 39 36 39 22 5d 2c 5b 22 31 30 31 35 39 37 30 22 5d 2c 5b 22 31 30 31 36 31 36 32 22 5d 2c 5b 22 31 30 31 36 37 36 30 22 5d 2c 5b 22 31 30 31 36 38 35 34 22 5d 2c 5b 22 31 30 31 37 30 34 33 22 5d 2c 5b 22 31 30 31 Data Ascii: 010893"],["1011642"],["1011792"],["1012467"],["1013015"],["1013361"],["10133669"],["1013765"],["1013962"],["1013964"],["1014761"],["1014763"],["1015101"],["1015391"],["1015681"],["1015969"],["1015970"],["1016162"],["1016760"],["1016854"],["1017043"],["101
2024-03-03 23:27:01 UTC	1252	IN	Data Raw: 37 30 39 33 22 5d 2c 5b 22 31 30 36 37 35 34 30 22 5d 2c 5b 22 31 30 36 38 30 35 30 35 22 5d 2c 5b 22 31 30 36 39 30 34 32 22 5d 2c 5b 22 31 30 36 39 34 39 32 22 5d 2c 5b 22 31 30 37 31 35 39 35 22 5d 2c 5b 22 31 30 37 31 37 37 37 22 5d 2c 5b 22 31 30 37 32 32 30 38 22 5d 2c 5b 22 31 30 37 32 36 38 33 30 22 5d 2c 5b 22 31 30 37 33 33 36 31 22 5d 2c 5b 22 31 30 37 36 31 38 38 32 30 22 5d 2c 5b 22 31 30 37 38 32 35 34 22 5d 2c 5b 22 31 30 38 31 37 33 32 32 32 22 5d 2c 5b 22 31 30 38 32 36 36 35 22 5d 2c 5b 22 31 30 38 32 37 32 37 37 22 5d 2c 5b 22 31 30 38 34 31 39 39 22 5d 2c 5b 22 31 30 38 36 31 34 34 37 22 5d 2c 5b 22 31 30 38 36 35 32 38 37 22 5d 2c 5b 22 31 30 38 36 38 36 38 22 5d 2c 5b 22 31 30 38 38 34 38 32 22 5d 2c 5b 22 31 30 38 38 37 34 35 22 5d Data Ascii: 7093"],["1067540"],["10680505"],["1069042"],["1069492"],["1071595"],["1071777"],["1072208"],["10726830"],["1073361"],["107618820"],["1078254"],["108173222"],["1082665"],["10827277"],["1084199"],["10861447"],["10865287"],["1086868"],["1088482"],["1088745"]
2024-03-03 23:27:01 UTC	1252	IN	Data Raw: 38 39 35 36 37 33 38 22 5d 2c 5b 22 31 34 39 37 37 36 31 33 22 5d 2c 5b 22 31 34 39 37 38 35 36 33 30 22 5d 2c 5b 22 31 35 30 34 38 37 36 33 22 5d 2c 5b 22 31 35 31 33 30 32 32 31 22 5d 2c 5b 22 31 35 31 34 36 33 36 35 22 5d 2c 5b 22 31 35 31 34 36 36 30 35 22 5d 2c 5b 22 31 35 32 35 33 36 37 22 5d 2c 5b 22 31 35 34 32 33 36 31 34 31 22 5d 2c 5b 22 31 35 34 37 35 33 30 33 22 5d 2c 5b 22 31 35 35 37 35 31 34 33 22 5d 2c 5b 22 31 35 37 39 36 36 37 37 30 22 5d 2c 5b 22 31 35 38 38 39 36 36 22 5d 2c 5b 22 31 35 39 33 31 32 35 32 22 5d 2c 5b 22 31 35 39 33 36 38 30 22 5d 2c 5b 22 31 36 30 37 32 35 36 34 33 22 5d 2c 5b 22 31 36 31 34 30 39 34 34 22 5d 2c 5b 22 31 36 32 35 30 31 38 38 22 5d 2c 5b 22 31 36 34 30 37 33 30 34 22 5d 2c 5b 22 31 36 35 31 39 33 32 38 Data Ascii: 8956738"],["14977613"],["149785630"],["15048763"],["15130221"],["15146365"],["15146605"],["1525367"],["154236141"],["15475303"],["15575143"],["157966770"],["1588966"],["15931252"],["1593680"],["160725643"],["16140944"],["16250188"],["16407304"],["16519328
2024-03-03 23:27:01 UTC	1252	IN	Data Raw: 32 31 39 22 5d 2c 5b 22 32 31 39 33 37 37 32 22 5d 2c 5b 22 32 32 31 38 31 30 34 22 5d 2c 5b 22 32 32 31 38 32 32 39 35 22 5d 2c 5b 22 32 32 32 30 35 34 30 22 5d 2c 5b 22 32 32 32 30 36 31 30 35 22 5d 2c 5b 22 32 32 32 31 35 30 38 22 5d 2c 5b 22 32 32 32 39 32 34 33 34 22 5d 2c 5b 22 32 32 34 38 38 34 34 37 33 31 36 22 5d 2c 5b 22 32 32 35 32 37 31 35 39 30 31 38 22 5d 2c 5b 22 32 32 35 34 38 39 33 37 37 30 34 22 5d 2c 5b 22 32 32 35 36 32 34 33 30 35 38 33 22 5d 2c 5b 22 32 32 36 33 39 31 33 37 22 5d 2c 5b 22 32 32 36 33 39 32 34 38 37 37 30 22 5d 2c 5b 22 32 32 36 34 37 36 34 32 30 34 34 22 5d 2c 5b 22 32 32 36 35 38 39 30 38 34 30 31 22 5d 2c 5b 22 32 32 36 37 32 33 30 33 36 30 33 22 5d 2c 5b 22 32 32 37 37 37 32 33 35 31 34 36 22 5d 2c 5b 22 32 32 38 Data Ascii: 219"],["2193772"],["2218104"],["22182295"],["2220540"],["22206105"],["2221508"],["22292434"],["22488447316"],["22527159018"],["22548937704"],["22562430583"],["22639137"],["22639248770"],["22647642044"],["22658908401"],["22672303603"],["22777235146"],["228
2024-03-03 23:27:01 UTC	1252	IN	Data Raw: 32 35 22 5d 2c 5b 22 33 36 31 34 34 32 37 30 22 5d 2c 5b 22 33 36 32 34 30 38 34 30 22 5d 2c 5b 22 33 36 32 37 33 30 33 30 22 5d 2c 5b 22 33 36 33 32 33 30 34 30 22 5d 2c 5b 22 33 36 33 39 36 34 34 34 22 5d 2c 5b 22 33 36 34 35 38 35 34 34 22 5d 2c 5b 22 33 36 37 36 38 30 37 37 22 5d 2c 5b 22 33 36 39 38 38 32 36 31 22 5d 2c 5b 22 33 37 30 35 39 32 32 22 5d 2c 5b 22 33 37 36 30 32 39 34 22 5d 2c 5b 22 33 37 38 35 39 36 37 22 5d 2c 5b 22 33 37 39 37 33 38 30 22 5d 2c 5b 22 33 38 31 38 39 33 38 37 22 5d 2c 5b 22 33 38 31 38 39 38 36 37 22 5d 2c 5b 22 33 38 35 37 33 33 36 22 5d 2c 5b 22 33 38 35 38 39 37 39 22 5d 2c 5b 22 33 38 36 30 35 38 35 22 5d 2c 5b 22 33 38 37 37 35 33 38 34 22 5d 2c 5b 22 33 38 38 31 37 33 31 37 22 5d 2c 5b 22 33 39 33 31 36 33 34 22 Data Ascii: 25"],["36144270"],["36240840"],["36273030"],["36323040"],["36396444"],["36458544"],["36768077"],["36988261"],["3705922"],["3760294"],["3785967"],["3797380"],["38189387"],["38189867"],["3857336"],["3858979"],["3860585"],["38775384"],["38817317"],["3931634"
2024-03-03 23:27:01 UTC	1252	IN	Data Raw: 31 5d 2c 5b 22 31 30 31 30 36 36 39 22 2c 31 5d 2c 5b 22 31 30 31 30 37 38 30 22 2c 31 5d 2c 5b 22 31 30 31 30 38 32 37 22 2c 31 5d 2c 5b 22 31 30 31 30 38 39 33 22 2c 31 5d 2c 5b 22 31 30 31 31 36 34 32 22 2c 31 5d 2c 5b 22 31 30 31 31 37 39 32 22 2c 31 5d 2c 5b 22 31 30 31 32 34 36 37 22 2c 31 5d 2c 5b 22 31 30 31 33 30 31 35 22 2c 31 5d 2c 5b 22 31 30 31 33 33 36 31 22 2c 31 5d 2c 5b 22 31 30 31 33 33 36 36 39 22 2c 31 5d 2c 5b 22 31 30 31 33 37 36 35 22 2c 31 5d 2c 5b 22 31 30 31 33 39 36 32 22 2c 31 5d 2c 5b 22 31 30 31 33 39 36 34 22 2c 31 5d 2c 5b 22 31 30 31 34 37 36 31 22 2c 31 5d 2c 5b 22 31 30 31 34 37 36 33 22 2c 31 5d 2c 5b 22 31 30 31 35 31 30 31 22 2c 31 5d 2c 5b 22 31 30 31 35 33 39 31 22 2c 31 5d 2c 5b 22 31 30 31 35 36 38 31 22 2c 31 5d Data Ascii: 1],["1010669",1],["1010780",1],["1010827",1],["1010893",1],["1011642",1],["1011792",1],["1012467",1],["1013015",1],["1013361",1],["10133669",1],["1013765",1],["1013962",1],["1013964",1],["1014761",1],["1014763",1],["1015101",1],["1015391",1],["1015681",1]
2024-03-03 23:27:01 UTC	1252	IN	Data Raw: 30 38 35 36 22 2c 31 5d 2c 5b 22 31 30 35 31 30 35 39 22 2c 31 5d 2c 5b 22 31 30 35 32 30 37 33 22 2c 31 5d 2c 5b 22 31 30 35 32 31 36 30 22 2c 31 5d 2c 5b 22 31 30 35 33 38 36 33 22 2c 31 5d 2c 5b 22 31 30 35 34 32 30 32 22 2c 31 5d 2c 5b 22 31 30 35 34 34 37 32 39 22 2c 31 5d 2c 5b 22 31 30 35 35 30 37 33 38 22 2c 31 5d 2c 5b 22 31 30 35 35 36 34 37 22 2c 31 5d 2c 5b 22 31 30 35 35 37 32 39 22 2c 31 5d 2c 5b 22 31 30 35 36 39 33 30 22 2c 31 5d 2c 5b 22 31 30 35 37 35 34 31 38 22 2c 31 5d 2c 5b 22 31 30 35 37 39 31 30 22 2c 31 5d 2c 5b 22 31 30 35 38 34 34 39 22 2c 31 5d 2c 5b 22 31 30 36 31 33 34 34 22 2c 31 5d 2c 5b 22 31 30 36 33 34 36 35 22 2c 31 5d 2c 5b 22 31 30 36 33 39 31 33 38 22 2c 31 5d 2c 5b 22 31 30 36 34 33 38 31 22 2c 31 5d 2c 5b 22 31 30 Data Ascii: 0856",1],["1051059",1],["1052073",1],["1052160",1],["1053863",1],["1054202",1],["10544729",1],["10550738",1],["1055647",1],["1055729",1],["1056930",1],["10575418",1],["1057910",1],["1058449",1],["1061344",1],["1063465",1],["10639138",1],["1064381",1],["10
2024-03-03 23:27:01 UTC	1252	IN	Data Raw: 37 31 37 33 22 2c 31 5d 2c 5b 22 31 32 36 31 35 30 34 22 2c 31 5d 2c 5b 22 31 32 37 31 30 34 35 39 22 2c 31 5d 2c 5b 22 31 32 37 34 30 31 34 35 22 2c 31 5d 2c 5b 22 31 32 38 32 37 33 36 35 22 2c 31 5d 2c 5b 22 31 32 38 36 38 30 30 31 36 22 2c 31 5d 2c 5b 22 31 32 39 30 38 32 32 38 22 2c 31 5d 2c 5b 22 31 32 39 31 30 30 36 35 37 22 2c 31 5d 2c 5b 22 31 32 39 34 31 35 38 22 2c 31 5d 2c 5b 22 31 33 30 36 39 36 37 36 37 22 2c 31 5d 2c 5b 22 31 33 30 38 30 30 34 37 22 2c 31 5d 2c 5b 22 31 33 31 32 36 39 36 34 38 22 2c 31 5d 2c 5b 22 31 33 33 34 32 34 39 22 2c 31 5d 2c 5b 22 31 33 33 34 35 39 35 30 32 22 2c 31 5d 2c 5b 22 31 33 33 39 36 31 34 37 22 2c 31 5d 2c 5b 22 31 33 34 31 37 35 36 34 22 2c 31 5d 2c 5b 22 31 33 34 36 34 34 32 35 32 22 2c 31 5d 2c 5b 22 31 Data Ascii: 7173",1],["1261504",1],["12710459",1],["12740145",1],["12827365",1],["128680016",1],["12908228",1],["129100657",1],["1294158",1],["130696767",1],["13080047",1],["131269648",1],["1334249",1],["133459502",1],["13396147",1],["13417564",1],["134644252",1],["1
2024-03-03 23:27:01 UTC	1252	IN	Data Raw: 34 32 22 2c 31 5d 2c 5b 22 31 39 30 38 35 30 35 34 36 22 2c 31 5d 2c 5b 22 31 39 31 34 31 39 35 31 22 2c 31 5d 2c 5b 22 31 39 32 37 31 32 32 32 22 2c 31 5d 2c 5b 22 31 39 32 39 30 36 32 37 22 2c 31 5d 2c 5b 22 31 39 33 37 36 35 35 22 2c 31 5d 2c 5b 22 31 39 33 37 37 38 31 32 22 2c 31 5d 2c 5b 22 31 39 34 34 38 36 37 32 22 2c 31 5d 2c 5b 22 31 39 35 36 36 30 37 37 34 22 2c 31 5d 2c 5b 22 31 39 36 34 31 35 35 36 22 2c 31 5d 2c 5b 22 32 30 30 31 30 37 39 22 2c 31 5d 2c 5b 22 32 30 33 30 36 35 33 30 22 2c 31 5d 2c 5b 22 32 30 34 32 32 30 35 32 22 2c 31 5d 2c 5b 22 32 30 35 30 38 30 33 22 2c 31 5d 2c 5b 22 32 30 35 39 34 34 39 32 22 2c 31 5d 2c 5b 22 32 30 36 38 39 34 33 34 22 2c 31 5d 2c 5b 22 32 30 37 31 38 39 31 31 22 2c 31 5d 2c 5b 22 32 30 37 33 38 31 36 Data Ascii: 42",1],["190850546",1],["19141951",1],["19271222",1],["19290627",1],["1937655",1],["19377812",1],["19448672",1],["195660774",1],["19641556",1],["2001079",1],["20306530",1],["20422052",1],["2050803",1],["20594492",1],["20689434",1],["20718911",1],["2073816

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.4	50627	52.201.82.109	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=3562a2a6-75ba-40ba-8019-c2dff6a6ce99 HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjM1NjJhMmE2LTc1YmEtNDBiYS04MDE5LWMyZGZmNmE2Y2U5OSIsImwiOjE3MDk1MDg0MjA0MTMsInQiOjF9
2024-03-03 23:27:01 UTC	353	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjM1NjJhMmE2LTc1YmEtNDBiYS04MDE5LWMyZGZmNmE2Y2U5OSIsImwiOjE3MDk1MDg0MjE3NDMsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Thu, 19 Sep 2024 23:27:01 GMT; Secure; SameSite=None
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.4	50565	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2595	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:00 GMT; path=/ Set-Cookie: PugT=1709508420; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.4	50629	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2273	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=0349ad77-5ea1-447f-9167-09b58573447a&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.4	50604	151.101.1.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	638	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:27:01 UTC	965	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:27:01 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4;Version=1;Path=/;Domain=.taboola.com;Expires=Mon, 03-Mar-2025 23:27:01 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 19688 Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:27:01 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr18179-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508422.800402,VS0,VE23 X-vcl-time-ms: 23 transfer-encoding: chunked
2024-03-03 23:27:01 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-03 23:27:01 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.4	50570	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2011	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1709508408278&event=video_impression&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=5_0&web_ad_info=%7B%22plugin%22%3A%22ima3%22%2C%22pluginVersion%22%3A%225.2.6%22%2C%22requestMode%22%3A%22onload%22%2C%22timeout%22%3A10000%7D&preload=metadata HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.4	50622	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2653	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=d953ac44-6100-4cfd-8e83-2e663fb0f73c&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 03 Mar 2024 23:27:00 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23340-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23498-d953ac44-6100-4cfd-8e83-2e663fb0f73c; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:00 GMT; path=/ Set-Cookie: PugT=1709508420; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:00 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.4	50592	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2269	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEAIvvYGKi3MwJbcEVt_pRgM&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.4	50562	69.194.240.13	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	724	OUT	GET /csync/RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hb.yahoo.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%7D
2024-03-03 23:27:02 UTC	387	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:27:02 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%7D; path=/; expires=Mon, 03 Mar 2025 23:27:02 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.4	50584	34.193.135.180	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:01 UTC	456	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3afe3f49-c86a-031c-5d5d-271b26174083; Path=/; Domain=kargo.com; Expires=Mon, 03 Mar 2025 23:27:01 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-03 23:27:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.4	50601	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1175	OUT	GET /cksync.php?cs=1&type=bs&ovsid=9c710547-ba4c-4952-9692-0a9d5f6959dd&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1
2024-03-03 23:27:02 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-bs=9c710547-ba4c-4952-9692-0a9d5f6959dd~~1;Expires=Sun, 02 Mar 2025 23:27:01 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.4	50630	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2280	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=4228731401736629831&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.4	50618	35.207.24.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1033	OUT	GET /imp_s2s/v3/OL1J8HlzOVtRfsvCqRLTq3U6sHUWOQCrtvBxbLqaitBXQ06-huFtCYJJfIfFeTJUu54fsGtHMDzTrqS5WF-6R8o833dNla0EBiviQKPKIfNpmD0P3xT9pJDKdQTyp-uGEBuORPyUV3wLD3xPfBwo6z22FBybvI1sxTp-6vtmpMow84Tfp3xPPz5_TLqjkBaY5YW8WVV1yal-useiPntPdHd5YbJjjZ8ygEs0cb5fOkUYPv3ZMY9tDNU3XIoETLUa89lZmSNRZlVYZZ-E8mofB4cKaKZKPSOrSb2xk6Rens5vULra87zdzI4ocBIALpmEntbi8lXX8IEPvo7f4is5sTDnWQWSS3DRfkJ0_9r6sE5TyCjN5kRMPZjBCyKwY_N-uEC3crZpUz1THUrtREouXQ8RaYEEwEGSKI16EL8jps8QvP_Gfpn2YITnA5sXEVH7fvsc2TYh1uTWNPhMoHP_r4I4ug/ZeUHMAAAV_IITwNPAAHsARD4OapjbwedrlduUA?q=1&cbvp=2 HTTP/1.1 Host: rtb-use.mfadsrvr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=3b652fc1-53a0-40de-ba73-a4ae557bd47f; c=1709508407; tuuid_lu=1709508409; ssh=!bidswitch,1709508411!medianet,1709508409!intentiq,1709508407
2024-03-03 23:27:01 UTC	260	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Content-Type: text/html; charset=UTF-8 Date: Sun, 03 Mar 2024 23:27:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.4	50620	104.18.25.173	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	921	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=arnoeUNZaiMMAmemDnPW2xEGpQbPaPZcKq1VZcDm9ZaM
2024-03-03 23:27:02 UTC	825	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aEnt6ZaRZdySbAIUMnXUx7IlwmDDZcO7toSsu6YDgtprOkrZbZbMyZb6RtJKW2ZbE0xspJYZbLjZbUwL7USCcMgMdcZbxVZaikFZaoGR; path=/; domain=.tribalfusion.com; expires=Sat, 01-Jun-2024 23:27:01 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aEnt6ZaRZdySbAIUMnXUx7IlwmDDZcO7toSsu6YDgtprOkrZbZbMyZb6RtJKW2ZbE0xspJYZbLjZbUwL7USCcMgMdcZbxVZaikFZaoGR; path=/; domain=.tribalfusion.com; expires=Sat, 01-Jun-2024 23:27:01 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 85ed6514cd291821-EWR alt-svc: h3=":443"; ma=86400
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.4	50644	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1268	OUT	GET /cksync.php?cs=1&type=55953&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:02 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1;Expires=Sun, 17 Mar 2024 23:27:02 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.4	50596	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	763	OUT	GET /pixel?google_nid=rubicon&google_hm=ZjMzODUzYjBjYzE5ZGZjYjYwMzY4ZDY3Y2QxMzMxMzkxN2RlNzc1Mg&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:27:02 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 03 Mar 2024 23:27:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:02 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.4	50580	8.28.7.84	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2209	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-nLNhotxE2uVq21nL64vd2.9J7PPx9gY-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:01 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 10:14:52 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1709460892; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 10:14:52 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.4	50633	44.195.157.207	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	742	OUT	GET /pbmtc.gif?puid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	440	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=fb7d668c-c73b-4c9e-a7bc-18062a8b8210; expires=Mon, 03 Mar 2025 23:27:01 GMT; path=/; secure; samesite=none Set-Cookie: ss=cSc8TGFqlVmz96xo0QlSBfW2mYVIyXzAOSm2aUm35Usxdmaok1saMn0EYAX0JgXySuhZG6ItAUW1A1HwODZxtQ%3D%3D; expires=Mon, 03 Mar 2025 23:27:01 GMT; path=/; secure; samesite=none
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.4	50569	23.77.240.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	1000	OUT	GET /cksync?cs=1&type=ttd&ovsid=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1; data-pba=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~8; data-r1=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005~~8
2024-03-03 23:27:02 UTC	571	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1;Expires=Sun, 17 Mar 2024 23:27:02 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.4	50557	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2041	OUT	GET /p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=1&ns_st_sp=1&ns_st_sc=1&ns_st_psq=1&ns_st_asq=1&ns_st_sq=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=0&ns_st_cl=68971&ns_st_pb=1&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=0&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=0&ns_st_dap=0&ns_st_et=0&ns_st_det=0&ns_st_upc=0&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=0&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=0&ns_st_dlpc=0&ns_st_lpa=0&ns_st_dlpa=0&ns_st_pa=0&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508418339&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_lt=19738&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=0&ns_st_dpc=0&ns_st_pp=0&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=17F9765074314b78a30f4d41709508394
2024-03-03 23:27:02 UTC	494	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:27:02 GMT set-cookie: UID=17F9765074314b78a30f4d41709508394; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 6ca3dc9afd6f12cee41f6246e0c4aa8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: MmGqokRnI5Xwox9HzYjoIhER1BXUwLliXuweQy6nQ77alxmfoRUVVA==
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.4	50594	52.46.143.56	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	695	OUT	GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A5m4uM0keE5RtYimSg3trdQ
2024-03-03 23:27:02 UTC	895	IN	HTTP/1.1 302 Found Server: Server Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Length: 0 Connection: close x-amz-rid: V2PSCBN98PDVXG9X0BM8 Set-Cookie: ad-id=A5m4uM0keE5RtYimSg3trdQ; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=M4s0yq4OSOyhv5St1uqYHQ&rk=usync-na&gdpr=0 Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.4	50607	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	504	OUT	GET /crum?cm_dsp_id=45&external_user_id=CAESEOUXsq40wyL1RuRxz9UqLQE&google_cver=1&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:27:02 UTC	993	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 85ed65157f724258-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:27:02 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:27:02 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UVtUKU7fWhXTudkT8%2Bypa%2Fh2MUclrbw25fd4pN%2Blof4OtUQXHWYmZ2w7LcnkIYjNJqSvuW%2FV%2BCNgoUOdmkjNOHGWfFF7%2FBA%2Fm%2BGCMerL20lUD8Q0jWWUHoTGcQkf1AF1ij48vDfJqpjWTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.4	50581	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	2243	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:9E6108CD113245DE8ED3EE8C2AE8D8CE HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:02 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 09:36:12 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23486-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23489-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23539-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:36:12 GMT; path=/ Set-Cookie: PugT=1709458572; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 09:36:12 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.4	50599	15.197.193.217	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:01 UTC	781	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; TDCPM=CAESGQoKcmlnaHRtZWRpYRILCKSpudft-N08EAUSFwoIcHVibWF0aWMSCwjKgKTs7fjdPBAFGAEgASgCMgsInvemmYT53TwQBTgBWghwdWJtYXRpY2AC
2024-03-03 23:27:02 UTC	660	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Length: 289 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent=&expires=30 set-cookie: TDID=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; expires=Mon, 03 Mar 2025 23:27:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKcmlnaHRtZWRpYRILCKSpudft-N08EAUSFwoIcHVibWF0aWMSCwjKgKTs7fjdPBAFEhYKB3J1Ymljb24SCwj2wuPl7vjdPBAFGAEgAigCMgsInvemmYT53TwQBTgBWghwdWJtYXRpY2AC; expires=Mon, 03 Mar 2025 23:27:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-03-03 23:27:02 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 33 61 32 2d 61 35 65 63 2d 61 34 63 37 34 37 37 64 33 66 35 63 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 66 61 35 33 62 39 61 38 2d 39 34 31 64 2d 34 33 61 32 2d 61 35 65 63 2d 61 34 63 37 34 37 37 64 33 66 35 63 26 67 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent=&expires=30">https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.4	50608	18.173.219.51	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	654	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=1980923529&pcid=5e803909-7b6d-45a4-8be8-533d655de3d1&ckls=true&ci=IAEnIwC1hI&nc=false&trid=397624072 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=IAEnIwC1hI; IQPData=2584789195#1709508410116#0#1709508410116; ASDT=0; CSDT=UEQ6MTUzNThfMCZVNjBKNFdF; intentIQCDate=1709508410117
2024-03-03 23:27:02 UTC	675	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:27:02 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:27:02 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 5773f2f43b989a9f02f459e75620d5f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: w-7-TxX0sWlU_-D2D831RamKkrcyLTE2xvPD5qZmT4z5xmrfxRza2Q==
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.4	50564	104.36.113.111	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2374	OUT	GET /AdServer/SPug?partnerID=156078&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:02 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.4	50520	134.122.57.34	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	740	OUT	GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	517	IN	HTTP/1.1 302 302 Date: Sun, 03 Mar 2024 23:27:02 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=dcd68ec0-5d1b-41eb-bb8b-7054a5e1a612.478722422; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:dcd68ec0-5d1b-41eb-bb8b-7054a5e1a612&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.4	50519	38.68.201.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	720	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA9_111D28E16_7B3F98B1&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CA9_111D28E16_7B3F98B1.1.000000000000000065E50746; domain=mxptint.net; expires=Tue, 03-Mar-2026 23:27:02 GMT; path=/; secure; SameSite=None Date: Sun, 03 Mar 2024 23:27:01 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-392513222; includeSubDomains
2024-03-03 23:27:02 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 35 43 41 39 5f 31 31 31 44 32 38 45 31 36 5f 37 42 33 46 39 38 42 31 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA9_111D28E16_7B3F98B1&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.4	50572	142.250.72.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1455	OUT	GET /pagead/adview?ai=Ca7amMAflZfKvAc-GvPIPgdiH2ASO1rX8YLrSurXDCcCNtwEQASAAYMkGggEXY2EtcHViLTIzMDUzMDQ5OTkxODg2NTPIAQngAgCoAwHIAwKqBK4CT9DvSMJSpyCyAhWqjPawHm60WGrlSSuI1jiKunzcK7g_taPHaSal6xuEv6HI0XIij_AjKSt5PKGMsBuWAoDeHIvqjVRELKO2nwcEgiSFy3xxy-0m0TKbQrUzkwSUzKPJXHE6DUdAqEivkKXA5Y82F8DXxOXksw1NrV9fumwmym67yeKDsHngoFi7mDK4dst112_4cBiTQ2mhB5k23KyrwM9oqgtIwn8T8dX5kQlV_WEN1-6HiqreIz3JsSsRddikwXVkPZ0BuB_805WabouBMa6FVmNBasDASOeMka1WUzK3ty62HLhihsLR3g5D2cu4YEaBFJWrC3ObvjzJoCjYfqkN_EtYoYgprA9-VB9Od7nXGztrri51averw1ln0Vt4US05p5xJlp5tsoQ-lqPgBAGABvGLmIbm6JGasQGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOliG9q-Hn9mEA4AKA_oLAggBgAwB4g0TCJ2_sIef2YQDFU8DTwgdAewBS9AVAYAXAbIXHQobEhRwdWItMjMwNTMwNDk5OTE4ODY1Mxiaq5AB&sigh=9gj_CU_djz8&uach_m=%5BUACH%5D&cid=CAQSTgB7FLtqIC6c2xhbYUxTjdtwxcFKEatG9Hg15woZxaaD3JCYBtfB8D_hOqlV_3tCsG-VSmL43Y6Qs7gyx9eDdqkYZ5RNip_72GV8-O5D2BgB&cbvp=2&vis=1 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:27:02 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Sun, 03 Mar 2024 23:27:02 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.4	50631	151.101.130.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	584	OUT	GET /thumbnail/v1/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/thumbnail.webvtt?fastly_token=NjVlNTE1NDlfOTZjODI2YjczN2E3ZjNiYjU3ZGRmNzQwYjA2ZjdmM2VkZDNmOTJlNDdjZDU5ZjkyYjg5MjQzZjQwNDBmOTYzYw%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	648	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5090 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: text/vtt; charset=UTF-8 X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:27:02 GMT Via: 1.1 varnish Age: 5091 X-Served-By: cache-lga21973-LGA X-Cache: HIT X-Cache-Hits: 82 X-Timer: S1709508422.186661,VS0,VE0 X-Device-Group: desktop-chrome
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 57 45 42 56 54 54 0a 0a 30 30 3a 30 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 30 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 30 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 30 39 35 32 35 39 31 31 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 Data Ascii: WEBVTT00:00.000 --> 00:05.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/0s/match/image.jpeg?akamai_token=exp=1709525911~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ff
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 66 62 64 64 37 39 36 38 35 66 66 34 38 62 33 39 64 33 30 30 33 32 62 61 63 31 35 30 36 31 33 39 65 62 64 65 32 61 31 66 66 33 38 31 61 66 38 36 63 36 33 35 33 33 34 37 65 37 62 66 33 62 65 30 0a 0a 30 30 3a 32 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 32 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 32 30 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b Data Ascii: h/image.jpeg*~hmac=fbdd79685ff48b39d30032bac1506139ebde2a1ff381af86c6353347e7bf3be000:20.000 --> 00:25.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/20s/match/image.jpeg?akamai_tok
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 33 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 66 64 35 37 31 35 30 33 35 37 38 37 31 66 34 33 35 65 39 38 65 65 62 63 32 32 63 39 62 63 61 33 31 31 30 64 36 63 36 34 36 39 36 61 38 65 62 61 30 62 63 36 35 36 32 62 36 65 30 35 31 34 33 63 0a 0a 30 30 3a 34 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 34 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f Data Ascii: e/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/35s/match/image.jpeg*~hmac=fd57150357871f435e98eebc22c9bca3110d6c64696a8eba0bc6562b6e05143c00:40.000 --> 00:45.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/
2024-03-03 23:27:02 UTC	977	IN	Data Raw: 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 35 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 30 39 35 32 35 39 31 31 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 35 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 39 64 32 36 64 37 35 66 38 33 39 33 35 33 30 38 39 34 39 64 30 39 35 36 64 31 63 38 37 36 62 61 39 31 62 61 61 30 36 35 64 61 37 34 37 37 61 30 64 37 38 34 34 64 30 33 62 33 35 36 61 32 31 37 0a 0a 30 31 3a 30 30 2e 30 30 Data Ascii: fceb479f5/main/480x270/55s/match/image.jpeg?akamai_token=exp=1709525911~acl=/image/v1/jit/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/main/480x270/55s/match/image.jpeg*~hmac=9d26d75f83935308949d0956d1c876ba91baa065da7477a0d7844d03b356a21701:00.00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.4	50563	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1260	OUT	GET /cksync.php?type=rbcn&ovsid=LTC55UNV-1B-13RH&gdpr=0&gdpr_consent=undefined HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1; data-pba=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~8; data-r1=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005~~8
2024-03-03 23:27:02 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-r=LTC55UNV-1B-13RH~~1;Expires=Fri, 30 Aug 2024 23:27:02 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.4	50606	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	572	OUT	GET /crum?cm_dsp_id=133&external_user_id=VrYooxROk2iWhZayXuk_OT1S2cFU4tRdIMkcva8DRMA&pi=index&gpdr=&gdpr_consent=&us_privacy=&user_id=ZeUHNEt3uSYAABBfAETINAAA%26015&tc=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:27:02 UTC	987	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 85ed6516a9f70f78-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:27:02 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:27:02 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n2AOW8M52FWvPlnP0jBRwlkgJrOri4tN8p9pji%2BxzkoyYj2LoQF0xtrqyuerQJyFue%2B5MXGb9jjQl2%2FK5RYnb6IJ696QDM1TgKAGpFqSeWH01k9WV%2BeW7tGHLkPWcFqtH%2B3YkgFa3pL67g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.4	50656	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1011	OUT	GET /cksync.php?type=mf&ovsid=3b652fc1-53a0-40de-ba73-a4ae557bd47f&cs=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-c-ts=1709508406; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1; data-pba=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~8; data-r1=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005~~8
2024-03-03 23:27:02 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1;Expires=Mon, 03 Mar 2025 23:27:02 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.4	50635	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1312	OUT	GET /cksync.html?cs=1&vsid=3525099948919525000V10&type=tlt&refUrl=&vid=95083994863525099948919525000V10&ovsid=205552980141694412277&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:02 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 227 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-tlt=205552980141694412277~~1;Expires=Wed, 17 Apr 2024 23:27:02 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-03-03 23:27:02 UTC	77	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.4	50634	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2609	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:052965e5-0745-4000-9327-cb3c56f7de4d&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:02 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.4	50628	52.201.82.109	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=18eb0dcf-ed6a-4763-bd9a-3f2b8b726233 HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjE4ZWIwZGNmLWVkNmEtNDc2My1iZDlhLTNmMmI4YjcyNjIzMyIsImwiOjE3MDk1MDg0MjEyNzYsInQiOjF9
2024-03-03 23:27:02 UTC	353	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjE4ZWIwZGNmLWVkNmEtNDc2My1iZDlhLTNmMmI4YjcyNjIzMyIsImwiOjE3MDk1MDg0MjIxOTIsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Thu, 19 Sep 2024 23:27:02 GMT; Secure; SameSite=None
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.4	50589	52.205.86.205	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	659	OUT	GET /map/c=14701/tp=MTAI/tpid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	458	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.5.201 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F/gdpr=0/gdpr_consent= Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.4	50546	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3082	OUT	POST /p?_V=test&V_sec=pb&evt=ad_event&t=0.7814323648702814&_sqno=11&ts=20232&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=10051&adUrl=&view=100%25&mtype=na&ad_sys=&ad_lng=&pos=&taken=&r_code=&tag=https%3A%2F%2Ftb.video.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D3caca4ca-191c-3933-bab5-595ca1d1495a%26firstVideo%3Dtrue%26height%3D276%26width%3D368%26sid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26site%3Daolhomepage%26region%3DUS%26lang%3Den-US%26space_id%3D1197803361%26experience%3Daolhomepage%26expn%3Daolhomepage%26expb%3Daol-aa-2%26b_id%3Dbtnlfjdiua1pb%26licensor_id%3Da0a6T00000R2KYJQA3%26us_privacy%3D1YNN%26isDockable%3Dfalse%26m.type%3DVOD%26device%3Ddesktop%26v%3D1%26f%3Djson%26s2s%3Dtrue%26gdpr%3Dfalse%26content_len%3D68%26content_title%3DWinter%2Bstorm%2Bwreaks%2Bhavoc%2Bacross%2BSierra%2BNevadas%26content_id%3Dhttps%253A%252F%252Fwww.cnn.com%252Fvideos%252Fweather%252F2024%252F03%252F03%252Fexp-california-winter-storm-rdr-030302aseg2-cnni-u-s-.cnn%26gpp%3DDBAA%26gpp_sid%3D-1%26pver%3D1.3.9%26aver%3D%5BEVP_ADSDKVER%5D%26country%3DUS%26state%3DNorth%2BCarolina%26ad.plseq%3D1%26ad.pct%3Daolfrontpage%26ad.pl%3Dup%26ad.pt%3Dhome%26ad.pubfamily%3Daol%26pos%3Dpreroll%26evp%3Dbcp%26fmt%3Dvmap%26ps%3Dbdud5hbm%26r%3Dhttps%253A%252F%252Fwww.aol.com%252F%26givn%3D%5BGOOGLE_INSTREAM_VIDEO_NONCE%5D%26pbckt%3DTreatment_Oath_Player%26npa%3D0%26ltd%3D0%26ppid%3D&client=&crid=&adlbl=&ad_evt=ima3-ads-manager-loaded&adblocker=false HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:02 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:27:01 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.4	50543	54.144.200.164	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	965	OUT	GET /sync/pubmatic/5286816B-07A3-4831-82CF-92827DD7440E?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:02 UTC	550	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.4	50593	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2243	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:CA2F41ACCA684739A1CE374B350A0FEF HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:02 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:00 GMT; path=/ Set-Cookie: PugT=1709508420; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.4	50648	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2603	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1709508418330&event=video_view&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&seq=7_0&start_time_ms=20 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsibWV0cmljcy5icmlnaHRjb3ZlLmNvbSJdLCJhY2NpZCI6IjY0MTU2NjU4MTUwMDEiLCJwa2lkIjoiOTIxODQzMjAtOGZmMy00NWU5LWI2MDAtOTkwZjgyMmM4NjY3IiwiZXhwIjoxNzA5NTE1NTk5LCJpYXQiOjE3MDk1MDgzOTl9.rY0f4g3ezgCCIUQ_K-3-_oOWn482mdxwmFVBBqbNPtpgJwc6sRQDmVRMxSiDF7rwxoQb_8fK7_mA3qn3Jo4ZYxLlt0hWs-Sam0lAj8bDpokTZBUIYDoa5rVyPTXZ0kAU0QRPlDPpgBr1huxkFJdzBXIEJAzBT3PqF6BvnYqfJxZHW1uV6gypv0YXvpX_xLjDeEuM2b6ITu5BiAO6qrJV5k6fpeow2hhIsoHvOKTaOw3Pr9HByfNPpXHbWlN70Rr9M1hMbWVV04N_VXv5ylPB0Ucwbp2O87IRSrZmsOfgBszGEMBZTLmfCQVBQ7nuGGu_IdQTKVtFeOCQ1WikO7PfHg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.4	50480	172.104.70.67	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	688	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	627	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=3lMj0GdRDKGXY9RtRgflZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=3lMj0GdRDKGXY9RtRgflZQ; Path=/; Domain=c.appier.net; Expires=Mon, 03 Mar 2025 23:27:02 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
2024-03-03 23:27:02 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 33 6c 4d 6a 30 47 64 52 44 4b 47 58 59 39 52 74 52 67 66 6c 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=3lMj0GdRDKGXY9RtRgflZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.4	50655	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	738	OUT	GET /pixel?google_nid=rp&google_cm&google_hm=TFRDNTVVTlYtMUItMTNSSA==&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:27:02 UTC	686	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAESEE437oGZ5Y14VR5N5MO2QvI&google_cver=1 Date: Sun, 03 Mar 2024 23:27:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 325 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:02 UTC	325	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 64 66 70 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAES

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.4	50645	52.46.143.56	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	705	OUT	GET /ecm3?id=LTC55UNV-1B-13RH&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A5m4uM0keE5RtYimSg3trdQ
2024-03-03 23:27:02 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: QYEEDX4AJGF8J2V0SYRC Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.4	50659	50.57.31.206	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	477	OUT	GET /oath/1/info2?sType=sync&_sdv&sExtCookieId=y-RKPC2uxE2oP_.YzvaoufWXPgbw9SyuMi_tM-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=727932AC18BCE3A
2024-03-03 23:27:02 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 0 Set-Cookie: SEUNCY=727932AC18BCE3A; Expires=Mon, 03 Mar 2025 23:27:02 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.4	50643	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2765	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:CA2F41ACCA684739A1CE374B350A0FEF&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; PugT=1709508421; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468
2024-03-03 23:27:02 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.4	50568	54.144.200.164	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	965	OUT	GET /sync/pubmatic/7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:02 UTC	550	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.4	50632	151.101.130.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1124	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/6s/master.m3u8?fastly_token=NjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	665	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Bolt-Device-Group: desktop-chrome X-Powered-By: BC X-Powered-From: gantry Date: Sun, 03 Mar 2024 23:27:02 GMT Via: 1.1 varnish Age: 22 X-Served-By: cache-ewr18133-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1709508422.453709,VS0,VE12 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 61 64 35 0d 0a Data Ascii: ad5
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 2d 30 22 2c 4e 41 4d 45 3d 22 65 6e 20 28 4d 61 69 6e 29 22 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 22 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 37 31 33 39 62 34 36 30 2d 65 66 32 63 Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/7139b460-ef2c
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 2d 53 54 52 45 41 4d 2d 49 4e 46 3a 50 52 4f 47 52 41 4d 2d 49 44 3d 30 2c 42 41 4e 44 57 49 44 54 48 3d 39 39 39 39 30 30 2c 43 4f 44 45 43 53 3d 22 6d 70 34 61 2e 34 30 2e 32 2c 61 76 63 31 2e 34 64 30 30 31 66 22 2c 52 45 53 4f 4c 55 54 49 4f 4e 3d 39 36 30 78 35 34 30 2c 41 55 44 49 4f 3d 22 61 75 64 69 6f 2d 30 22 2c 43 4c 4f 53 45 44 2d 43 41 50 54 49 4f 4e 53 3d 4e 4f 4e 45 2c 53 55 42 54 49 54 4c 45 53 3d 22 73 75 62 74 69 74 6c 65 73 2d 30 22 0a 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 Data Ascii: -STREAM-INF:PROGRAM-ID=0,BANDWIDTH=999900,CODECS="mp4a.40.2,avc1.4d001f",RESOLUTION=960x540,AUDIO="audio-0",CLOSED-CAPTIONS=NONE,SUBTITLES="subtitles-0"https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ff
2024-03-03 23:27:02 UTC	31	IN	Data Raw: 4e 6a 42 68 59 32 49 7a 5a 54 64 6d 59 77 25 33 44 25 33 44 26 62 63 6f 76 5f 61 75 74 68 3d Data Ascii: NjBhY2IzZTdmYw%3D%3D&bcov_auth=
2024-03-03 23:27:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:27:02 UTC	6	IN	Data Raw: 31 33 31 39 0d 0a Data Ascii: 1319
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 32 4f 54 6b 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 4d 35 4f 58 30 2e 57 6f 4c 69 59 6a 6c 56 69 6f 41 65 61 6d 33 6a 7a 58 74 32 51 6c 42 68 6e 52 38 51 6b 5a 6f 2d 65 30 39 78 4f 6f 47 46 58 76 Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 58 32 41 2d 42 39 42 71 49 61 79 31 30 58 42 45 38 63 69 44 37 63 32 38 63 5f 64 74 44 71 38 48 59 45 4f 68 57 62 45 48 37 71 43 71 4d 41 4e 47 61 7a 4a 77 36 36 68 34 78 4c 32 42 6b 36 4a 46 78 77 72 55 6e 32 5f 62 61 32 6c 39 62 69 4d 66 6d 55 4d 35 74 66 55 47 34 7a 55 4e 36 41 4a 51 69 41 67 59 54 6c 73 42 50 38 6d 69 52 44 42 51 65 63 6a 79 6e 36 45 4c 6d 74 42 72 4a 7a 54 71 4c 75 33 5a 30 62 45 75 5f 78 44 78 51 22 0a 23 45 58 54 2d 58 2d 53 54 52 45 41 4d 2d 49 4e 46 3a 50 52 4f 47 52 41 4d 2d 49 44 3d 30 2c 42 41 4e 44 57 49 44 54 48 3d 34 35 33 32 30 30 2c 43 4f 44 45 43 53 3d 22 6d 70 34 61 2e 34 30 2e 32 2c 61 76 63 31 2e 34 32 30 30 31 35 22 2c 52 45 53 4f 4c 55 54 49 4f 4e 3d 34 38 30 78 32 37 30 2c 41 55 44 49 4f 3d 22 61 75 64 69 6f 2d 31 Data Ascii: X2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ"#EXT-X-STREAM-INF:PROGRAM-ID=0,BANDWIDTH=453200,CODECS="mp4a.40.2,avc1.420015",RESOLUTION=480x270,AUDIO="audio-1
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 66 35 2f 32 65 38 37 66 65 36 61 2d 64 32 34 30 2d 34 38 66 33 2d 38 33 36 34 2d 33 33 38 36 30 36 30 33 39 37 65 65 2f 69 66 72 61 6d 65 2e 6d 33 75 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 56 6c 4e 54 56 6d 4e 6a 52 66 4e 44 59 78 5a 47 51 34 4f 47 51 79 5a 6d 49 7a 59 7a 68 6a 5a 57 4e 6d 59 54 41 77 4d 6a 41 35 5a 47 46 69 4d 57 49 33 4d 6a 41 30 4e 7a 45 31 5a 54 45 30 4f 54 52 68 59 54 59 30 4d 57 4d 30 4d 54 4e 6b 4d 57 59 35 4f 54 63 30 5a 44 68 68 59 7a 4e 6b 4e 77 25 33 44 25 33 44 26 62 63 6f 76 5f 61 75 74 68 3d 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d Data Ascii: f5/2e87fe6a-d240-48f3-8364-3386060397ee/iframe.m3u8?fastly_token=NjVlNTVmNjRfNDYxZGQ4OGQyZmIzYzhjZWNmYTAwMjA5ZGFiMWI3MjA0NzE1ZTE0OTRhYTY0MWM0MTNkMWY5OTc0ZDhhYzNkNw%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sIm
2024-03-03 23:27:02 UTC	776	IN	Data Raw: 6c 42 68 6e 52 38 51 6b 5a 6f 2d 65 30 39 78 4f 6f 47 46 58 76 38 4b 71 79 2d 75 7a 5a 75 75 42 34 41 4d 46 34 65 4c 74 64 57 75 49 6d 43 66 77 6a 66 54 77 55 76 6c 5f 50 4d 36 33 41 41 48 32 77 64 66 79 78 68 78 49 56 45 4c 63 65 5a 45 57 65 59 48 4a 48 41 42 46 46 6d 49 39 67 7a 6a 49 7a 6d 54 6e 5a 4f 66 66 50 53 77 50 74 34 43 2d 6c 2d 58 37 41 73 6c 6c 48 48 52 5f 6e 49 53 2d 73 4d 36 51 68 43 74 72 5f 34 33 71 75 54 46 34 66 34 65 6c 2d 49 72 41 64 4e 46 49 50 2d 64 6a 4e 39 36 66 77 75 70 72 46 52 72 4b 78 59 4e 30 57 36 64 67 58 32 41 2d 42 39 42 71 49 61 79 31 30 58 42 45 38 63 69 44 37 63 32 38 63 5f 64 74 44 71 38 48 59 45 4f 68 57 62 45 48 37 71 43 71 4d 41 4e 47 61 7a 4a 77 36 36 68 34 78 4c 32 42 6b 36 4a 46 78 77 72 55 6e 32 5f 62 61 32 6c Data Ascii: lBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.4	50611	67.220.228.201	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	702	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A5m4uM0keE5RtYimSg3trdQ
2024-03-03 23:27:02 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: GMN12N2W9GPYQRTMG6SQ Set-Cookie: ad-id=A5m4uM0keE5RtYimSg3trdQ; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.4	50660	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2265	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:02 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:00 GMT; path=/ Set-Cookie: PugT=1709508420; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.4	50640	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1099	OUT	GET /cksync.php?cs=8&vsid=3525100008919577000V10&type=r1&refUrl=&vid=95084017463525100008919577000V10&axid_e=&ovsid=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1; data-pba=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~8; data-r1=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005~~8; data-c-ts=1709508420
2024-03-03 23:27:02 UTC	652	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-r1=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005~~8;Expires=Sun, 02 Mar 2025 23:27:02 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.4	50585	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	575	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F134e3c2d76e50e2077e2333085803fe5&client=76f99bdb8f78cd44cc0b&signature=1a4991d023817a51a24a317737b8d7a9a50e740c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2450 Cache-Control: public, max-age=2592000 Cache-Tag: 406233613315016297629607497550212425430,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21933-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 9e2663f22feb297c291f993e83fe9ee9 cld_latency: 1 Content-Type: image/jpeg Date: Sun, 03 Mar 2024 23:27:02 GMT Edge-Cache-Tag: 406233613315016297629607497550212425430,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "e261e96aaa43432a9b52ba249fc0b0a6" Last-Modified: Sun, 03 Mar 2024 22:38:51 GMT Server: ECAcc (nya/7904) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=17762,owidth=3300,oheight=2067,obytes=444878,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 9e2663f22feb297c291f993e83fe9ee9 X-Served-By: cache-lga21933-LGA X-Timer: S1709505973.737343,VS0,VE1 Content-Length: 17762 Connection: close
2024-03-03 23:27:02 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 01 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 ff c2 00 11 08 01 2c 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 00 08 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 d5 7d df 7b 3e 57 a0 ce cd d1 b4 8f 7b bc 3d Data Ascii: JFIF%%!(!!(!;/))/;E:7:ESJJSici%%!(!!(!;/))/;E:7:ESJJSici,"3}{>W{=
2024-03-03 23:27:02 UTC	1379	IN	Data Raw: 8c eb 4d c9 15 34 5c f7 40 bd 8d fb 32 d6 5b 5b 09 34 57 ce 6c 34 37 10 61 0a c5 89 c8 5d b2 95 ff 00 d6 d2 67 52 98 33 36 36 b2 98 d6 ab 55 99 14 b5 f0 29 39 27 db 61 ee 90 de 82 b0 c9 db f5 6c b5 c8 99 91 2c cb 33 23 43 2d 9c fa 42 59 af ac b9 22 66 76 5e f3 d4 bb 7d 62 7a 56 64 27 af 66 58 66 e8 41 c5 be 13 ed 2c 61 11 c3 5f 20 c6 e0 cb 30 19 be e9 70 5c 91 b7 ea 2c dc 3c 79 d1 73 4d fd 9e 79 b8 99 96 ad ce d2 bd 4a 02 91 63 4d 8f 9a 9d 42 2c d6 e4 6d 78 55 13 3c f5 cc ee 95 2b 52 ee fb 9e cf 8c 59 80 a9 99 bf b0 ca f0 7f 15 73 a8 35 0c 33 04 4f e3 25 53 d9 7b 5f fd da 59 06 fd c2 66 ac 22 9a 05 11 e8 d1 fd 77 17 bb c0 14 0b 0b 6e 97 12 e4 08 6f 32 13 cc 21 b9 df 3e 96 c3 96 44 88 4b cc 44 cb 5a 7e 8f f9 db be 5c c1 ef 3d 7b 05 b6 0d 80 59 a0 36 58 4d Data Ascii: M4\@2[[4Wl47a]gR366U)9'al,3#C-BY"fv^}bzVd'fXfA,a_ 0p\,<ysMyJcMB,mxU<+RYs53O%S{_Yf"wno2!>DKDZ~\={Y6XM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.4	50610	151.101.130.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1164	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/6s/rendition.m3u8?fastly_token=NjVlNTVmNmVfMjExYmUzODAyYzk1ODc2YzlmN2U2MTNlMzE3OWZlODEyZGQzZDQzNDhhNWRlNDJmMzllMDE4MTI1ZTU1NTEyOA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	627	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Date: Sun, 03 Mar 2024 23:27:02 GMT Via: 1.1 varnish Age: 14 X-Served-By: cache-ewr18136-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1709508422.459404,VS0,VE1 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-03-03 23:27:02 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 56 6c 4e 54 56 6d 4e 6d 4e 66 59 7a 41 7a 59 54 42 6d 4f 54 51 32 59 7a 45 33 59 6a 63 79 4e 6d 4d 30 5a 47 4e 6a 4e 6d 49 32 4d 7a Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNmNfYzAzYTBmOTQ2YzE3YjcyNmM0ZGNjNmI2Mz
2024-03-03 23:27:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-03-03 23:27:02 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 32 4f 54 6b 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 4d 35 4f 58 30 2e 57 6f 4c 69 59 6a 6c 56 69 6f 41 65 61 6d 33 6a 7a 58 74 32 51 6c 42 68 6e 52 38 51 6b 5a 6f 2d 65 30 39 78 4f 6f 47 46 58 76 Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv
2024-03-03 23:27:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:27:02 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 37 38 65 35 33 66 63 31 36 61 61 37 31 66 65 64 30 62 30 61 30 39 62 34 37 33 30 61 30 38 64 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 32 65 38 37 66 65 36 61 2d 64 32 34 30 2d 34 Data Ascii: ",IV=0x78e53fc16aa71fed0b0a09b4730a08d3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-4
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 66 35 2f 32 65 38 37 66 65 36 61 2d 64 32 34 30 2d 34 38 66 33 2d 38 33 36 34 2d 33 33 38 36 30 36 30 33 39 37 65 65 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 2f 2a 7e 68 6d 61 63 3d 65 30 64 66 30 61 38 36 31 37 65 35 64 62 31 65 61 37 65 61 37 31 30 35 34 33 62 33 31 63 30 36 64 36 65 66 63 34 34 39 33 33 39 62 31 61 63 39 31 31 36 36 63 64 61 38 31 34 33 37 39 62 62 38 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 Data Ascii: f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e0df0a8617e5db1ea7ea710543b31c06d6efc449339b1ac91166cda814379bb8#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 32 65 38 37 66 65 36 61 2d 64 32 34 30 2d 34 38 66 33 2d 38 33 36 34 2d 33 33 38 36 30 36 30 33 39 37 65 65 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 2f 2a 7e 68 6d 61 63 3d 65 30 64 66 30 61 38 36 31 37 65 35 64 62 31 65 61 37 65 61 37 31 30 35 34 33 62 33 31 63 30 36 64 36 65 66 63 34 34 39 33 33 39 62 31 61 63 39 31 31 36 36 63 64 61 38 31 34 33 37 39 62 62 38 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/61602a39-778d-4e05-9e8c-a4ffceb479f5/2e87fe6a-d240-48f3-8364-3386060397ee/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e0df0a8617e5db1ea7ea710543b31c06d6efc449339b1ac91166cda814379bb8#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.4	50641	185.184.8.90	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	678	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=OU3AHrVubK0CqVNVWknR_1709508409330; ts=1709508409
2024-03-03 23:27:02 UTC	482	IN	HTTP/1.1 302 Found date: Sun, 03 Mar 2024 23:27:02 GMT vary: Accept-Encoding location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&pi=pubmatic&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Sun, 03 Mar 2024 23:27:02 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.4	50647	104.36.113.111	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2374	OUT	GET /AdServer/SPug?partnerID=159463&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:02 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.4	50653	35.244.154.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	759	OUT	GET /1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDcyMTNEQkI0LThDNEUtNDVGOC1CQUM4LTIxNDlEMzJBOEIxRhAAGg0IxY6UrwYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=DZfJCBo2tAX1CGJz9gkplJ3tcIsGCswUSSTuW70AX0Y=; pxrc=CAA=
2024-03-03 23:27:02 UTC	751	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=711488323487dba57331a6edf13dd25d753b20480d0da41b7d9e31581f6a61be791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=kcEwzDeffkn1CGJz9gkplJ3tcIsGCswUSSTuW70AX0Y=; Path=/; Domain=rlcdn.com; Expires=Mon, 03 Mar 2025 23:27:02 GMT; Secure; SameSite=None Set-Cookie: pxrc=CMaOlK8GEgUI6AcQABIFCOhHEAA=; Path=/; Domain=rlcdn.com; Expires=Thu, 02 May 2024 23:27:02 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.4	50538	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1326	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=opx&refUrl=&vid=95083994863525099948919525000V10&axid_e=&ovsid=42982cb5-8018-083c-39e4-9b7751c788d8 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:02 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1;Expires=Fri, 30 Aug 2024 23:27:02 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.4	50616	52.46.130.91	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	536	OUT	GET /dcm?pid=78af914c-e755-4b90-bded-1b172aedc763&us_privacy=&gdpr=&gdpr_consent=&id=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB&gpp=DBAA&gpp_sid=-1&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A5m4uM0keE5RtYimSg3trdQ
2024-03-03 23:27:02 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: YFY3WC7KC12Q0B1HXEFS Set-Cookie: ad-id=A5m4uM0keE5RtYimSg3trdQ; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.4	50658	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	931	OUT	GET /cookie-sync?gdpr=0&userid=7346742891256766101&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=4&ev=AALo807Lyg4AABQ6mW8RGQ&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:27:02 UTC	454	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:27:02 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AALo807Lyg4AABQ6mW8RGQ&gdpr=0 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:27:02 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.4	50587	34.111.113.62	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	684	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	200	IN	HTTP/1.1 403 Forbidden Content-Length: 134 Content-Type: text/html; charset=UTF-8 Date: Sun, 03 Mar 2024 23:27:02 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:02 UTC	134	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 34 30 33 3c 2f 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e Data Ascii: <!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.4	50574	38.91.45.7	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	462	OUT	GET /usersync/113?gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.deepintent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIPARTNERS=%7B%221%22%3A%2220240303%22%7D; CDIUSER=di_dcf22e7770a94469b5d6a
2024-03-03 23:27:02 UTC	663	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://dsum.casalemedia.com/crum?cm_dsp_id=176&external_user_id=di_dcf22e7770a94469b5d6a set-cookie: CDIUSER=di_dcf22e7770a94469b5d6a; Max-Age=47260800; SameSite=None; Expires=Mon, 1 Sep 2025 23:27:02 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240303%22%2C%22113%22%3A%2220240303%22%7D; Max-Age=47260800; SameSite=None; Expires=Mon, 1 Sep 2025 23:27:02 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Sun, 03 Mar 2024 23:27:02 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.4	50624	151.101.130.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1164	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/6s/rendition.m3u8?fastly_token=NjVlNTVmNmVfNDUxNmZkY2Q2YWI5ZWQ0YTdmMGQ3ZmNhZDdmNzYzMzA4MmY1N2Y0MmI0OTQzZjY2OTEzNDEyYTViM2E3MTRjZQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	628	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Date: Sun, 03 Mar 2024 23:27:02 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-lga21933-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508423.597952,VS0,VE41 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-03-03 23:27:02 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 56 6c 4e 54 56 6d 4e 32 46 66 4e 44 6b 78 4d 7a 51 78 5a 44 4d 33 59 57 52 6b 59 6a 5a 69 4d 6d 55 77 5a 6a 4d 7a 59 32 52 69 4e 44 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmN2FfNDkxMzQxZDM3YWRkYjZiMmUwZjMzY2RiND
2024-03-03 23:27:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-03-03 23:27:02 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 32 4f 54 6b 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 4d 35 4f 58 30 2e 57 6f 4c 69 59 6a 6c 56 69 6f 41 65 61 6d 33 6a 7a 58 74 32 51 6c 42 68 6e 52 38 51 6b 5a 6f 2d 65 30 39 78 4f 6f 47 46 58 76 Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv
2024-03-03 23:27:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:27:02 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 37 38 65 35 33 66 63 31 36 61 61 37 31 66 65 64 30 62 30 61 30 39 62 34 37 33 30 61 30 38 64 33 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 61 34 63 64 32 36 63 32 2d 65 36 30 37 2d 34 Data Ascii: ",IV=0x78e53fc16aa71fed0b0a09b4730a08d3#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 66 35 2f 61 34 63 64 32 36 63 32 2d 65 36 30 37 2d 34 62 36 61 2d 39 37 64 65 2d 33 62 62 33 37 39 64 32 65 65 31 61 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 2f 2a 7e 68 6d 61 63 3d 65 33 35 39 31 37 38 38 34 34 36 65 31 37 35 34 65 35 37 39 33 62 31 61 36 66 39 30 37 30 35 38 33 31 64 36 38 35 34 38 38 62 36 32 61 66 36 36 36 62 66 30 63 38 36 35 34 34 66 64 65 32 39 66 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 Data Ascii: f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e3591788446e1754e5793b1a6f90705831d685488b62af666bf0c86544fde29f#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/61602a39-778d-4e
2024-03-03 23:27:02 UTC	1371	IN	Data Raw: 31 2f 36 31 36 30 32 61 33 39 2d 37 37 38 64 2d 34 65 30 35 2d 39 65 38 63 2d 61 34 66 66 63 65 62 34 37 39 66 35 2f 61 34 63 64 32 36 63 32 2d 65 36 30 37 2d 34 62 36 61 2d 39 37 64 65 2d 33 62 62 33 37 39 64 32 65 65 31 61 2f 32 36 63 34 33 36 65 36 2d 37 62 34 32 2d 34 61 32 39 2d 62 64 38 64 2d 37 64 64 33 39 39 30 33 33 39 35 61 2f 2a 7e 68 6d 61 63 3d 65 33 35 39 31 37 38 38 34 34 36 65 31 37 35 34 65 35 37 39 33 62 31 61 36 66 39 30 37 30 35 38 33 31 64 36 38 35 34 38 38 62 36 32 61 66 36 36 36 62 66 30 63 38 36 35 34 34 66 64 65 32 39 66 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/61602a39-778d-4e05-9e8c-a4ffceb479f5/a4cd26c2-e607-4b6a-97de-3bb379d2ee1a/26c436e6-7b42-4a29-bd8d-7dd39903395a/*~hmac=e3591788446e1754e5793b1a6f90705831d685488b62af666bf0c86544fde29f#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.4	50657	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1241	OUT	GET /cksync.php?cs=1&type=sov&ovsid=IQveALZHlnPGc8kXQNeadO_F&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:02 UTC	667	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-sov=IQveALZHlnPGc8kXQNeadO_F~~1;Expires=Fri, 30 Aug 2024 23:27:02 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.4	50609	151.101.130.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1138	OUT	GET /license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNzBfMzczNzJiY2Y5OTgwNzIyYmFhMjJjMjE2ZmIzZjJiMTdkNzQyNjBkNTk1YzM1Yjk2MTUyOWU3ZWIzZTQ1ZDhmNA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	563	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Bcov-Jwt-Validity: success Bcov-Request-Id: 7ac192e6-2440-4d6f-b335-60b1a3901fc3 Cache-Control: private, max-age=137 Content-Type: application/octet-stream X-Hosted-On: Gantry X-Powered-By: BC X-Powered-From: us-east-1a Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:27:02 GMT Via: 1.1 varnish X-Served-By: cache-ewr18135-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508423.599329,VS0,VE62 X-Device-Group: desktop-chrome
2024-03-03 23:27:02 UTC	16	IN	Data Raw: 95 99 1f 54 b1 04 e2 19 16 2f ee 49 37 f6 c3 01 Data Ascii: T/I7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.4	50646	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3106	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=q3P69gSJDFemduV8RQflZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_27=16735-uid:e33b65e5-0744-4800-9e03-a305d43d5738; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_1278=23329-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23340-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23498-d953ac44-6100-4cfd-8e83-2e663fb0f73c; SPugT=1709460892; KRTBCOOKIE_148=19421-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23486-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23489-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE&KRTB&23539-uid:9E6108CD113245DE8ED3EE8C2AE8D8CE; PugT=1709458572
2024-03-03 23:27:02 UTC	621	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 21:26:04 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=23554-q3P69gSJDFemduV8RQflZQ&KRTB&23557-q3P69gSJDFemduV8RQflZQ; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 21:26:04 GMT; path=/ Set-Cookie: PugT=1709501164; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 21:26:04 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.4	50636	151.101.130.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1138	OUT	GET /license/v1/aes128/6415665815001/61602a39-778d-4e05-9e8c-a4ffceb479f5/26c436e6-7b42-4a29-bd8d-7dd39903395a?fastly_token=NjVlNTVmNmNfYzAzYTBmOTQ2YzE3YjcyNmM0ZGNjNmI2Mzc1NDc4ZGE4YmZlODY5M2JmM2EyZjYyZGVkYTMwNmQ3NjEwMDg4OQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	563	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Bcov-Jwt-Validity: success Bcov-Request-Id: 38e6f0be-8f63-487a-84e1-12e366c8076c Cache-Control: private, max-age=137 Content-Type: application/octet-stream X-Hosted-On: Gantry X-Powered-By: BC X-Powered-From: us-east-1c Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:27:02 GMT Via: 1.1 varnish X-Served-By: cache-ewr18182-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1709508423.693829,VS0,VE66 X-Device-Group: desktop-chrome
2024-03-03 23:27:02 UTC	16	IN	Data Raw: 95 99 1f 54 b1 04 e2 19 16 2f ee 49 37 f6 c3 01 Data Ascii: T/I7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.4	50663	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2211	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:02 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.4	50669	35.214.170.179	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	840	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	403	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=c7b77979-4308-4e0f-a6f4-1f2466ce80a0; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Mon, 03-Jun-2024 23:27:02 GMT; SameSite=None location: https://simage2.pubmatic.com/AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 content-length: 0 date: Sun, 03 Mar 2024 23:27:02 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.4	50661	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2720	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7627948201254899201 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; PugT=1709508421; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468
2024-03-03 23:27:02 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 10:14:17 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.4	50666	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2748	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; PugT=1709460880
2024-03-03 23:27:02 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.4	50667	52.4.203.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	648	OUT	GET /sync?pid=187&uid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	420	IN	HTTP/1.1 204 Date: Sun, 03 Mar 2024 23:27:02 GMT Set-Cookie: __187_cid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; Domain=.bfmio.com; Max-Age=31536000; Expires=Mon, 03-Mar-2025 18:27:02 GMT-0500; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=ee7a1251b68173266121a40afa8c9d2cd6d0ff30; Domain=.bfmio.com; Max-Age=31536000; Expires=Mon, 03-Mar-2025 18:27:02 GMT-0500; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.4	50662	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1236	OUT	GET /cksync.php?cs=1&type=apx&ovsid=2056953496763385149&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:02 UTC	662	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-apx=2056953496763385149~~1;Expires=Fri, 31 May 2024 23:27:02 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.4	50673	8.28.7.84	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2209	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-nLNhotxE2uVq21nL64vd2.9J7PPx9gY-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:02 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 10:15:01 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1709460901; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 10:15:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.4	50681	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3081	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.11967540354011108&_sqno=12&ts=22878&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:02 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:27:02 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.4	50671	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3083	OUT	GET /AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_27=16735-uid:e33b65e5-0744-4800-9e03-a305d43d5738; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_1278=23329-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23340-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23498-d953ac44-6100-4cfd-8e83-2e663fb0f73c; PugT=1709508421
2024-03-03 23:27:02 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.4	50665	193.122.128.135	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1178	OUT	GET /services?srv=cs&nuid=2E84A48E09184096882C93C926E94179&att=1&pid=46&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D7346742891256766101%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=2056953496763385149 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AALo807Lyg4AABQ6mW8RGQ; tads_uid=2E84A48E09184096882C93C926E94179; tads_uid_cd=20240303232653+0000; tads_zora=2; tads_uidp_82=ZeUHNEt3uSYAABBfAETINAAA&015
2024-03-03 23:27:02 UTC	1192	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=7346742891256766101&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 Set-Cookie: tads_uidp_46=2056953496763385149; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:27:02 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=2E84A48E09184096882C93C926E94179; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:27:02 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240303232653+0000; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:27:02 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Tue, 03 Mar 2026 23:27:02 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 2494325 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.4	50664	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3191	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_27=16735-uid:e33b65e5-0744-4800-9e03-a305d43d5738; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_1278=23329-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23340-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23498-d953ac44-6100-4cfd-8e83-2e663fb0f73c; PugT=1709508421
2024-03-03 23:27:02 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23340-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23498-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.4	50682	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	588	OUT	OPTIONS /playback/v1/accounts/6415665815001/videos/6348152174112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://s.yimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:02 UTC	405	IN	HTTP/1.1 200 OK Connection: close Content-Length: 66 Retry-After: 0 Content-Type: application/json Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:27:02 GMT X-Served-By: cache-ewr18137-EWR X-Cache: HIT X-Cache-Hits: 0 Bcov-Request-Id: epa-2dc30e0e1e6e, epa-2dc30e0e1e6e-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: *
2024-03-03 23:27:02 UTC	66	IN	Data Raw: 20 5b 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 22 22 2c 20 22 65 72 72 6f 72 5f 73 75 62 63 6f 64 65 22 3a 22 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 22 41 75 74 68 6f 72 69 7a 65 64 22 20 7d 5d 20 Data Ascii: [{"error_code":"", "error_subcode":"", "message":"Authorized" }]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.4	50668	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1329	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=adb&refUrl=&vid=95083994863525099948919525000V10&ovsid=ZeUHNAAAAlu_8wAh&axid_e=&_test=ZeUHNAAAAlu_8wAh HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:02 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-adb=ZeUHNAAAAlu_8wAh~~1;Expires=Fri, 30 Aug 2024 23:27:02 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:02 GMT Connection: close
2024-03-03 23:27:02 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:02 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.4	50677	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3081	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.46141035887997073&_sqno=13&ts=22879&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:02 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:27:02 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.4	50679	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3080	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.4858267404540668&_sqno=14&ts=22880&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:27:02 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.4	50670	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2269	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEAIvvYGKi3MwJbcEVt_pRgM&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:03 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:01 GMT; path=/ Set-Cookie: PugT=1709508421; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.4	50674	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3106	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=3lMj0GdRDKGXY9RtRgflZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_1278=23329-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23340-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23498-d953ac44-6100-4cfd-8e83-2e663fb0f73c; KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; PugT=1709508420; SPugT=1709508421
2024-03-03 23:27:03 UTC	621	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 10:15:31 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=23554-3lMj0GdRDKGXY9RtRgflZQ&KRTB&23557-3lMj0GdRDKGXY9RtRgflZQ; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 10:15:31 GMT; path=/ Set-Cookie: PugT=1709460931; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 10:15:31 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.4	50676	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	680	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:27:03 UTC	424	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:27:03 GMT location: https://pixel.rubiconproject.com/tap.php?v=183462&nid=4114&put=AALo807Lyg4AABQ6mW8RGQ&expires=30&gdpr=0 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:27:03 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.4	50683	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2571	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAACRZsTGVvmHgMCfQoQAAAAAAA&expiration=1709594813&nuid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:03 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22713-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22715-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&23519-AAACRZsTGVvmHgMCfQoQAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:03 GMT; path=/ Set-Cookie: PugT=1709508423; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.4	50684	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3080	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.8607352776907218&_sqno=15&ts=22885&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:27:02 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.4	50685	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1100	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348152174112&time=1709508421507&seq=9 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:03 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:03 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.4	50678	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3081	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.49623118297188307&_sqno=16&ts=22886&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 4 date: Sun, 03 Mar 2024 23:27:02 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.4	50687	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2522	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:03 UTC	773	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_632=23041-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23047-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23234-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23361-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:03 GMT; path=/ Set-Cookie: PugT=1709508423; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.4	50675	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	1210	OUT	GET /cksync.php?cs=8&type=spa&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:03 UTC	442	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 52 Content-Type: image/gif p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:03 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:03 GMT Connection: close
2024-03-03 23:27:03 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:03 UTC	9	IN	Data Raw: 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.4	50688	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	3192	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AALo807Lyg4AABQ6mW8RGQ&gdpr=0 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_1278=23329-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23340-d953ac44-6100-4cfd-8e83-2e663fb0f73c&KRTB&23498-d953ac44-6100-4cfd-8e83-2e663fb0f73c; KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; SPugT=1709508421; KRTBCOOKIE_904=23554-q3P69gSJDFemduV8RQflZQ&KRTB&23557-q3P69gSJDFemduV8RQflZQ; PugT=1709501164
2024-03-03 23:27:03 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:02 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AALo807Lyg4AABQ6mW8RGQ; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:02 GMT; path=/ Set-Cookie: PugT=1709508422; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:02 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.4	50690	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:02 UTC	2514	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; PugT=1709501159
2024-03-03 23:27:03 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&KRTB&23418-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:03 GMT; path=/ Set-Cookie: PugT=1709508423; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.4	50686	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	1409	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=dtm&refUrl=&vid=95083994863525099948919525000V10&ovsid=AAAMobTejwwu5gNlbA8iAAAAAAA&axid_e=&expiration=1709594809&nuid={{AXID}}&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:03 UTC	670	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1;Expires=Fri, 30 Aug 2024 23:27:03 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:03 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:03 GMT Connection: close
2024-03-03 23:27:03 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:03 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.4	50680	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	3081	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.16785937997452072&_sqno=17&ts=22887&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:27:03 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.4	50689	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	1247	OUT	GET /cksync.php?cs=1&type=58280&ovsid=e4423880-7610-4ca4-94ee-3ab62836ffe1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:03 UTC	679	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1;Expires=Fri, 30 Aug 2024 23:27:03 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:03 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:03 GMT Connection: close
2024-03-03 23:27:03 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:03 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.4	50692	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	3080	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.5867540555855004&_sqno=18&ts=22888&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 2 date: Sun, 03 Mar 2024 23:27:03 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.4	50691	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	1249	OUT	GET /cksync.php?cs=1&type=58601&ovsid=u_436cb148-05c7-43b4-bf78-0e6201e28826 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:03 UTC	681	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1;Expires=Wed, 17 Apr 2024 23:27:03 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:03 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:03 GMT Connection: close
2024-03-03 23:27:03 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:03 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.4	50693	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	2720	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7627948201254899201 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; SPugT=1709508410; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; PugT=1709508421; KRTBCOOKIE_279=22890-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23011-3861fc3c-867b-43e0-b46a-259e2b0cd468&KRTB&23355-3861fc3c-867b-43e0-b46a-259e2b0cd468
2024-03-03 23:27:03 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.4	50698	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	3080	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.6339655064632048&_sqno=19&ts=22889&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1056	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 56 date: Sun, 03 Mar 2024 23:27:03 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.4	50697	44.195.157.207	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	889	OUT	GET /pbmtc.gif?puid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=fb7d668c-c73b-4c9e-a7bc-18062a8b8210; ss=cSc8TGFqlVmz96xo0QlSBfW2mYVIyXzAOSm2aUm35Usxdmaok1saMn0EYAX0JgXySuhZG6ItAUW1A1HwODZxtQ%3D%3D
2024-03-03 23:27:03 UTC	448	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=fb7d668c-c73b-4c9e-a7bc-18062a8b8210; expires=Mon, 03 Mar 2025 23:27:03 GMT; path=/; secure; samesite=none Set-Cookie: ss=bLBsyjxbmFrCrGhJWt5Rm9SagrBYsDEx%2BKQe6%2FVahdUIH8GqbV%2FeO%2BVysya0UEE1LdBECGNyeLZENIbHrwgcWg%3D%3D; expires=Mon, 03 Mar 2025 23:27:03 GMT; path=/; secure; samesite=none
2024-03-03 23:27:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.4	50699	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	3080	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.8533624327028266&_sqno=20&ts=22890&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:27:03 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.4	50700	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	3080	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.5983344172457807&_sqno=21&ts=22891&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1057	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 101 date: Sun, 03 Mar 2024 23:27:03 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.4	50701	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	3081	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.24079292965552246&_sqno=22&ts=22892&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&url=https%3A%2F%2Fvideo-api.yql.yahoo.com%2Fv1%2Fvideo%2Fsapi%2Fstreams%2F6eb22e94-b4f9-360b-9efe-9314028f9017%2C8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e%2Cc3db04e7-3946-37de-9e67-03698b49bef9%2C50fcb985-df33-3558-865d-77035ff99fce%2C2d3534f1-addb-34bd-bf8b-476c6c63e7f2%2Cdc9d9f9b-83fb-3136-a15f-b4c3ea328ae1%2Ca6807d85-b340-3fab-9d17-ac1ddc74cbf8%2C519694c4-e078-39f5-a25c-a880feb8099e%2C23b205a8-99d1-3662-b169-2b335bd13ba3%2Cc4030192-96df-34c7-8f55-f7df83598032%2Cca4223ee-c954-3bd7-9453-64a45f676a29%3Fad.pubfamily%3Daol%26srid%3D3072249782%26protocol%3Dhttp%26format%3Dm3u8%252Cmp4%252Cwebm%26rt%3Dhtml%26devtype%3Ddesktop%26offnetwork%3Dfalse%26plid%3Db9b3c6c5-2cd7-4937-8390-628222cda75f%26region%3DUS%26site%3Daolhomepage%26expb%3Daol-aa-2%26expn%3Daolhomepage%26bckt%3DTreatment_Oath_Player%26lang%3Den-US%26width%3D368%26height%3D276%26resize%3Dtrue%26ps%3D93knqf67%252Cdexzzysv%252Cbwmsum1c%252Ct3cjguyy%252Cnv4g2qkv%252C3cg171as%252C6kh83y71%252Cfqbgknpp%252C6l5yyhbl%252C331yoakf%252Cfvtlzpgu%26autoplay%3Dfalse%26image_sizes%3D%26excludePS%3Dtrue%26isDockable%3D0%26acctid%3D%26synd%3D%26pspid%3D1197803361%26plidl%3D%26topic%3D%26pver%3D1.3.9%26try%3D1%26failover_count%3D0%26ads%3Dima%26nad%3D0%26ad.pl%3Dup%26ad.pd%3D%26ad.pt%3Dhome%26ad.pct%3Daolfrontpage%26evp%3Dbcp%26hlspre%3Dfalse%26plseq%3D2%26gdpr%3Dfalse%26iabconsent%3D%26usprv%3D1YNN%26gpp%3DDBAA%26gppSid%3D-1 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1056	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 52 date: Sun, 03 Mar 2024 23:27:03 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.4	50696	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	1223	OUT	GET /playback/v1/accounts/6415665815001/videos/6348152174112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg3MjEsImlhdCI6MTcwOTUwODQyMX0.a9zCIz4Ibz_aw8Rz_p8hCZjjj51kpxwqG0NJ0CZdsmTZLTVR2tmZy_pw5mtA5kvCoRFletgl3nZgYZ6ncyr0KPJucSoT56zO4GewyKuJVm9I415epHhraY_6bvwwWYcTSwtOTddsSHTLXw17NTnIZgzNW7EqAdPru1Agomx2xVualmIvkxkidNYoV7s62-WEKe_z7yVn1WXx_zZjM9dF3zeq-Qgc_E7RGc5zOYAxAmqNxV1B5hoUsK9OoSAihotWr17tUEAujSS3ek9E44_wXb2y5JFUyRJ6rNG5i4Pmu3tBCDMjlDNDwnz4xg9gIkixh7yZlfk93ugyVqopNFfQpg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:03 UTC	573	IN	HTTP/1.1 200 OK Connection: close Account-Status: APPROVED Content-Type: application/json; charset=UTF-8 Policy-Key-Accountid: Powered-By: BC Powered-From: us-east-1a X-Has-Manifest-Url-Ttl: true Expires: Sun, 03 Mar 2024 23:33:17 GMT Date: Sun, 03 Mar 2024 23:27:03 GMT X-Served-By: cache-lga21977-LGA X-Cache: HIT X-Cache-Hits: 6 Bcov-Request-Id: epa-6e54979e5517, epa-8c016d1444c2-cr, epa-ef43067ebcbe-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: * transfer-encoding: chunked
2024-03-03 23:27:03 UTC	5	IN	Data Raw: 36 65 33 0d 0a Data Ascii: 6e3
2024-03-03 23:27:03 UTC	1371	IN	Data Raw: 7b 22 70 6f 73 74 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 38 63 30 64 33 66 31 2d 66 61 35 34 2d 34 39 31 39 2d 61 62 39 62 2d 36 66 32 35 36 34 63 61 38 38 37 38 2f 6d 61 69 6e 2f 31 32 38 30 78 37 32 30 2f 31 31 73 31 38 39 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 30 39 35 33 30 34 32 33 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 38 63 30 64 33 66 31 2d 66 61 35 34 2d 34 39 31 39 2d 61 62 39 62 2d 36 66 32 35 36 34 63 61 38 38 37 38 2f 6d 61 69 6e 2f 31 Data Ascii: {"poster":"https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/68c0d3f1-fa54-4919-ab9b-6f2564ca8878/main/1280x720/11s189ms/match/image.jpg?akamai_token=exp=1709530423~acl=/image/v1/jit/6415665815001/68c0d3f1-fa54-4919-ab9b-6f2564ca8878/main/1
2024-03-03 23:27:03 UTC	392	IN	Data Raw: 2f 31 31 73 31 38 39 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 2a 7e 68 6d 61 63 3d 35 38 66 62 36 36 63 35 30 35 64 33 33 33 63 38 32 31 37 66 39 64 30 61 66 34 63 65 31 66 64 37 66 30 39 30 35 35 61 64 36 38 63 31 39 37 31 63 30 64 31 32 32 30 61 61 36 31 30 39 36 62 66 31 22 7d 5d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 74 61 67 73 22 3a 5b 5d 2c 22 63 75 65 5f 70 6f 69 6e 74 73 22 3a 5b 5d 2c 22 63 75 73 74 6f 6d 5f 66 69 65 6c 64 73 22 3a 7b 7d 2c 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 36 34 31 35 36 36 35 38 31 35 30 30 31 22 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 63 6f 64 65 63 73 22 3a 22 61 76 63 31 2c 6d 70 34 61 22 2c 22 65 78 74 5f 78 5f 76 65 72 73 69 6f 6e 22 3a 22 34 22 2c 22 73 72 63 22 3a 22 68 74 Data Ascii: /11s189ms/match/image.jpg*~hmac=58fb66c505d333c8217f9d0af4ce1fd7f09055ad68c1971c0d1220aa61096bf1"}],"description":null,"tags":[],"cue_points":[],"custom_fields":{},"account_id":"6415665815001","sources":[{"codecs":"avc1,mp4a","ext_x_version":"4","src":"ht
2024-03-03 23:27:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:27:03 UTC	4	IN	Data Raw: 36 38 0d 0a Data Ascii: 68
2024-03-03 23:27:03 UTC	104	IN	Data Raw: 4e 6a 56 6c 4e 54 45 31 4e 54 64 66 4e 7a 45 79 4d 44 6b 35 4f 54 55 32 4f 47 4a 6c 59 7a 4d 31 4e 6d 4e 6a 4d 32 4d 33 59 6a 4e 6d 4e 44 46 69 4d 54 6c 6d 4e 54 63 31 4e 7a 55 34 4d 47 55 30 59 6a 68 6b 59 32 55 33 5a 6a 45 35 4e 54 45 30 59 6a 4d 30 4e 7a 67 30 4e 6a 46 69 4f 44 45 31 4e 51 25 33 44 25 33 44 Data Ascii: NjVlNTE1NTdfNzEyMDk5OTU2OGJlYzM1NmNjM2M3YjNmNDFiMTlmNTc1NzU4MGU0YjhkY2U3ZjE5NTE0YjM0Nzg0NjFiODE1NQ%3D%3D
2024-03-03 23:27:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:27:03 UTC	5	IN	Data Raw: 31 30 38 0d 0a Data Ascii: 108
2024-03-03 23:27:03 UTC	264	IN	Data Raw: 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 70 65 67 55 52 4c 22 7d 2c 7b 22 63 6f 64 65 63 73 22 3a 22 61 76 63 31 2c 6d 70 34 61 22 2c 22 70 72 6f 66 69 6c 65 73 22 3a 22 75 72 6e 3a 6d 70 65 67 3a 64 61 73 68 3a 70 72 6f 66 69 6c 65 3a 69 73 6f 66 66 2d 6c 69 76 65 3a 32 30 31 31 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 64 61 73 68 2f 6c 69 76 65 2d 62 61 73 65 75 72 6c 2f 63 6c 65 61 72 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 38 63 30 64 33 66 31 2d 66 61 35 34 2d 34 39 31 39 2d 61 62 39 62 2d 36 66 32 35 36 34 63 61 38 38 37 38 2f 36 73 2f 6d 61 6e 69 66 65 73 74 2e 6d 70 64 3f 66 61 73 74 Data Ascii: ","type":"application/x-mpegURL"},{"codecs":"avc1,mp4a","profiles":"urn:mpeg:dash:profile:isoff-live:2011","src":"https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/clear/6415665815001/68c0d3f1-fa54-4919-ab9b-6f2564ca8878/6s/manifest.mpd?fast
2024-03-03 23:27:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.4	50702	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	1816	OUT	POST /p?_V=V&V_sec=pb&evt=v_strm_view&t=0.06470005026148118&_sqno=23&ts=23224&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&buf_dur=0&dur=3&dur_d=3&src=0&freq=13&td=23&te=20&buff_info=%7B%22seg%22%3A%5B%7B%22buf_dur%22%3A%220%22%7D%5D%7D HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:03 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:27:03 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:03 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.4	50694	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	1239	OUT	GET /cksync.php?cs=1&type=mn2&ovsid=3525100008919577000V10&axid_e= HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:03 UTC	665	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-mn2=3525100008919577000V10~~1;Expires=Fri, 30 Aug 2024 23:27:03 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:03 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:03 GMT Connection: close
2024-03-03 23:27:03 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:03 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.4	50695	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	1272	OUT	GET /cksync.php?cs=1&type=58259&ovsid=VqqzSffDDzfVzTkSfzaT&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:03 UTC	663	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ylm=VqqzSffDDzfVzTkSfzaT~~1;Expires=Fri, 30 Aug 2024 23:27:03 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:03 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:03 GMT Connection: close
2024-03-03 23:27:03 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:03 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.4	50703	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	1336	OUT	GET /cksync.php?cs=1&vsid=3525099948919525000V10&type=ctn&refUrl=&vid=95083994863525099948919525000V10&ovsid=006032ff9e2544ada39734a11952c619&axid_e=&y=null&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1
2024-03-03 23:27:04 UTC	675	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-ctn=006032ff9e2544ada39734a11952c619~~1;Expires=Fri, 30 Aug 2024 23:27:04 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:04 GMT Connection: close
2024-03-03 23:27:04 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:04 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.4	50704	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	3738	OUT	GET /AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1278=23329-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23340-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23498-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7; SPugT=1709460901; KRTBCOOKIE_904=23554-3lMj0GdRDKGXY9RtRgflZQ&KRTB&23557-3lMj0GdRDKGXY9RtRgflZQ; KRTBCOOKIE_32=11175-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22713-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22715-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&23519-AAACRZsTGVvmHgMCfQoQAAAAAAA; KRTBCOOKIE_632=23041-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23047-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23234-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23361-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do; KRTBCOOKIE_699=22727-AALo807Lyg4AABQ6mW8RGQ; KRTBCOOKIE_188=3189-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&KRTB&23418-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553; PugT=1709508423
2024-03-03 23:27:03 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 09:58:50 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.4	50705	52.71.191.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	888	OUT	GET /cookie-sync?gdpr=0&userid=7346742891256766101&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bitoIsSecure=ok; bito=AALo807Lyg4AABQ6mW8RGQ
2024-03-03 23:27:04 UTC	454	IN	HTTP/1.1 303 See Other Date: Sun, 03 Mar 2024 23:27:04 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AALo807Lyg4AABQ6mW8RGQ&gdpr=0 Server: gunicorn set-cookie: bito=AALo807Lyg4AABQ6mW8RGQ; Domain=bidr.io; expires=Wed, 02 Apr 2025 18:27:04 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.4	50710	68.67.179.166	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	821	OUT	GET /prebid/setuid?bidder=rubicon&uid=LTC55UNV-1B-13RH&gdpr=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; receive-cookie-deprecation=1; uuid2=2056953496763385149
2024-03-03 23:27:04 UTC	1792	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: e891bfbc-173b-4c1d-9087-7d512efe2536 Set-Cookie: XANDR_PANID=k7grLha6EW2JCFp5xLYVbNAASFvTTLf4YSSbBOiqx8-kdx64aDAi9MRQTcwn50vbYvOc7Sjs40zUg0JHlE4kx-CLTvjCcGe7I7TY4YJT5Cc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:27:04 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/YCxrEQF']wIg2C$Gr^_CV!]tbP6j2F-.aDabByFnKcfM*Vj58_1=a:[dkChPz9k>EnTpEn-%v4VB%nu#D(2yXP; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:27:04 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Sun, 19-Feb-2034 23:27:04 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxUQzU1VU5WLTFCLTEzUkgiLCJleHBpcmVzIjoiMjAyNC0wNi0wMVQyMzoyNzowNFoifX0sImJpcnRoZGF5IjoiMjAyNC0wMy0wM1QyMzoyNzowNFoifQ==; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:27:04 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=2056953496763385149; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 01-Jun-2024 23:27:04 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.192.203; 154.16.192.203; 575.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-03-03 23:27:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.4	50718	18.164.124.109	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	655	OUT	GET /live/liveCS.php?source=external&advId=100&advUuid=LTC55UNV-1B-13RH&gdpr=0 HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:04 UTC	813	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Sun, 03 Mar 2024 23:27:03 GMT p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: no-store pragma: no-cache set-cookie: csuuid=65e507481205e; expires=Thu, 28-Mar-2024 23:27:04 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LTC55UNV-1B-13RH X-Cache: Miss from cloudfront Via: 1.1 f54bc880c0d35571a4883f7c10838532.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: lcv3Cbf35e-jzr4H5jdLh2Bob5ukrCm7TX6CTnzAtmp2zY7BrZhIxw== Age: 0
2024-03-03 23:27:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.4	50706	34.196.218.225	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	1006	OUT	GET /sync/rubicon/826W722nj5n2zPnGRAjfpsn5EUdSAgOZEtemQ7w0kco?csrc=&gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:04 UTC	872	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Length: 0 Connection: close Location: https://pixel.rubiconproject.com/tap.php?v=31950&nid=2974&put=y-3vWV0elE2oKV_Bu.cX2CniNNbF7q7KE6rClQCQ--~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:04 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.4	50717	107.178.254.65	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	680	OUT	GET /api/sync?pid=5324&it=1&iv=711488323487dba57331a6edf13dd25d753b20480d0da41b7d9e31581f6a61be791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:04 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=711488323487dba57331a6edf13dd25d753b20480d0da41b7d9e31581f6a61be791426b5417dce21&rand=01332687 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=xmq75ZXWYNYlkPbC; Path=/; Domain=pippio.com; Expires=Mon, 03 Mar 2025 23:27:04 GMT; Secure; SameSite=None Set-Cookie: didts=1709508424; Path=/; Domain=pippio.com; Expires=Mon, 03 Mar 2025 23:27:04 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Thu, 02 May 2024 23:27:04 GMT; Secure; SameSite=None Set-Cookie: pxrc=CMiOlK8GEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Thu, 02 May 2024 23:27:04 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.4	50714	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	3677	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=4961998647400783903 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1278=23329-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23340-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23498-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7; SPugT=1709460901; KRTBCOOKIE_904=23554-3lMj0GdRDKGXY9RtRgflZQ&KRTB&23557-3lMj0GdRDKGXY9RtRgflZQ; KRTBCOOKIE_32=11175-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22713-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22715-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&23519-AAACRZsTGVvmHgMCfQoQAAAAAAA; KRTBCOOKIE_632=23041-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23047-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23234-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23361-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do; KRTBCOOKIE_699=22727-AALo807Lyg4AABQ6mW8RGQ; KRTBCOOKIE_188=3189-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&KRTB&23418-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553; PugT=1709508423
2024-03-03 23:27:04 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 10:12:32 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-4961998647400783903&KRTB&23263-4961998647400783903&KRTB&23481-4961998647400783903; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 10:12:32 GMT; path=/ Set-Cookie: PugT=1709460752; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 10:12:32 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.4	50720	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:03 UTC	464	OUT	GET /crum?cm_dsp_id=176&external_user_id=di_dcf22e7770a94469b5d6a HTTP/1.1 Host: dsum.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; CMPS=015; CMPRO=015
2024-03-03 23:27:04 UTC	977	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 85ed65230a6a7cf6-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZeUHNEt3uSYAABBfAETINAAA; Path=/; Domain=casalemedia.com; Expires=Mon, 03 Mar 2025 23:27:04 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=015; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 23:27:04 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dFeMkdmQTlwfZC0c34GSH%2BU9V%2FTUdjGyBGetSEXPpCF6a6UD1Da30BCr8MKQXMuSKEYFz12Xi8HLGCBeL6OU%2F7G8grXe5u682IQ4oBSz%2FHH3g%2BRBACi5ZMrjF4s2K7de%2BjuvIN18"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-03-03 23:27:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.4	50709	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	1533	OUT	GET /cksync.php?cs=1&type=58160&ovsid=LTC55UNV-1B-13RH&gdpr=0 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1; data-rhs=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do~~1
2024-03-03 23:27:04 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-mag=LTC55UNV-1B-13RH~~1;Expires=Mon, 03 Mar 2025 23:27:04 GMT;path=/;domain=.hb.yahoo.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=86400 ; includeSubDomains Strict-Transport-Security: max-age=604800 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:04 GMT Connection: close
2024-03-03 23:27:04 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:04 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.4	50725	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	1590	OUT	GET / HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=5f754106410cdef1:T=1709508399:RT=1709508399:S=ALNI_MYnIUVMVlsIYkFHA-RSwJMdhkowYw; __gpi=UID=00000dcf03e41a0c:T=1709508399:RT=1709508399:S=ALNI_MZSweHx1DoXuB5AdbYDZ0AYIee9iA; __eoi=ID=7bb82c97959dc59c:T=1709508399:RT=1709508399:S=AA-AfjZPE8XmncuK1jLB_EFwQ-PX; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:27:04 UTC	533	IN	HTTP/1.1 200 Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Type: text/html;charset=utf-8 Server: ATS vary: origin,accept-encoding strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: no-cache Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 31 64 61 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 4f 4c 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 61 74 68 3a 67 75 63 65 3a 63 6f 6e 73 65 6e 74 2d 68 6f 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: 1dac<!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, init
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 41 4f 4c 43 75 73 74 6f 6d 65 72 43 61 72 65 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 61 70 70 5f 69 64 22 3a 22 33 36 35 33 39 38 35 38 33 34 39 33 34 34 32 22 2c 22 74 77 69 74 74 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 2c 22 74 77 69 74 74 65 72 5f 75 73 65 72 6e 61 6d 65 22 3a 22 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 7d 2c 22 68 61 73 5f 63 Data Ascii: e_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_c
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 74 70 73 3a 2f 2f 61 70 69 2e 63 6f 6e 74 65 6e 74 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 61 6c 65 72 74 22 3a 22 63 6f 6e 74 65 6e 74 2f 61 6c 65 72 74 2f 7b 73 6b 75 7d 3f 73 69 74 65 3d 75 73 61 6f 6c 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 75 74 69 6c 69 74 79 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 75 74 69 6c 69 74 79 2d 7b 73 75 70 70 6f 72 74 5f 6c 65 76 65 6c 7d 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 66 6f 6f 74 65 72 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 66 6f 6f 74 65 72 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 72 61 69 6c 22 3a 22 63 61 74 61 6c 6f 67 2f Data Ascii: tps://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 3f 6c 6f 63 61 6c 65 3d 65 6e 2d 55 53 22 2c 22 74 65 72 6d 73 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 2f 74 65 72 6d 73 3f 6c 6f 63 61 6c 65 3d 65 6e 2d 55 53 22 7d 2c 22 63 61 70 74 69 6f 6e 22 3a 22 24 7b 74 65 72 6d 73 5f 6c 69 6e 6b 7d 54 65 72 6d 73 24 7b 65 6e 64 5f 6c 69 6e 6b 7d 20 61 6e 64 20 24 7b 70 72 69 76 61 63 79 5f 6c 69 6e 6b 7d 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 24 7b 65 6e 64 5f 6c 69 6e 6b 7d 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 64 61 73 68 62 6f 61 72 64 3f 6c 6f 63 61 6c 65 3d 65 6e 2d 55 53 22 2c 22 63 61 70 74 69 6f 6e 22 3a 22 50 72 69 76 61 63 79 Data Ascii: om/privacy-policy?locale=en-US","terms_link":"https://guce.aol.com/terms?locale=en-US"},"caption":"${terms_link}Terms${end_link} and ${privacy_link}Privacy Policy${end_link}"},{"url":"https://guce.aol.com/privacy-dashboard?locale=en-US","caption":"Privacy
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 6d 62 65 72 2e 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 61 6f 6c 2e 63 6f 6d 2f 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 41 4f 4c 20 48 65 6c 70 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 47 65 74 20 61 6e 73 77 65 72 73 20 74 6f 20 79 6f 75 72 20 41 4f 4c 20 4d 61 69 6c 2c 20 6c 6f 67 69 6e 2c 20 44 65 73 6b 74 6f 70 20 47 6f 6c 64 2c 20 41 4f 4c 20 61 70 Data Ascii: mber."><meta property="og:type" content="website"><meta property="og:site_name" content="https://help.aol.com/"><meta property="og:title" content="AOL Help"><meta property="og:description" content="Get answers to your AOL Mail, login, Desktop Gold, AOL ap
2024-03-03 23:27:04 UTC	1104	IN	Data Raw: 65 5d 29 7b 76 61 72 20 6f 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 65 5d 5b 30 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 74 5b 65 5d 5b 31 5d 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 28 6f 7c 7c 6e 29 7d 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 29 7d 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 6e 72 5f 72 65 71 75 69 72 65 29 72 65 74 75 72 6e 20 5f 5f 6e 72 5f 72 65 71 75 69 72 65 3b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 28 65 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 72 7d 28 7b 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 Data Ascii: e]){var o=n[e]={exports:{}};t[e][0].call(o.exports,function(n){var o=t[e][1][n];return r(o\|\|n)},o,o.exports)}return n[e].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<e.length;o++)r(e[o]);return r}({1:[function(t,n,e){functi
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 33 66 66 30 0d 0a 29 7d 76 61 72 20 69 3d 74 28 22 68 61 6e 64 6c 65 22 29 2c 61 3d 74 28 32 32 29 2c 73 3d 74 28 22 65 65 22 29 2c 63 3d 74 28 22 6c 6f 61 64 65 72 22 29 2c 66 3d 74 28 22 67 6f 73 22 29 2c 75 3d 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 2c 64 3d 21 31 2c 6c 3d 22 6e 72 40 73 65 65 6e 45 72 72 6f 72 22 2c 70 3d 30 3b 63 2e 66 65 61 74 75 72 65 73 2e 65 72 72 3d 21 30 2c 74 28 31 29 2c 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 3d 72 3b 74 72 79 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 7d 63 61 74 63 68 28 68 29 7b 22 73 74 61 63 6b 22 69 6e 20 68 26 26 28 74 28 39 29 2c 74 28 38 29 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 74 28 35 29 2c 63 2e 78 68 72 57 72 61 70 70 61 62 6c 65 26 26 Data Ascii: 3ff0)}var i=t("handle"),a=t(22),s=t("ee"),c=t("loader"),f=t("gos"),u=window.onerror,d=!1,l="nr@seenError",p=0;c.features.err=!0,t(1),window.onerror=r;try{throw new Error}catch(h){"stack"in h&&(t(9),t(8),"addEventListener"in window&&t(5),c.xhrWrappable&&
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 6e 28 29 7b 74 68 69 73 2e 62 73 74 53 74 61 72 74 3d 79 2e 6e 6f 77 28 29 7d 29 2c 73 2e 6f 6e 28 77 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 28 76 2c 5b 6e 2c 74 68 69 73 2e 62 73 74 53 74 61 72 74 2c 79 2e 6e 6f 77 28 29 2c 22 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 5d 29 7d 29 2c 6f 2e 6f 6e 28 67 2b 70 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 74 69 6d 65 3d 79 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 73 74 61 72 74 50 61 74 68 3d 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 29 2c 6f 2e 6f 6e 28 67 2b 68 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 22 62 73 74 48 69 73 74 22 2c 5b 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 6c 6f 63 61 74 69 6f 6e 2e Data Ascii: n(){this.bstStart=y.now()}),s.on(w,function(t,n){i(v,[n,this.bstStart,y.now(),"requestAnimationFrame"])}),o.on(g+p,function(t){this.time=y.now(),this.startPath=location.pathname+location.hash}),o.on(g+h,function(t){i("bstHist",[location.pathname+location.
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 63 74 69 6f 6e 22 3a 65 7d 5b 74 79 70 65 6f 66 20 65 5d 3b 72 65 74 75 72 6e 20 6e 3f 73 28 6e 2c 22 66 6e 2d 22 2c 6e 75 6c 6c 2c 6e 2e 6e 61 6d 65 7c 7c 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 3a 65 7d 29 3b 74 68 69 73 2e 77 72 61 70 70 65 64 3d 74 5b 31 5d 3d 72 7d 29 2c 61 2e 6f 6e 28 64 2b 22 2d 73 74 61 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 31 5d 3d 74 68 69 73 2e 77 72 61 70 70 65 64 7c 7c 74 5b 31 5d 7d 29 7d 2c 7b 7d 5d 2c 36 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 74 5b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 69 28 61 72 67 75 6d 65 6e 74 73 29 Data Ascii: ction":e}[typeof e];return n?s(n,"fn-",null,n.name\|\|"anonymous"):e});this.wrapped=t[1]=r}),a.on(d+"-start",function(t){t[1]=this.wrapped\|\|t[1]})},{}],6:[function(t,n,e){function r(t,n,e){var r=t[n];"function"==typeof r&&(t[n]=function(){var t=i(arguments)
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 6f 72 74 73 3d 72 2c 6f 2e 69 6e 50 6c 61 63 65 28 77 69 6e 64 6f 77 2c 5b 22 72 22 2b 69 2c 22 6d 6f 7a 52 22 2b 69 2c 22 77 65 62 6b 69 74 52 22 2b 69 2c 22 6d 73 52 22 2b 69 5d 2c 22 72 61 66 2d 22 29 2c 72 2e 6f 6e 28 22 72 61 66 2d 73 74 61 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 30 5d 3d 6f 28 74 5b 30 5d 2c 22 66 6e 2d 22 29 7d 29 7d 2c 7b 7d 5d 2c 39 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 2c 65 29 7b 74 5b 30 5d 3d 61 28 74 5b 30 5d 2c 22 66 6e 2d 22 2c 6e 75 6c 6c 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 2c 65 29 7b 74 68 69 73 2e 6d 65 74 68 6f 64 3d 65 2c 74 68 69 73 2e 74 69 6d 65 72 44 75 72 61 74 69 6f 6e 3d 69 73 4e 61 4e 28 74 5b 31 5d 29 3f 30 3a 2b 74 5b Data Ascii: orts=r,o.inPlace(window,["r"+i,"mozR"+i,"webkitR"+i,"msR"+i],"raf-"),r.on("raf-start",function(t){t[0]=o(t[0],"fn-")})},{}],9:[function(t,n,e){function r(t,n,e){t[0]=a(t[0],"fn-",null,e)}function o(t,n,e){this.method=e,this.timerDuration=isNaN(t[1])?0:+t[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.4	50716	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	3709	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA9_111D28E16_7B3F98B1&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1278=23329-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23340-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23498-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7; SPugT=1709460901; KRTBCOOKIE_904=23554-3lMj0GdRDKGXY9RtRgflZQ&KRTB&23557-3lMj0GdRDKGXY9RtRgflZQ; KRTBCOOKIE_32=11175-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22713-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22715-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&23519-AAACRZsTGVvmHgMCfQoQAAAAAAA; KRTBCOOKIE_632=23041-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23047-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23234-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23361-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do; KRTBCOOKIE_699=22727-AALo807Lyg4AABQ6mW8RGQ; KRTBCOOKIE_188=3189-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&KRTB&23418-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553; PugT=1709508423
2024-03-03 23:27:04 UTC	657	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 03 Mar 2024 23:27:04 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_52=22772-R35CA9_111D28E16_7B3F98B1&KRTB&23092-R35CA9_111D28E16_7B3F98B1; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:04 GMT; path=/ Set-Cookie: PugT=1709508424; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:04 GMT; path=/ Location: https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.4	50713	52.205.86.205	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	685	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-03-03 23:27:04 UTC	692	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.4.15 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Thu, 28-Nov-2024 23:11:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=99b1a68ca066d7f9b99c858ba32a45de;Path=/;Domain=crwdcntrl.net;Expires=Thu, 28-Nov-2024 23:11:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-03-03 23:27:04 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.4	50712	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	3698	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:dcd68ec0-5d1b-41eb-bb8b-7054a5e1a612&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1278=23329-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23340-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23498-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7; SPugT=1709460901; KRTBCOOKIE_904=23554-3lMj0GdRDKGXY9RtRgflZQ&KRTB&23557-3lMj0GdRDKGXY9RtRgflZQ; KRTBCOOKIE_32=11175-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22713-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22715-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&23519-AAACRZsTGVvmHgMCfQoQAAAAAAA; KRTBCOOKIE_632=23041-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23047-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23234-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23361-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do; KRTBCOOKIE_699=22727-AALo807Lyg4AABQ6mW8RGQ; KRTBCOOKIE_188=3189-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&KRTB&23418-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553; PugT=1709508423
2024-03-03 23:27:04 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.4	50715	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	3715	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1278=23329-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23340-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23498-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7; SPugT=1709460901; KRTBCOOKIE_904=23554-3lMj0GdRDKGXY9RtRgflZQ&KRTB&23557-3lMj0GdRDKGXY9RtRgflZQ; KRTBCOOKIE_32=11175-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22713-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22715-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&23519-AAACRZsTGVvmHgMCfQoQAAAAAAA; KRTBCOOKIE_632=23041-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23047-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23234-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23361-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do; KRTBCOOKIE_699=22727-AALo807Lyg4AABQ6mW8RGQ; KRTBCOOKIE_188=3189-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&KRTB&23418-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553; PugT=1709508423
2024-03-03 23:27:04 UTC	773	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 10:14:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_632=23041-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23047-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23234-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23361-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 10:14:18 GMT; path=/ Set-Cookie: PugT=1709460858; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 10:14:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.4	50729	34.193.135.180	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3afe3f49-c86a-031c-5d5d-271b26174083
2024-03-03 23:27:04 UTC	456	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3afe3f49-c86a-031c-5d5d-271b26174083; Path=/; Domain=kargo.com; Expires=Mon, 03 Mar 2025 23:27:04 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-03 23:27:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.4	50728	35.244.159.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	480	OUT	GET /w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404
2024-03-03 23:27:04 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.4	50730	3.215.106.87	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	473	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=30646 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=65729931892392140142881563266192020616; dpm=65729931892392140142881563266192020616
2024-03-03 23:27:04 UTC	903	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: KiWYFq57TMA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v056-093c4f6ed.edge-va6.demdex.com 1 ms set-cookie: dpm=65729931892392140142881563266192020616; Max-Age=15552000; Expires=Fri, 30 Aug 2024 23:27:04 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=65729931892392140142881563266192020616; Max-Age=15552000; Expires=Fri, 30 Aug 2024 23:27:04 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-03 23:27:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.4	50726	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	1489	OUT	GET /assets/css/ HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=5f754106410cdef1:T=1709508399:RT=1709508399:S=ALNI_MYnIUVMVlsIYkFHA-RSwJMdhkowYw; __gpi=UID=00000dcf03e41a0c:T=1709508399:RT=1709508399:S=ALNI_MZSweHx1DoXuB5AdbYDZ0AYIee9iA; __eoi=ID=7bb82c97959dc59c:T=1709508399:RT=1709508399:S=AA-AfjZPE8XmncuK1jLB_EFwQ-PX; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:27:04 UTC	444	IN	HTTP/1.1 302 Found Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 185 Server: ATS Location: / Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:27:04 UTC	185	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.4	50731	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	3956	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AALo807Lyg4AABQ6mW8RGQ&gdpr=0 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; pi=159463:4; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1278=23329-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23340-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23498-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7; SPugT=1709460901; KRTBCOOKIE_904=23554-3lMj0GdRDKGXY9RtRgflZQ&KRTB&23557-3lMj0GdRDKGXY9RtRgflZQ; KRTBCOOKIE_32=11175-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22713-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22715-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&23519-AAACRZsTGVvmHgMCfQoQAAAAAAA; KRTBCOOKIE_632=23041-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23047-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23234-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23361-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do; KRTBCOOKIE_699=22727-AALo807Lyg4AABQ6mW8RGQ; KRTBCOOKIE_188=3189-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&KRTB&23418-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553; KRTBCOOKIE_391=22924-4961998647400783903&KRTB&23263-4961998647400783903&KRTB&23481-4961998647400783903; KRTBCOOKIE_52=22772-R35CA9_111D28E16_7B3F98B1&KRTB&23092-R35CA9_111D28E16_7B3F98B1; PugT=1709460858
2024-03-03 23:27:04 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 23:27:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AALo807Lyg4AABQ6mW8RGQ; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 01-Jun-2024 23:27:03 GMT; path=/ Set-Cookie: PugT=1709508423; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 23:27:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.4	50736	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	1478	OUT	GET / HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=5f754106410cdef1:T=1709508399:RT=1709508399:S=ALNI_MYnIUVMVlsIYkFHA-RSwJMdhkowYw; __gpi=UID=00000dcf03e41a0c:T=1709508399:RT=1709508399:S=ALNI_MZSweHx1DoXuB5AdbYDZ0AYIee9iA; __eoi=ID=7bb82c97959dc59c:T=1709508399:RT=1709508399:S=AA-AfjZPE8XmncuK1jLB_EFwQ-PX; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:27:04 UTC	533	IN	HTTP/1.1 200 Date: Sun, 03 Mar 2024 23:27:04 GMT Content-Type: text/html;charset=utf-8 Server: ATS vary: origin,accept-encoding strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: no-cache Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 33 63 65 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 4f 4c 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 61 74 68 3a 67 75 63 65 3a 63 6f 6e 73 65 6e 74 2d 68 6f 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: 3ce4<!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, init
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 41 4f 4c 43 75 73 74 6f 6d 65 72 43 61 72 65 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 61 70 70 5f 69 64 22 3a 22 33 36 35 33 39 38 35 38 33 34 39 33 34 34 32 22 2c 22 74 77 69 74 74 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 2c 22 74 77 69 74 74 65 72 5f 75 73 65 72 6e 61 6d 65 22 3a 22 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 7d 2c 22 68 61 73 5f 63 Data Ascii: e_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_c
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 74 70 73 3a 2f 2f 61 70 69 2e 63 6f 6e 74 65 6e 74 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 61 6c 65 72 74 22 3a 22 63 6f 6e 74 65 6e 74 2f 61 6c 65 72 74 2f 7b 73 6b 75 7d 3f 73 69 74 65 3d 75 73 61 6f 6c 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 75 74 69 6c 69 74 79 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 75 74 69 6c 69 74 79 2d 7b 73 75 70 70 6f 72 74 5f 6c 65 76 65 6c 7d 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 66 6f 6f 74 65 72 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 66 6f 6f 74 65 72 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 72 61 69 6c 22 3a 22 63 61 74 61 6c 6f 67 2f Data Ascii: tps://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 70 73 73 74 61 74 69 63 2f 61 6f 6c 68 65 6c 70 2d 70 72 6f 64 2f 31 38 2e 35 2e 34 39 2f 61 73 73 65 74 73 2f 6d 6f 64 75 6c 65 73 2f 22 3b 0a 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 61 73 73 65 74 73 55 72 6c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 70 73 73 74 61 74 69 63 2f 61 6f 6c 68 65 6c 70 2d 70 72 6f 64 2f 31 38 2e 35 2e 34 39 2f 61 73 73 65 74 73 22 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6f 61 2f 63 6f 6e 73 65 6e 74 2e 6a 73 22 20 61 73 79 6e 63 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 Data Ascii: aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets/modules/";AolHelpGlobals.assetsUrl = "https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets";</script><script type="text/javascript" src="https://s.yimg.com/oa/consent.js" async></script><script type="
2024-03-03 23:27:04 UTC	841	IN	Data Raw: 63 6f 6e 74 61 63 74 20 63 75 73 74 6f 6d 65 72 20 63 61 72 65 20 62 79 20 65 6d 61 69 6c 2c 20 63 68 61 74 2c 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 61 6f 6c 2e 63 6f 6d 2f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 22 3e 3c 6d 65 74 61 Data Ascii: contact customer care by email, chat, or phone number."><meta property="og:image" content="https://s.aolcdn.com/os/help-main/content-types/l/faq.png"><meta property="og:url" content="https://help.aol.com/"><meta name="twitter:card" content="summary"><meta
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 6c 6b 4f 7a 55 48 58 57 2d 6f 78 7a 79 6a 44 37 6b 57 48 30 56 37 38 52 45 33 68 4d 67 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 2c 5f 5f 6e 72 5f 72 65 71 75 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 21 6e 5b 65 5d 29 7b 76 61 72 20 6f 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 65 5d 5b 30 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 74 5b 65 5d 5b 31 5d 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 28 6f 7c 7c 6e 29 7d 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 29 7d 72 65 74 75 72 6e 20 6e 5b 65 Data Ascii: lkOzUHXW-oxzyjD7kWH0V78RE3hMg"><script type="text/javascript">window.NREUM\|\|(NREUM={}),__nr_require=function(t,n,e){function r(e){if(!n[e]){var o=n[e]={exports:{}};t[e][0].call(o.exports,function(n){var o=t[e][1][n];return r(o\|\|n)},o,o.exports)}return n[e
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 2c 75 3d 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 2c 64 3d 21 31 2c 6c 3d 22 6e 72 40 73 65 65 6e 45 72 72 6f 72 22 2c 70 3d 30 3b 63 2e 66 65 61 74 75 72 65 73 2e 65 72 72 3d 21 30 2c 74 28 31 29 2c 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 3d 72 3b 74 72 79 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 7d 63 61 74 63 68 28 68 29 7b 22 73 74 61 63 6b 22 69 6e 20 68 26 26 28 74 28 39 29 2c 74 28 38 29 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 74 28 35 29 2c 63 2e 78 68 72 57 72 61 70 70 61 62 6c 65 26 26 74 28 31 30 29 2c 64 3d 21 30 29 7d 73 2e 6f 6e 28 22 66 6e 2d 73 74 61 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 64 26 26 28 70 2b 3d 31 29 7d 29 2c 73 2e 6f 6e 28 22 66 6e 2d 65 72 72 Data Ascii: ,u=window.onerror,d=!1,l="nr@seenError",p=0;c.features.err=!0,t(1),window.onerror=r;try{throw new Error}catch(h){"stack"in h&&(t(9),t(8),"addEventListener"in window&&t(5),c.xhrWrappable&&t(10),d=!0)}s.on("fn-start",function(t,n,e){d&&(p+=1)}),s.on("fn-err
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 74 2c 79 2e 6e 6f 77 28 29 2c 22 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 5d 29 7d 29 2c 6f 2e 6f 6e 28 67 2b 70 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 74 69 6d 65 3d 79 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 73 74 61 72 74 50 61 74 68 3d 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 29 2c 6f 2e 6f 6e 28 67 2b 68 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 22 62 73 74 48 69 73 74 22 2c 5b 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 74 68 69 73 2e 73 74 61 72 74 50 61 74 68 2c 74 68 69 73 2e 74 69 6d 65 5d 29 7d 29 2c 66 20 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 28 77 69 6e 64 6f 77 2e 70 Data Ascii: t,y.now(),"requestAnimationFrame"])}),o.on(g+p,function(t){this.time=y.now(),this.startPath=location.pathname+location.hash}),o.on(g+h,function(t){i("bstHist",[location.pathname+location.hash,this.startPath,this.time])}),f in window.performance&&(window.p
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 3b 74 68 69 73 2e 77 72 61 70 70 65 64 3d 74 5b 31 5d 3d 72 7d 29 2c 61 2e 6f 6e 28 64 2b 22 2d 73 74 61 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 31 5d 3d 74 68 69 73 2e 77 72 61 70 70 65 64 7c 7c 74 5b 31 5d 7d 29 7d 2c 7b 7d 5d 2c 36 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 74 5b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 69 28 61 72 67 75 6d 65 6e 74 73 29 2c 6e 3d 7b 7d 3b 6f 2e 65 6d 69 74 28 65 2b 22 62 65 66 6f 72 65 2d 73 74 61 72 74 22 2c 5b 74 5d 2c 6e 29 3b 76 61 72 20 61 3b 6e 5b 6d 5d 26 26 6e 5b 6d 5d 2e 64 74 26 26 28 61 3d 6e 5b 6d 5d 2e 64 74 Data Ascii: ;this.wrapped=t[1]=r}),a.on(d+"-start",function(t){t[1]=this.wrapped\|\|t[1]})},{}],6:[function(t,n,e){function r(t,n,e){var r=t[n];"function"==typeof r&&(t[n]=function(){var t=i(arguments),n={};o.emit(e+"before-start",[t],n);var a;n[m]&&n[m].dt&&(a=n[m].dt
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 2c 72 2e 6f 6e 28 22 72 61 66 2d 73 74 61 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 30 5d 3d 6f 28 74 5b 30 5d 2c 22 66 6e 2d 22 29 7d 29 7d 2c 7b 7d 5d 2c 39 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 2c 65 29 7b 74 5b 30 5d 3d 61 28 74 5b 30 5d 2c 22 66 6e 2d 22 2c 6e 75 6c 6c 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 2c 65 29 7b 74 68 69 73 2e 6d 65 74 68 6f 64 3d 65 2c 74 68 69 73 2e 74 69 6d 65 72 44 75 72 61 74 69 6f 6e 3d 69 73 4e 61 4e 28 74 5b 31 5d 29 3f 30 3a 2b 74 5b 31 5d 2c 74 5b 30 5d 3d 61 28 74 5b 30 5d 2c 22 66 6e 2d 22 2c 74 68 69 73 2c 65 29 7d 76 61 72 20 69 3d 74 28 22 65 65 22 29 2e 67 65 74 28 22 74 69 6d 65 72 22 29 2c 61 3d 74 28 22 77 72 61 70 2d 66 75 Data Ascii: ,r.on("raf-start",function(t){t[0]=o(t[0],"fn-")})},{}],9:[function(t,n,e){function r(t,n,e){t[0]=a(t[0],"fn-",null,e)}function o(t,n,e){this.method=e,this.timerDuration=isNaN(t[1])?0:+t[1],t[0]=a(t[0],"fn-",this,e)}var i=t("ee").get("timer"),a=t("wrap-fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.4	50737	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	610	OUT	GET /cv/apiv2/aolfp/images/app/AOL-logo-96x96.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:04 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: scz/xFvFzZmKT+AizLNpKj4MLJ1R7HkmmFi70qk2EGJmyniEnjkNmACZv+o9SxDh4tsDZrP/Eyk= x-amz-request-id: 9XX41DFXMPQ5M00Q Date: Thu, 14 Dec 2023 00:08:26 GMT Last-Modified: Mon, 09 Jan 2023 14:41:17 GMT ETag: "76f0af63ba54fafdb24c12012a4865b1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1619 Referrer-Policy: no-referrer-when-downgrade Age: 6995919 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-03-03 23:27:04 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 01 e9 50 4c 54 45 47 70 4c 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff ff ff ff 0f 69 ff 52 93 ff 78 ab ff e8 f1 ff a8 c8 ff ad cc ff fe fe ff 13 6c ff 10 6a ff fe ff ff fb fc ff 12 6b ff 10 69 ff b8 d3 ff 1e 73 ff f9 fb ff 26 78 ff 15 6d ff 1a 70 ff d9 Data Ascii: PNGIHDR``FPLTEGpLiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiRxljkis&xmp
2024-03-03 23:27:04 UTC	319	IN	Data Raw: c3 41 ad d3 7c dd ef c9 90 7d f6 10 c0 13 32 ab b3 52 c0 5b 62 13 9f 18 6d 63 78 ec 15 df e9 f9 23 4d ce 68 e8 7e d0 47 4c cb 52 c0 1b b2 5c 52 69 1f c6 63 53 9b 7c 67 b2 33 34 7e bf 64 47 23 57 e0 75 4a 00 3b 72 8f 2a 23 64 50 78 4c b5 07 ef 69 ed 26 e9 9e 4c 72 b0 21 cd c1 42 35 d2 ad 4d ba 8a 3d 78 74 17 15 7f ff b7 40 f8 83 cf 81 a9 9c 46 3e df 85 2a 6a 0f 5f 45 91 c8 fc 72 d1 b5 7e a3 7a ec d5 db 9e 30 1e d7 17 86 5e 4c cc 1d e9 0f 88 c5 61 d6 fe 42 69 00 0d a0 01 34 80 06 50 a6 64 60 64 0b c8 07 55 6c 01 39 40 cf 16 60 00 89 6c 01 05 a0 bc 98 65 fc ec 24 c0 76 8e 0c 00 80 92 64 76 f1 63 f3 fc 87 99 7a b6 17 00 c0 e9 0c 56 f1 4f 9c 41 07 ca 27 19 9d c7 1e cf 22 47 e2 99 4c 8e dc e3 4f b1 3d d4 8f 4f a5 df 7b 48 55 7d 96 8e 9f 0a 7e 71 43 97 ad 72 7e Data Ascii: A\|}2R[bmcx#Mh~GLR\RicS\|g34~dG#WuJ;r#dPxLi&Lr!B5M=xt@F>j_Er~z0^LaBi4Pd`dUl9@`le$vdvczVOA'"GLO=O{HU}~qCr~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.4	50732	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	586	OUT	GET /caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:04 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 273087 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Sun, 03 Mar 2024 23:27:04 GMT Etag: "f181955cb1e46a84514734646610549a" Last-Modified: Mon, 29 Jan 2024 17:46:33 GMT Server: ECAcc (nya/7995) Vary: Accept-Encoding x-amz-id-2: LM8bH3JIITPYUdq88hvWVPrhGmQov/Y2uT8s+YS7NUYpsrP7Zyos9ayq8v4rYrlF2lHAHne35ug= x-amz-replication-status: COMPLETED x-amz-request-id: TDFVMJYH48MG8EKN x-amz-server-side-encryption: AES256 x-amz-version-id: HF0GLII_KBcR7B0.peFVtPUoGzebkD7b X-Cache: HIT Content-Length: 84325 Connection: close
2024-03-03 23:27:04 UTC	16383	IN	Data Raw: 2e 6d 2d 67 61 6d 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 6d 2d 67 61 6d 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 6d 61 72 67 Data Ascii: .m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;marg
2024-03-03 23:27:04 UTC	16383	IN	Data Raw: 6c 79 6f 75 74 2d 2d 68 69 67 68 2d 7a 20 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 7b 7a 2d 69 6e 64 65 78 3a 32 30 30 30 7d 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 7b 7a 2d 69 6e 64 65 78 3a 32 30 7d 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 76 65 72 6c 61 79 3a 61 66 74 65 72 7b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 70 61 63 69 74 79 3a 2e 32 35 7d 2e 6d 2d 66 6c Data Ascii: lyout--high-z .m-flyout--open{z-index:2000}.m-flyout--open{z-index:20}.m-flyout--open.m-flyout--overlay:after{z-index:-1;content:"";display:block;position:fixed;left:0;right:0;top:0;bottom:0;height:100vh;width:100vw;background-color:#000;opacity:.25}.m-fl
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 30 70 78 7d 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 6e 61 76 72 61 69 6c 5f 5f 64 69 76 69 64 65 72 2d 2d 6c 69 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 6d 2d 6d 74 6d 68 70 2d 6c 65 66 74 72 61 69 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 65 77 4e 61 76 2e 6d 69 6e 69 6d 69 73 65 64 20 2e 6e 61 76 72 61 69 6c 3e 6c 69 20 2e 6d 2d 6d 61 69 6c 2d 63 6f 75 6e 74 2d 2d 6e 61 76 72 61 69 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 Data Ascii: 0px}}.m-AolHeader .navrail__divider--line{background-color:#e0e4e9;width:100%;height:1px}.m-AolHeader .m-mtmhp-leftrail{display:none}.m-AolHeader.m-AolHeader--newNav.minimised .navrail>li .m-mail-count--navrail{position:absolute;left:auto}.m-AolHeader.m-A
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 67 61 74 69 6f 6e 2d 6d 65 6e 75 2d 61 6d 61 7a 6f 6e 20 2e 6c 6f 67 6f 75 74 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 64 65 73 6b 74 6f 70 2d 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 2d 61 6d 61 7a 6f 6e 20 2e 6d 61 69 6c 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 64 65 73 6b 74 6f 70 2d 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 2d 61 6d 61 7a 6f 6e 20 2e 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 Data Ascii: gation-menu-amazon .logout-button:hover svg,.m-AolHeader .desktop-user-navigation .user-navigation .user-navigation-menu-amazon .mail-button:hover svg,.m-AolHeader .desktop-user-navigation .user-navigation .user-navigation-menu-amazon .profile-button:hove
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 72 69 67 68 74 3a 38 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 65 64 53 65 61 72 63 68 20 23 68 65 61 64 65 72 2d 66 6f 72 6d 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 65 64 53 65 61 72 63 68 20 23 68 65 61 64 65 72 2d 66 6f 72 6d 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 2d 61 63 74 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 Data Ascii: right:8px}.m-AolHeader.m-AolHeader--roundedSearch #header-form .wafer-autocomplete-list{display:none}.m-AolHeader.m-AolHeader--roundedSearch #header-form .wafer-autocomplete-list.wafer-autocomplete-list-active{display:block}.m-AolHeader.m-AolHeader--round
2024-03-03 23:27:05 UTC	2410	IN	Data Raw: 32 20 2e 74 6f 70 2d 77 72 61 70 20 2e 74 69 74 6c 65 2d 62 61 72 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 3b 66 6c 65 78 3a 30 20 30 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 56 32 20 2e 74 6f 70 2d 77 72 61 70 20 2e 74 69 74 6c 65 2d 62 61 72 20 2e 6d 2d 6d 61 69 6c 2d 2d 6e 65 77 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 56 32 20 2e 74 6f 70 2d 77 72 61 70 20 2e 74 69 74 6c 65 2d 62 61 72 20 2e 6d 2d 70 72 6f 66 69 6c 65 5f 5f 62 74 6e 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 Data Ascii: 2 .top-wrap .title-bar{padding:0;margin-left:10px;-webkit-box-flex:0;-ms-flex:0 0;flex:0 0}.m-AolHeader.m-AolHeader--navV2 .top-wrap .title-bar .m-mail--new,.m-AolHeader.m-AolHeader--navV2 .top-wrap .title-bar .m-profile__btn,.m-AolHeader.m-AolHeader--nav

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.4	50733	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	572	OUT	GET /psstatic/aolhelp-prod/18.5.49/assets/css/aolv2.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:04 UTC	472	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 186633 Content-Type: text/css Date: Sun, 03 Mar 2024 23:27:04 GMT Etag: "69bdf7a3f646fd845be9e064668b8f88" Last-Modified: Fri, 01 Mar 2024 19:31:31 GMT Server: ECAcc (nya/791E) Vary: Accept-Encoding x-amz-id-2: 2JLr0PXshznt+ei7UJIp1T7vF8PtdcSe/4I9wAXu7nQJH2RQeo204uTdT18D2TbiE8XJoJoyQtc= x-amz-request-id: B5TQQ0FAQPEZYJ58 x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 71322 Connection: close
2024-03-03 23:27:04 UTC	16383	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 2f 2a 20 44 6f 63 75 6d 65 6e 74 0a 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 6c 69 6e 65 20 68 65 69 67 68 74 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 20 32 2e 20 50 72 65 76 65 6e 74 20 61 64 Data Ascii: @charset "UTF-8";/! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css //* Document ========================================================================== //* * 1. Correct the line height in all browsers. * 2. Prevent ad
2024-03-03 23:27:04 UTC	1	IN	Data Raw: 6c Data Ascii: l
2024-03-03 23:27:04 UTC	16383	IN	Data Raw: 63 64 6e 2e 63 6f 6d 2f 6d 65 6d 62 65 72 73 68 69 70 2f 6f 6d 70 2d 73 74 61 74 69 63 2f 62 69 62 6c 69 6f 2f 69 63 6f 6e 73 2f 41 6f 6c 48 65 6c 70 49 63 6f 6e 73 2e 77 6f 66 66 3f 33 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6d 65 6d 62 65 72 73 68 69 70 2f 6f 6d 70 2d 73 74 61 74 69 63 2f 62 69 62 6c 69 6f 2f 69 63 6f 6e 73 2f 41 6f 6c 48 65 6c 70 49 63 6f 6e 73 2e 74 74 66 3f 33 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6d 65 6d 62 65 72 73 68 69 70 2f 6f 6d 70 2d 73 74 61 74 69 63 2f 62 69 62 6c 69 6f 2f 69 63 6f 6e 73 2f 41 6f 6c 48 65 6c 70 49 63 6f 6e Data Ascii: cdn.com/membership/omp-static/biblio/icons/AolHelpIcons.woff?3") format("woff"), url("https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.ttf?3") format("truetype"), url("https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcon
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 72 64 2d 6c 69 73 74 20 3e 20 6c 69 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 23 63 6f 6e 74 61 63 74 20 2e 63 61 72 64 2d 6c 69 73 74 20 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 32 70 78 20 30 20 31 33 70 78 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 63 61 6c 63 28 31 20 2a 20 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 62 61 73 65 29 29 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28 31 2e 31 38 37 35 20 2a 20 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 62 61 73 65 29 29 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 63 Data Ascii: rd-list > li { border-color: transparent; padding: 0; border-bottom: none;}.main-content#contact .card-list p { margin: 12px 0 13px 0; font-size: calc(1 * var(--font-size-base)); line-height: calc(1.1875 * var(--font-size-base));}.main-c
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 70 3a 20 31 36 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 37 25 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 63 61 6c 63 28 30 2e 38 37 35 20 2a 20 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 62 61 73 65 29 29 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28 31 20 2a 20 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 62 61 73 65 29 29 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 23 70 72 6f 64 75 63 74 2d 64 65 74 61 69 6c 73 20 2e 70 72 6f 64 75 63 74 2d 64 65 74 61 69 6c 2d 76 65 72 73 69 6f 6e 73 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 23 70 72 6f 64 75 63 74 Data Ascii: p: 16px; margin-right: 7%; font-size: calc(0.875 * var(--font-size-base)); line-height: calc(1 * var(--font-size-base));}.main-content #product-details .product-detail-versions a { color: #FFF; text-decoration: none;}.main-content #product
2024-03-03 23:27:05 UTC	5789	IN	Data Raw: 2d 6d 65 6e 75 5f 5f 74 69 74 6c 65 20 61 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6d 65 6e 75 5f 5f 6e 61 76 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 30 31 70 78 29 20 7b 0a 20 20 2e 6d 61 69 6e 2d 6d 65 6e 75 5f 5f 6e 61 76 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 7d 0a 7d 0a 2e 6d 61 69 6e 2d 6d 65 6e 75 5f 5f 6e 61 76 20 75 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e Data Ascii: -menu__title a { text-decoration: none; color: #000;}.main-menu__nav { display: inline;}@media (min-width: 901px) { .main-menu__nav { display: block; }}.main-menu__nav ul { margin: 0; padding: 0; display: inline;}@media (min

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.4	50734	152.195.55.192	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	530	OUT	GET /cmpStub.min.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:04 UTC	512	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 2073 Cache-Control: max-age=3600 Content-Type: application/javascript Date: Sun, 03 Mar 2024 23:27:04 GMT Etag: "1229c537c90bea4f08c34f64edd086da" Expires: Mon, 04 Mar 2024 00:27:04 GMT Last-Modified: Thu, 08 Feb 2024 18:14:22 GMT Server: ECD (nya/78BB) Vary: Accept-Encoding x-amz-id-2: PN2SaSpC8SDRrvTWdCLSB8Lpf17s7g70b8Xcirk6Iw3da6bEtARwjEIL6RnKvcl7zWnbeljqb3Y= x-amz-request-id: CA37J7N2BP0CT9HN X-Cache: HIT Content-Length: 5556 Connection: close
2024-03-03 23:27:04 UTC	5556	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 31 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.4	50735	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	553	OUT	GET /os/help-main/assets/js/modernizr-2.8.3.min.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:04 UTC	597	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Access-Control-Max-Age: 3000 Age: 595476 Content-Type: application/javascript Date: Sun, 03 Mar 2024 23:27:04 GMT Etag: "65f1d21d5fcc9d21da758adababd0c3c" Last-Modified: Fri, 31 Mar 2017 02:24:31 GMT Server: ECAcc (nya/794F) Vary: Accept-Encoding x-amz-id-2: +tJTC6CcEODnoJoUnjjcliz0b7TMpwwPw1efmAmx5zh7uXAGwykwdgx5X0zK09eyaQPc6hrXbYc= x-amz-request-id: F55FKPK029BTY2RH x-amz-version-id: Sz_p_Pv1A_R2AFHTaRcSvkvdrc80BfHm X-Cache: HIT Content-Length: 11084 Connection: close
2024-03-03 23:27:04 UTC	11084	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 62 2e 63 73 73 54 65 78 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 53 2e 6a 6f 69 6e 28 65 2b 22 3b 22 29 2b 28 74 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 65 29 2e 69 6e 64 65 78 4f 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 7b 76 61 72 20 6f 3d 65 5b 72 5d 3b 69 66 28 21 69 28 6f 2c 22 2d 22 29 26 26 62 5b 6f 5d 21 3d 3d 6e 29 72 65 74 Data Ascii: window.Modernizr=function(e,t,n){function r(e){b.cssText=e}function o(e,t){return r(S.join(e+";")+(t\|\|""))}function a(e,t){return typeof e===t}function i(e,t){return!!~(""+e).indexOf(t)}function c(e,t){for(var r in e){var o=e[r];if(!i(o,"-")&&b[o]!==n)ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.4	50739	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	1499	OUT	GET /assets/js/vendor/rapidworker-1.2.js HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A3=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; A1S=d=AQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA&S=AQAAAg-EU5746jgF7j0GOdqtdDQ; cmp=t=1709508392&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=5f754106410cdef1:T=1709508399:RT=1709508399:S=ALNI_MYnIUVMVlsIYkFHA-RSwJMdhkowYw; __gpi=UID=00000dcf03e41a0c:T=1709508399:RT=1709508399:S=ALNI_MZSweHx1DoXuB5AdbYDZ0AYIee9iA; __eoi=ID=7bb82c97959dc59c:T=1709508399:RT=1709508399:S=AA-AfjZPE8XmncuK1jLB_EFwQ-PX; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4
2024-03-03 23:27:05 UTC	1148	IN	HTTP/1.1 404 Date: Sun, 03 Mar 2024 23:25:10 GMT Content-Type: text/html;charset=utf-8 Server: ATS last-modified: Fri, 01 Mar 2024 18:13:54 GMT etag: "fd48d3157cfa6b6e6fec3e50787e357aa3288c88-gzip" vary: origin,accept-encoding strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: max-age=300, must-revalidate x-frame-options: DENY Referrer-Policy: no-referrer-when-downgrade Age: 114 Content-Length: 41749 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: __gpi=DELETE; Expires=Sun, 3 Mar 2024 23:17:04 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __gpi=DELETE; Expires=Sun, 3 Mar 2024 23:17:04 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Sun, 3 Mar 2024 23:17:04 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Sun, 3 Mar 2024 23:17:04 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 41 4f 4c 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 61 74 68 3a 67 75 63 65 3a 63 6f 6e 73 65 6e 74 2d 68 6f 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Not Found - AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 41 4f 4c 43 75 73 74 6f 6d 65 72 43 61 72 65 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 61 70 70 5f 69 64 22 3a 22 33 36 35 33 39 38 35 38 33 34 39 33 34 34 32 22 2c 22 74 77 69 74 74 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 2c 22 74 77 69 74 74 65 72 5f 75 73 65 72 6e 61 6d 65 22 3a 22 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 7d 2c 22 68 61 73 5f Data Ascii: ge_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 2f 61 6c 65 72 74 2f 7b 73 6b 75 7d 3f 73 69 74 65 3d 75 73 61 6f 6c 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 75 74 69 6c 69 74 79 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 75 74 69 6c 69 74 79 2d 7b 73 75 70 70 6f 72 74 5f 6c 65 76 65 6c 7d 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 66 6f 6f 74 65 72 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 66 6f 6f 74 65 72 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 72 61 69 6c 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 72 61 69 6c 2d 7b 73 75 70 Data Ascii: /alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/cms/help-central-usaol-navigation-rail-{sup
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 6d 2f 70 73 73 74 61 74 69 63 2f 61 6f 6c 68 65 6c 70 2d 70 72 6f 64 2f 31 38 2e 35 2e 34 39 2f 61 73 73 65 74 73 2f 6d 6f 64 75 6c 65 73 2f 22 3b 0a 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 61 73 73 65 74 73 55 72 6c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 70 73 73 74 61 74 69 63 2f 61 6f 6c 68 65 6c 70 2d 70 72 6f 64 2f 31 38 2e 35 2e 34 39 2f 61 73 73 65 74 73 22 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6f 61 2f 63 6f 6e 73 65 6e 74 2e 6a 73 22 20 61 73 79 6e 63 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 Data Ascii: m/psstatic/aolhelp-prod/18.5.49/assets/modules/";AolHelpGlobals.assetsUrl = "https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.49/assets";</script><script type="text/javascript" src="https://s.yimg.com/oa/consent.js" async></script><script type="text/java
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 20 62 79 20 65 6d 61 69 6c 2c 20 63 68 61 74 2c 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 6f 74 Data Ascii: by email, chat, or phone number."><meta property="og:image" content="https://s.aolcdn.com/os/help-main/content-types/l/faq.png"><meta property="og:url" content="https://"><meta name="twitter:card" content="summary"><meta name="twitter:title" content="Not
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 67 73 22 29 2e 73 70 6c 69 74 28 22 2c 22 29 2c 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 28 73 2e 63 6f 6e 73 6f 6c 65 3d 21 30 2c 6f 2e 69 6e 64 65 78 4f 66 28 22 64 65 76 22 29 21 3d 3d 2d 31 26 26 28 73 2e 64 65 76 3d 21 30 29 2c 6f 2e 69 6e 64 65 78 4f 66 28 22 6e 72 5f 64 65 76 22 29 21 3d 3d 2d 31 26 26 28 73 2e 6e 72 44 65 76 3d 21 30 29 29 7d 63 61 74 63 68 28 63 29 7b 7d 73 2e 6e 72 44 65 76 26 26 69 2e 6f 6e 28 22 69 6e 74 65 72 6e 61 6c 2d 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 74 2e 73 74 61 63 6b 29 7d 29 2c 73 2e 64 65 76 26 26 69 2e 6f 6e 28 22 66 6e 2d 65 72 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 28 65 2e 73 74 61 Data Ascii: gs").split(","),console&&"function"==typeof console.log&&(s.console=!0,o.indexOf("dev")!==-1&&(s.dev=!0),o.indexOf("nr_dev")!==-1&&(s.nrDev=!0))}catch(c){}s.nrDev&&i.on("internal-error",function(t){r(t.stack)}),s.dev&&i.on("fn-err",function(t,n,e){r(e.sta
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 7b 7d 5d 2c 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 7d 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6f 3d 74 28 22 65 65 22 29 2c 69 3d 74 28 22 68 61 6e 64 6c 65 22 29 2c 61 3d 74 28 39 29 2c 73 3d 74 28 38 29 2c 63 3d 22 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 22 2c 66 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 75 3d 22 72 65 73 6f 75 72 63 65 74 69 6d 69 6e 67 62 75 66 66 65 72 66 75 6c 6c 22 2c 64 3d 22 62 73 74 52 65 73 6f 75 72 63 65 Data Ascii: {}],4:[function(t,n,e){function r(t){}if(window.performance&&window.performance.timing&&window.performance.getEntriesByType){var o=t("ee"),i=t("handle"),a=t(9),s=t(8),c="learResourceTimings",f="addEventListener",u="resourcetimingbufferfull",d="bstResource
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 43 22 2b 63 5d 28 29 7d 2c 21 31 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 66 5d 28 22 73 63 72 6f 6c 6c 22 2c 72 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 64 6f 63 75 6d 65 6e 74 5b 66 5d 28 22 6b 65 79 70 72 65 73 73 22 2c 72 2c 21 31 29 2c 64 6f 63 75 6d 65 6e 74 5b 66 5d 28 22 63 6c 69 63 6b 22 2c 72 2c 21 31 29 7d 7d 2c 7b 7d 5d 2c 35 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 3b 6e 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 3b 29 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 3b 6e 26 26 6f 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 73 2e 69 6e 50 6c 61 63 65 28 74 2c 5b 75 2c 64 5d 2c 22 2d 22 2c 69 29 Data Ascii: C"+c]()},!1)),document[f]("scroll",r,{passive:!0}),document[f]("keypress",r,!1),document[f]("click",r,!1)}},{}],5:[function(t,n,e){function r(t){for(var n=t;n&&!n.hasOwnProperty(u);)n=Object.getPrototypeOf(n);n&&o(n)}function o(t){s.inPlace(t,[u,d],"-",i)
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 75 3d 5b 22 61 72 72 61 79 42 75 66 66 65 72 22 2c 22 62 6c 6f 62 22 2c 22 6a 73 6f 6e 22 2c 22 74 65 78 74 22 2c 22 66 6f 72 6d 44 61 74 61 22 5d 2c 64 3d 73 2e 52 65 71 75 65 73 74 2c 6c 3d 73 2e 52 65 73 70 6f 6e 73 65 2c 70 3d 73 2e 66 65 74 63 68 2c 68 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 6d 3d 22 6e 72 40 63 6f 6e 74 65 78 74 22 3b 64 26 26 6c 26 26 70 26 26 28 61 28 75 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 28 64 5b 68 5d 2c 6e 2c 66 29 2c 72 28 6c 5b 68 5d 2c 6e 2c 66 29 7d 29 2c 72 28 73 2c 22 66 65 74 63 68 22 2c 63 29 2c 6f 2e 6f 6e 28 63 2b 22 65 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 6e 2e 68 65 61 64 65 72 73 2e 67 65 74 28 22 63 6f 6e 74 65 6e 74 Data Ascii: u=["arrayBuffer","blob","json","text","formData"],d=s.Request,l=s.Response,p=s.fetch,h="prototype",m="nr@context";d&&l&&p&&(a(u,function(t,n){r(d[h],n,f),r(l[h],n,f)}),r(s,"fetch",c),o.on(c+"end",function(t,n){var e=this;if(n){var r=n.headers.get("content
2024-03-03 23:27:05 UTC	1300	IN	Data Raw: 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 64 2e 69 6e 50 6c 61 63 65 28 6e 2c 5b 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 5d 2c 22 66 6e 2d 22 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 75 2e 63 6f 6e 74 65 78 74 28 74 29 3b 74 2e 72 65 61 64 79 53 74 61 74 65 3e 33 26 26 21 6e 2e 72 65 73 6f 6c 76 65 64 26 26 28 6e 2e 72 65 73 6f 6c 76 65 64 3d 21 30 2c 75 2e 65 6d 69 74 28 22 78 68 72 2d 72 65 73 6f 6c 76 65 64 22 2c 5b 5d 2c 74 29 29 2c 64 2e 69 6e 50 6c 61 63 65 28 74 2c 67 2c 22 66 6e 2d 22 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 79 2e 70 75 73 68 28 74 29 2c 68 26 26 28 62 3f 62 2e 74 68 65 6e 28 61 29 3a 77 3f 77 28 61 29 3a 28 45 3d 2d 45 2c 4f 2e 64 61 74 61 3d 45 29 Data Ascii: nction r(t,n){d.inPlace(n,["onreadystatechange"],"fn-",s)}function o(){var t=this,n=u.context(t);t.readyState>3&&!n.resolved&&(n.resolved=!0,u.emit("xhr-resolved",[],t)),d.inPlace(t,g,"fn-",s)}function i(t){y.push(t),h&&(b?b.then(a):w?w(a):(E=-E,O.data=E)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.4	50738	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:04 UTC	574	OUT	GET /psstatic/aolhelp-prod/18.5.49/assets/js/vendor/jquery-2.0.1.min.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:05 UTC	486	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 186633 Content-Type: application/javascript Date: Sun, 03 Mar 2024 23:27:04 GMT Etag: "aa9a6dc056f54e67ca23c4dd89128c67" Last-Modified: Fri, 01 Mar 2024 19:31:31 GMT Server: ECAcc (nya/7938) Vary: Accept-Encoding x-amz-id-2: 9OnirRXSvRsQ0xIwzBzJcmOle3DKKm6W2t/Wr5/ngRA1k31Qt4A7Ww/3O5axGmb8QQ2GyF4hVGA= x-amz-request-id: B5TMDZJWZXFARKX3 x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 83518 Connection: close
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 30 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 2f 2f 40 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6a 71 75 65 72 79 2d 32 2e 30 2e 31 2e 6d 69 6e 2e 6d 61 70 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 74 79 70 65 6f 66 20 75 6e 64 65 66 69 6e 65 64 2c 69 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 6f 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 73 3d 6f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 61 3d 65 2e 6a 51 75 65 72 79 2c 75 3d 65 2e 24 2c 6c 3d 7b 7d 2c 63 3d 5b 5d 2c 66 3d 22 32 2e 30 2e Data Ascii: /! jQuery v2.0.1 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license//@ sourceMappingURL=jquery-2.0.1.min.map/(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],f="2.0.
2024-03-03 23:27:05 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 4a 2e 43 48 49 4c 44 2e 74 65 73 74 28 65 5b 30 5d 29 3f 6e 75 6c 6c 3a 28 65 5b 33 5d 26 26 65 5b 34 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 65 5b 32 5d 3d 65 5b 34 5d 3a 6e 26 26 56 2e 74 65 73 74 28 6e 29 26 26 28 74 3d 76 74 28 6e 2c 21 30 29 29 26 26 28 74 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 6e 2e 6c 65 6e 67 74 68 2d 74 29 2d 6e 2e 6c 65 6e 67 74 68 29 26 26 28 65 5b 30 5d 3d 65 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 74 29 2c 65 5b 32 5d 3d 6e 2e 73 6c 69 63 65 28 30 2c 74 29 29 2c 65 2e 73 6c 69 63 65 28 30 2c 33 29 29 7d 7d 2c 66 69 6c 74 65 72 3a 7b 54 41 47 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 6e 74 2c 72 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 2a 22 3d 3d Data Ascii: J.CHILD.test(e[0])?null:(e[3]&&e[4]!==undefined?e[2]=e[4]:n&&V.test(n)&&(t=vt(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(nt,rt).toLowerCase();return"*"==
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 29 7d 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 31 2c 69 3d 78 2e 44 65 66 65 72 72 65 64 28 29 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 2d 2d 72 7c 7c 69 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 6f 2c 5b 6f 5d 29 7d 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 74 3d 65 2c 65 3d 75 6e 64 65 66 69 6e 65 64 29 2c 65 3d 65 7c 7c 22 66 78 22 3b 77 68 69 6c 65 28 73 2d 2d 29 6e 3d 48 2e 67 65 74 28 6f 5b 73 5d 2c Data Ascii: ){clearTimeout(r)}})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(e,t){var n,r=1,i=x.Deferred(),o=this,s=this.length,a=function(){--r\|\|i.resolveWith(o,[o])};"string"!=typeof e&&(t=e,e=undefined),e=e\|\|"fx";while(s--)n=H.get(o[s],
2024-03-03 23:27:05 UTC	2	IN	Data Raw: 63 75 Data Ascii: cu
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 6d 65 6e 74 7c 7c 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3a 78 2e 6d 65 72 67 65 28 5b 5d 2c 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 78 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 78 2e 6d 61 70 28 74 68 69 73 2c 74 2c 6e 29 3b 72 65 74 75 72 6e 22 55 6e 74 69 6c 22 21 3d 3d 65 2e 73 6c 69 63 65 28 2d 35 29 26 26 28 72 3d 6e 29 2c 72 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 69 3d 78 2e 66 69 6c 74 65 72 28 72 2c 69 29 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3e 31 26 26 28 4b 5b 65 5d 7c 7c 78 2e 75 6e 69 71 75 65 28 69 29 2c 4a 2e 74 65 73 74 28 65 29 26 26 69 2e 72 65 76 65 72 73 65 28 29 29 2c 74 68 69 73 2e Data Ascii: ment\|\|e.contentWindow.document:x.merge([],e.childNodes)}},function(e,t){x.fn[e]=function(n,r){var i=x.map(this,t,n);return"Until"!==e.slice(-5)&&(r=n),r&&"string"==typeof r&&(i=x.filter(r,i)),this.length>1&&(K[e]\|\|x.unique(i),J.test(e)&&i.reverse()),this.
2024-03-03 23:27:05 UTC	16383	IN	Data Raw: 64 28 72 29 3a 65 29 7d 29 2e 63 6f 6d 70 6c 65 74 65 28 6e 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 61 63 68 28 6e 2c 6f 7c 7c 5b 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 74 2c 65 5d 29 7d 29 2c 74 68 69 73 7d 2c 78 2e 65 61 63 68 28 5b 22 61 6a 61 78 53 74 61 72 74 22 2c 22 61 6a 61 78 53 74 6f 70 22 2c 22 61 6a 61 78 43 6f 6d 70 6c 65 74 65 22 2c 22 61 6a 61 78 45 72 72 6f 72 22 2c 22 61 6a 61 78 53 75 63 63 65 73 73 22 2c 22 61 6a 61 78 53 65 6e 64 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 78 2e 66 6e 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2c 65 29 7d 7d 29 2c 78 2e 65 78 74 65 6e 64 28 7b 61 63 74 69 76 65 3a 30 2c 6c 61 73 74 4d 6f 64 69 66 69 65 64 3a 7b 7d 2c 65 Data Ascii: d(r):e)}).complete(n&&function(e,t){s.each(n,o\|\|[e.responseText,t,e])}),this},x.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){x.fn[t]=function(e){return this.on(t,e)}}),x.extend({active:0,lastModified:{},e
2024-03-03 23:27:05 UTC	1600	IN	Data Raw: 68 69 73 2e 6f 66 66 73 65 74 28 29 2c 78 2e 6e 6f 64 65 4e 61 6d 65 28 65 5b 30 5d 2c 22 68 74 6d 6c 22 29 7c 7c 28 72 3d 65 2e 6f 66 66 73 65 74 28 29 29 2c 72 2e 74 6f 70 2b 3d 78 2e 63 73 73 28 65 5b 30 5d 2c 22 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 22 2c 21 30 29 2c 72 2e 6c 65 66 74 2b 3d 78 2e 63 73 73 28 65 5b 30 5d 2c 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 2c 21 30 29 29 2c 7b 74 6f 70 3a 74 2e 74 6f 70 2d 72 2e 74 6f 70 2d 78 2e 63 73 73 28 6e 2c 22 6d 61 72 67 69 6e 54 6f 70 22 2c 21 30 29 2c 6c 65 66 74 3a 74 2e 6c 65 66 74 2d 72 2e 6c 65 66 74 2d 78 2e 63 73 73 28 6e 2c 22 6d 61 72 67 69 6e 4c 65 66 74 22 2c 21 30 29 7d 7d 7d 2c 6f 66 66 73 65 74 50 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: his.offset(),x.nodeName(e[0],"html")\|\|(r=e.offset()),r.top+=x.css(e[0],"borderTopWidth",!0),r.left+=x.css(e[0],"borderLeftWidth",!0)),{top:t.top-r.top-x.css(n,"marginTop",!0),left:t.left-r.left-x.css(n,"marginLeft",!0)}}},offsetParent:function(){return th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.4	50740	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:05 UTC	571	OUT	GET /psstatic/aolhelp-prod/18.5.49/assets/js/vendor/swipe-2.0.min.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:05 UTC	833	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 186634 Content-Type: application/javascript Date: Sun, 03 Mar 2024 23:27:05 GMT Etag: "ea2d60094af73e790a5b57a0c4e3ff76" Last-Modified: Fri, 01 Mar 2024 19:31:31 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/788D) Vary: Accept-Encoding x-amz-id-2: 5hxmeAycYhyv67tkTzvyAhsA7/BT7gnQN9bmo9p2PDMTnJp1/KexCI9l3QQLm/J8UOjuF6naNH0= x-amz-request-id: B5TH0Y1K2Z98NMCM x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 4493 Connection: close
2024-03-03 23:27:05 UTC	4493	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 53 77 69 70 65 28 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 68 3d 45 2e 63 68 69 6c 64 72 65 6e 2c 77 3d 41 72 72 61 79 28 68 2e 6c 65 6e 67 74 68 29 2c 6d 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 77 69 64 74 68 7c 7c 74 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 68 2e 6c 65 6e 67 74 68 2a 6d 2b 22 70 78 22 3b 66 6f 72 28 76 61 72 20 6e 3d 68 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 7b 76 61 72 20 65 3d 68 5b 6e 5d 3b 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 6d 2b 22 70 78 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 64 65 78 22 2c 6e 29 2c 66 2e 74 72 61 6e 73 69 74 69 6f Data Ascii: function Swipe(t,n){"use strict";function e(){h=E.children,w=Array(h.length),m=t.getBoundingClientRect().width\|\|t.offsetWidth,E.style.width=h.length*m+"px";for(var n=h.length;n--;){var e=h[n];e.style.width=m+"px",e.setAttribute("data-index",n),f.transitio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.4	50748	52.21.191.144	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:05 UTC	727	OUT	GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LTC55UNV-1B-13RH&gdpr=0 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=e4423880-7610-4ca4-94ee-3ab62836ffe1
2024-03-03 23:27:06 UTC	320	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:05 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=e4423880-7610-4ca4-94ee-3ab62836ffe1; Max-Age=2592000; Expires=Tue, 02 Apr 2024 23:27:05 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-03-03 23:27:06 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.4	50741	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:05 UTC	3852	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=4961998647400783903 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F; KRTBCOOKIE_57=22776-2056953496763385149&KRTB&23339-2056953496763385149; KRTBCOOKIE_107=1471-uid:IKSGvoFb1RGVed5&KRTB&23421-uid:IKSGvoFb1RGVed5; KRTBCOOKIE_18=22947-1813050730410820489; KRTBCOOKIE_153=1923--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&19420--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&22979--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4&KRTB&23462--Vtfxv9ZCcriWQ-R_w8Xwv1cAsLiXg_ErApjDdx4; KRTBCOOKIE_80=22987-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23025-CAESEAIvvYGKi3MwJbcEVt_pRgM&KRTB&23386-CAESEAIvvYGKi3MwJbcEVt_pRgM; KRTBCOOKIE_377=6810-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22918-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&22926-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c&KRTB&23031-fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c; KRTBCOOKIE_1003=22761-82450978-d9b5-11ee-a770-215513ae5a46&KRTB&23275-82450978-d9b5-11ee-a770-215513ae5a46; SyncRTB3=1710288000%3A63%7C1712016000%3A224%7C1714608000%3A69%7C1710633600%3A240_56_250_46_96_3_71_231_166_7_220_13_214_104_54_21_178_5_55_233_266_234_165_8%7C1710028800%3A15_223_2_38; chkChromeAb67Sec=3; DPSync3=1710028800%3A265%7C1710460800%3A257%7C1710633600%3A260_263_262_256_261_259_201_258%7C1709510400%3A248_255; KRTBCOOKIE_466=16530-9c710547-ba4c-4952-9692-0a9d5f6959dd; KRTBCOOKIE_22=14911-4228731401736629831&KRTB&23150-4228731401736629831&KRTB&23527-4228731401736629831; KRTBCOOKIE_1323=23480-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23485-OPU0d427bac8188466daae7f5b623a0353a&KRTB&23524-OPU0d427bac8188466daae7f5b623a0353a; KRTBCOOKIE_860=16335-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23334-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23417-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs&KRTB&23426-ZAJmHKZLUV5Yp1tqUUQFzJoQwMs; KRTBCOOKIE_279=22890-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23011-0349ad77-5ea1-447f-9167-09b58573447a&KRTB&23355-0349ad77-5ea1-447f-9167-09b58573447a; KRTBCOOKIE_27=16735-uid:052965e5-0745-4000-9327-cb3c56f7de4d; KRTBCOOKIE_148=19421-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23486-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23489-uid:CA2F41ACCA684739A1CE374B350A0FEF&KRTB&23539-uid:CA2F41ACCA684739A1CE374B350A0FEF; KRTBCOOKIE_1278=23329-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23340-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7&KRTB&23498-2bd5e0ae-bd99-463c-a74e-cb51b3063cb7; SPugT=1709460901; KRTBCOOKIE_904=23554-3lMj0GdRDKGXY9RtRgflZQ&KRTB&23557-3lMj0GdRDKGXY9RtRgflZQ; KRTBCOOKIE_32=11175-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22713-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&22715-AAACRZsTGVvmHgMCfQoQAAAAAAA&KRTB&23519-AAACRZsTGVvmHgMCfQoQAAAAAAA; KRTBCOOKIE_632=23041-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23047-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23234-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&KRTB&23361-2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do; KRTBCOOKIE_699=22727-AALo807Lyg4AABQ6mW8RGQ; KRTBCOOKIE_188=3189-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553&KRTB&23418-071c8962-82a1-4ccf-aa26-4eb6025e5ced-65e5073b-5553; KRTBCOOKIE_391=22924-4961998647400783903&KRTB&23263-4961998647400783903&KRTB&23481-4961998647400783903; KRTBCOOKIE_52=22772-R35CA9_111D28E16_7B3F98B1&KRTB&23092-R35CA9_111D28E16_7B3F98B1; PugT=1709508423
2024-03-03 23:27:05 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 03 Mar 2024 21:26:07 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-4961998647400783903&KRTB&23263-4961998647400783903&KRTB&23481-4961998647400783903; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 21:26:07 GMT; path=/ Set-Cookie: PugT=1709501167; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 02-Apr-2024 21:26:07 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-03-03 23:27:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.4	50747	34.111.113.62	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:05 UTC	656	OUT	GET /idsync/ex/receive?partner_id=3355&partner_device_id=LTC55UNV-1B-13RH&gdpr=0 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:06 UTC	200	IN	HTTP/1.1 403 Forbidden Content-Length: 134 Content-Type: text/html; charset=UTF-8 Date: Sun, 03 Mar 2024 23:27:06 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:06 UTC	134	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 34 30 33 3c 2f 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e Data Ascii: <!doctype html><meta charset="utf-8"><meta name=viewport content="width=device-width, initial-scale=1"><title>403</title>403 Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.4	50744	52.46.143.56	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:05 UTC	698	OUT	GET /ecm3?ex=rubiconprojectHMT&id=M4s0yq4OSOyhv5St1uqYHQ&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A5m4uM0keE5RtYimSg3trdQ
2024-03-03 23:27:06 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Sun, 03 Mar 2024 23:27:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: BGGK5ER8ZRJQGRENYVFN Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.4	50743	38.68.201.140	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:05 UTC	655	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA9_111D28E16_7B3F98B1.1.000000000000000065E50746
2024-03-03 23:27:06 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Sun, 03 Mar 2024 23:27:05 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-392513225; includeSubDomains
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.4	50746	18.173.219.124	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:05 UTC	847	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LTC55UNV-1B-13RH HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=IAEnIwC1hI; IQPData=2584789195#1709508410116#0#1709508410116; ASDT=0; CSDT=UEQ6MTUzNThfMCZVNjBKNFdF; intentIQCDate=1709508410117
2024-03-03 23:27:06 UTC	1223	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:27:05 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:27:05 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: CSDT=UEQ6MTUxMDZfMCZVNjBKOGVCIzE1MzU4XzAmVTYwSjRXRQ; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:27:05 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=IAEnIwC1hI; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:27:05 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:27:05 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=2584789195#1709508425983#0#1709508410116; Domain=.intentiq.com; Expires=Tue, 03 Mar 2026 23:27:05 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 686217785c5aa257660a5a0c173f7be8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rMnROjcHs7NHLvsZIe1DeSrF3LIQZ2RSADZJwkoFLXG5cHDIDsNOeQ==
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.4	50745	142.251.41.2	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:05 UTC	741	OUT	GET /pixel?google_nid=rp&google_hm=TFRDNTVVTlYtMUItMTNSSA==&google_push=&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:27:06 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 03 Mar 2024 23:27:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:06 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.4	50751	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1834	OUT	POST /p?s=1197803361&t=D0QqElQ2Bn8APrp8,0.2934969343168057&_I=&_AO=0&_NOL=1&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-aa-2%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03KjBZped2yRrWXXhX%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aolfrontpage%04site%03aolfrontpage%04mrkt%03us%04lang%03en-US%04colo%03us-east-1%04_yrid%0302r7skdiua1p4%04_rid%0302r7skdiua1p4%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031709508394%04A_prems%03063%04_E%03dwell%04_ts%031709508424%04_ms%03714%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	730	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:27:06 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.4	50752	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1834	OUT	POST /p?s=1197805788&t=uUhOEGdeCWeWgUaC,0.35204863495886696&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03RAPID-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%037xGepHcwe247JFzY%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031709508395%04A_prems%03013%04_E%03dwell%04_ts%031709508424%04_ms%03724%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	730	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:27:06 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.4	50755	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1797	OUT	POST /p?_V=V&V_sec=pb&evt=ad_prog&t=0.059103505200339246&_sqno=24&ts=26121&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=10051&adUrl=&view=100%25&mtype=na&ad_sys=&ad_lng=&pos=&taken=&r_code=&tag=&client=&crid=&adlbl=&q=&dur=0&dur_d=0 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 2 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.4	50760	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	2426	OUT	POST /p?s=1197803361&t=RgEtHwffrmzWf8ke,0.54062945568576&_I=&_AO=0&_NOL=1&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-aa-2%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03KjBZped2yRrWXXhX%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aolfrontpage%04site%03aolfrontpage%04mrkt%03us%04lang%03en-US%04colo%03us-east-1%04_yrid%0302r7skdiua1p4%04_rid%0302r7skdiua1p4%04abk%03%04A_utm%03%7B%22perf_lcp%22%3A17947%2C%22perf_lcp_elmt%22%3A%22img%22%2C%22perf_lcp_id%22%3A%22wafer-img-native%20wafer-img-loaded%22%2C%22perf_lcp_slk%22%3A%2212%20feet%20of%20snow%2C%20190%20mph%20wind%20gust%20as%20%27life%20threatening%27%20blizzard%20pounds%20California%22%2C%22perf_lcp_url%22%3A%22https%3A%2F%2Fs.aolcdn.com%2Fimages%2Fdims%3Fformat%3Djpg%26quality%3D80%26thumbnail%3D800%252C450%252Cauto%26image_uri%3Dhttps%253A%252F%252Fs.yimg.com%252Fos%252Fcreatr-uploaded-images%252F2024-03%252F462e6bf0-d9a6-11ee-8fdb-97e4a78cac99%26client%3D76f99bdb8f78cd44cc0b%26signature%3D80f3b8ccdec8c8efc49aee8b4ef4a62513d778c4%22%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031709508424%04_ms%03720%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	730	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:27:06 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.4	50761	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1736	OUT	POST /p?_V=V&V_sec=ctrl&evt=ui_focus&t=0.6471951161093976&_sqno=25&ts=26122&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=0&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&value=true&value_e=false&play_pos=0 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 2 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.4	50754	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1796	OUT	POST /p?_V=V&V_sec=pb&evt=ad_prog&t=0.13294059435392902&_sqno=26&ts=26451&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=0&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=10051&adUrl=&view=100%25&mtype=na&ad_sys=&ad_lng=&pos=&taken=&r_code=&tag=&client=&crid=&adlbl=&q=&dur=0&dur_d=0 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 3 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.4	50753	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1835	OUT	POST /p?s=1197805788&t=HQTqneCcJLWqI0cP,0.36044510189572065&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03RAPID-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%037xGepHcwe247JFzY%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031709508424%04A_prems%03724%04_E%03dwell%04_ts%031709508425%04_ms%03074%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	730	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:27:06 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.4	50758	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1737	OUT	POST /p?_V=V&V_sec=ctrl&evt=ui_focus&t=0.06058687350774217&_sqno=27&ts=26452&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&value=false&value_e=true&play_pos=0 HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	1056	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 91 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.4	50756	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	588	OUT	OPTIONS /playback/v1/accounts/6415665815001/videos/6348146758112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://s.yimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:06 UTC	405	IN	HTTP/1.1 200 OK Connection: close Content-Length: 66 Retry-After: 0 Content-Type: application/json Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:27:06 GMT X-Served-By: cache-lga21959-LGA X-Cache: HIT X-Cache-Hits: 0 Bcov-Request-Id: epa-3c181387a5db, epa-3c181387a5db-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: *
2024-03-03 23:27:06 UTC	66	IN	Data Raw: 20 5b 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 22 22 2c 20 22 65 72 72 6f 72 5f 73 75 62 63 6f 64 65 22 3a 22 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 22 41 75 74 68 6f 72 69 7a 65 64 22 20 7d 5d 20 Data Ascii: [{"error_code":"", "error_subcode":"", "message":"Authorized" }]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.4	50759	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1738	OUT	POST /p?_V=V&V_sec=pb&evt=ui_pp&t=0.560913420485283&_sqno=28&ts=26484&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&value=pause&dur=4&req_type=ctrl&req_action= HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 2 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.4	50762	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1807	OUT	POST /p?_V=V&V_sec=pb&evt=v_prog&t=0.6427859091061991&_sqno=29&ts=26485&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&buf_dur=0&dur=4&dur_d=1&src=1&freq=4&td=3&te=2&buff_info=%7B%22seg%22%3A%5B%7B%22buf_dur%22%3A%220%22%7D%5D%7D HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	1055	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 4 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.4	50757	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1850	OUT	POST /p?s=1197803361&t=h9u2t8w0lyQCvxuQ,0.18721968984862225&_I=&_AO=0&_NOL=1&_R=&_P=3.53.44%05_a1s%03d%3DAQABBCQH5WUCEDLv-4Zo7K_QJZscOOVTz5gFEgEBAQFY5mXuZdxH0iMA_eMAAA%26S%3DAQAAAg-EU5746jgF7j0GOdqtdDQ%04_pl%031%04A_v%033.53.44%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-aa-2%04_bt%03rapid%04A_pr%03https%04A_tzoff%031%04A_sid%03KjBZped2yRrWXXhX%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aolfrontpage%04site%03aolfrontpage%04mrkt%03us%04lang%03en-US%04colo%03us-east-1%04_yrid%0302r7skdiua1p4%04_rid%0302r7skdiua1p4%04abk%03%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031709508424%04A_prems%03714%04_E%03dwell%04_ts%031709508425%04_ms%03057%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	730	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:27:06 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.4	50763	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1124	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348152174112&time=1709508424774&seq=10&response_time_ms=3267 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:06 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.4	50764	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1790	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=ad_timeout&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&time=1709508418310&seq=6_0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:06 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.4	50774	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	2073	OUT	GET /p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=2&ns_st_sp=1&ns_st_sc=1&ns_st_psq=1&ns_st_asq=1&ns_st_sq=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=6746&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=6746&ns_st_dpt=6746&ns_st_ipt=6746&ns_st_ap=6746&ns_st_dap=6746&ns_st_et=6746&ns_st_det=6746&ns_st_upc=6746&ns_st_dupc=6746&ns_st_iupc=6746&ns_st_upa=6746&ns_st_dupa=6746&ns_st_iupa=6746&ns_st_lpc=6746&ns_st_dlpc=6746&ns_st_lpa=6746&ns_st_dlpa=6746&ns_st_pa=6746&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508425085&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=1&ns_st_dpc=1&ns_st_pp=1&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=17F9765074314b78a30f4d41709508394
2024-03-03 23:27:06 UTC	494	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:27:06 GMT set-cookie: UID=17F9765074314b78a30f4d41709508394; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 8ca7450d970f904109dac7e068234b78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: j0sH65A6rkkYFAkLdHEuwdkbnL9Oiw236tRC-FZcF7zQXLjXxmbQkQ==
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.4	50776	142.250.176.194	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1728	OUT	GET /pagead/interaction/?ai=CxTroMAflZfKvAc-GvPIPgdiH2ASO1rX8YLrSurXDCcCNtwEQASAAYMkGggEXY2EtcHViLTIzMDUzMDQ5OTkxODg2NTPIAQngAgCoAwHIAwKqBLECT9DvSMJSpyCyAhWqjPawHm60WGrlSSuI1jiKunzcK7g_taPHaSal6xuEv6HI0XIij_AjKSt5PKGMsBuWAoDeHIvqjVRELKO2nwcEgiSFy3xxy-0m0TKbQrUzkwSUzKPJXHE6DUdAqEivkKXA5Y82F8DXxOXksw1NrV9fumwmym67yeKDsHngoFi7mDK4dst112_4cBiTQ2mhB5k23KyrwM9oqgtIwn8T8dX5kQlV_WEN1-6HiqreIz3JsSsRddikwXVkPZ0BuB_805WabouBMa6FVmNBasDASOeMka1WUzK3ty62HLhihsLR3g5D2cu4YEaBFJWrC3ObvjzJoCjYfqkN_EtYoYgp7g1fxpaA6foohRvod1_9m7izyY9u_0OQxOxIL2fQh7J1OW-41VyZP9vgBAGABvGLmIbm6JGasQGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOliG9q-Hn9mEA_oLAggBgAwB4g0TCJ2_sIef2YQDFU8DTwgdAewBS9AVAYAXAQ&sigh=YxkGrpTMBo4&cid=CAQSTgB7FLtqIC6c2xhbYUxTjdtwxcFKEatG9Hg15woZxaaD3JCYBtfB8D_hOqlV_3tCsG-VSmL43Y6Qs7gyx9eDdqkYZ5RNip_72GV8-O5D2A&label=window_focus&gqid&qqid=CPKHsoef2YQDFU8DTwgdAewBSw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:27:06 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sun, 03 Mar 2024 23:27:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.4	50769	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	2044	OUT	GET /p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=3&ns_st_sp=1&ns_st_sc=1&ns_st_psq=2&ns_st_asq=2&ns_st_sq=2&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=6746&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=6746&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=6746&ns_st_dap=0&ns_st_et=6955&ns_st_det=209&ns_st_upc=6746&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=6746&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=6746&ns_st_dlpc=0&ns_st_lpa=6746&ns_st_dlpa=0&ns_st_pa=6746&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508425294&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=1&ns_st_dpc=0&ns_st_pp=1&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=17F9765074314b78a30f4d41709508394
2024-03-03 23:27:06 UTC	494	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:27:06 GMT set-cookie: UID=17F9765074314b78a30f4d41709508394; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 145a3c1a881b9a37bb761d4b0890859a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: nnxYq-eIeFoN8tf-EtOzW1wZ1tYpf6nHIhpeMdoQTQRxHYVC2UWLVQ==
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.4	50768	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1101	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348146758112&time=1709508424776&seq=11 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:06 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.4	50767	18.238.55.69	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:06 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Sun, 03 Mar 2024 23:27:06 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 8df8d5dfeb782c83ceeb5679f78a9e4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P4 X-Amz-Cf-Id: -5x3mUff_WynGVougVwuzFTFv2lJweDQwRz_nJpgec0o2yKPMvy_uQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.4	50780	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1751	OUT	POST /p?_V=V&V_sec=pb&evt=ui_pp&t=0.02121045369769381&_sqno=30&ts=26693&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&value=play&dur=4&req_type=player&req_action=background HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:06 UTC	1057	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 119 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.4	50777	142.250.176.194	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1029	OUT	GET /pagead/interaction/?ai=&sigh=BpnfxIaauQU&cid=CAQSTgB7FLtqIC6c2xhbYUxTjdtwxcFKEatG9Hg15woZxaaD3JCYBtfB8D_hOqlV_3tCsG-VSmL43Y6Qs7gyx9eDdqkYZ5RNip_72GV8-O5D2A&label=window_focus&gqid&qqid=CJ6_sIef2YQDFU8DTwgdAewBSw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2a58e37a8fa676b953805fa39878c09b.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:27:06 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Sun, 03 Mar 2024 23:27:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.4	50778	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1739	OUT	POST /p?_V=V&V_sec=pb&evt=ui_pp&t=0.8939973438368736&_sqno=31&ts=26708&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&value=pause&dur=4&req_type=ctrl&req_action= HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:07 UTC	1056	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 72 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.4	50771	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	4341	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1709508424785&usage=ads!7.3.3%2Cbc-used-as-getter%2CbcPlaylistUi!5.1.1%2CcontribAds6Shim!%2Cdocument-hidden%2Cima3!5.2.6%2Cnot-viewable%2Cnot-viewable-0%2Coverlay!3.0.0%2Cvariant%253Aen%2Cvhs-608%2Cvhs-aes%2Cvhs-demuxed%2Cvhs-webvtt%2Cviewable%2Cviewable-1&event=video_engagement&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68.902&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&qos.bitrates=%7B%22bitrates%22%3A%5B%5B1709508420501%2C1528973%5D%2C%5B1709508422304%2C1505745%5D%5D%2C%22playlists%22%3A%5B%5D%2C%22rendered%22%3A%5B%5B1709508413594%2C453200%5D%5D%2C%22throughput%22%3A%5B%5B1709508420501%2C33726673%5D%2C%5B1709508422304%2C45134978%5D%5D%7D&qos.events.ad.play=1709508408279&qos.events.ad.loadstart=1709508408533&qos.events.ad.loadedmetadata=1709508413338&qos.events.ad.loadeddata=1709508413582&qos.events.content.playing=1709508418330&qos.events.content.pause=1709508424782&qos.player.dimensions=%5B%5B1709508413338%2C%220x0%22%2C%22368x276%22%5D%5D&qos.player.pixelratio=%5B%5B1709508413338%2C1%5D%5D&qos.player.screendimensions=%5B%5B1709508413338%2C%221280x1024%22%5D%5D&qos.frames.dropped=3&qos.frames.corrupted=0&qos.frames.total=126&seq=12_0&player_height=276&player_width=368&rendition_width=480&rendition_height=270&rendition_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F2e87fe6a-d240-48f3-8364-3386060397ee%2F6s%2Frendition.m3u8%3Ffastly_token%3DNjVlNTVmNmVfMjExYmUzODAyYzk1ODc2YzlmN2U2MTNlMzE3OWZlODEyZGQzZDQzNDhhNWRlNDJmMzllMDE4MTI1ZTU1NTEyOA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&rendition_indicated_bps=453200&rendition_mime_type=application%2Fvnd.apple.mpegurl&media_requests=5&media_transfer_duration=7410&media_bytes_transferred=1148736&measured_bps=1505745&media_seconds_loaded=29.922&forward_buffer_seconds=7.783999000000001&qos.derived_range=0..3&range=0..3 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:06 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.4	50779	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1808	OUT	POST /p?_V=V&V_sec=pb&evt=v_prog&t=0.19018659787877512&_sqno=32&ts=26714&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-aa-2&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a0a6T00000R2KYJQA3&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=video&pct=aolfrontpage&pd=&pg_name=&pkgt=&pls=b9b3c6c5-2cd7-4937-8390-628222cda75f&pltype=ev-desktop&pstaid=3caca4ca-191c-3933-bab5-595ca1d1495a&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.3.9&_rid=02r7skdiua1p4&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=&test=aol-aa-2&type=vod+short&ar=1.78&ver=td-app-aol&vid=3caca4ca-191c-3933-bab5-595ca1d1495a&vidPos=&vlng=68.971&vs=bdud5hbm&tmout=10&vptm=10&preload=true&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view=100%25&buf_dur=0&dur=4&dur_d=0&src=1&freq=0&td=0&te=0&buff_info=%7B%22seg%22%3A%5B%7B%22buf_dur%22%3A%220%22%7D%5D%7D HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:07 UTC	1056	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 50 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 2 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:07 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Expires=Tue, 4 Mar 2025 05:27:07 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.4	50781	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	1223	OUT	GET /playback/v1/accounts/6415665815001/videos/6348146758112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg3MjEsImlhdCI6MTcwOTUwODQyMX0.a9zCIz4Ibz_aw8Rz_p8hCZjjj51kpxwqG0NJ0CZdsmTZLTVR2tmZy_pw5mtA5kvCoRFletgl3nZgYZ6ncyr0KPJucSoT56zO4GewyKuJVm9I415epHhraY_6bvwwWYcTSwtOTddsSHTLXw17NTnIZgzNW7EqAdPru1Agomx2xVualmIvkxkidNYoV7s62-WEKe_z7yVn1WXx_zZjM9dF3zeq-Qgc_E7RGc5zOYAxAmqNxV1B5hoUsK9OoSAihotWr17tUEAujSS3ek9E44_wXb2y5JFUyRJ6rNG5i4Pmu3tBCDMjlDNDwnz4xg9gIkixh7yZlfk93ugyVqopNFfQpg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:06 UTC	573	IN	HTTP/1.1 200 OK Connection: close Account-Status: APPROVED Content-Type: application/json; charset=UTF-8 Policy-Key-Accountid: Powered-By: BC Powered-From: us-east-1c X-Has-Manifest-Url-Ttl: true Expires: Sun, 03 Mar 2024 23:31:49 GMT Date: Sun, 03 Mar 2024 23:27:06 GMT X-Served-By: cache-lga21953-LGA X-Cache: HIT X-Cache-Hits: 8 Bcov-Request-Id: epa-a8e96595a31b, epa-61fbb40c76c1-cr, epa-ea47ae6e216a-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: * transfer-encoding: chunked
2024-03-03 23:27:06 UTC	5	IN	Data Raw: 36 65 33 0d 0a Data Ascii: 6e3
2024-03-03 23:27:06 UTC	1371	IN	Data Raw: 7b 22 70 6f 73 74 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 38 66 36 31 63 66 39 37 2d 37 63 34 64 2d 34 65 36 32 2d 39 63 36 34 2d 31 63 34 31 37 34 33 65 32 63 63 64 2f 6d 61 69 6e 2f 31 32 38 30 78 37 32 30 2f 31 39 73 34 30 32 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 30 39 35 33 30 33 35 34 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 38 66 36 31 63 66 39 37 2d 37 63 34 64 2d 34 65 36 32 2d 39 63 36 34 2d 31 63 34 31 37 34 33 65 32 63 63 64 2f 6d 61 69 6e 2f 31 Data Ascii: {"poster":"https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/8f61cf97-7c4d-4e62-9c64-1c41743e2ccd/main/1280x720/19s402ms/match/image.jpg?akamai_token=exp=1709530354~acl=/image/v1/jit/6415665815001/8f61cf97-7c4d-4e62-9c64-1c41743e2ccd/main/1
2024-03-03 23:27:06 UTC	392	IN	Data Raw: 2f 31 39 73 34 30 32 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 2a 7e 68 6d 61 63 3d 63 66 35 33 32 62 30 61 61 37 63 33 65 38 35 66 64 66 62 36 66 33 61 32 63 36 61 61 32 37 33 62 33 63 34 38 61 33 31 63 39 64 34 35 38 36 63 62 33 65 65 35 38 64 39 31 35 37 36 30 30 38 64 33 22 7d 5d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 74 61 67 73 22 3a 5b 5d 2c 22 63 75 65 5f 70 6f 69 6e 74 73 22 3a 5b 5d 2c 22 63 75 73 74 6f 6d 5f 66 69 65 6c 64 73 22 3a 7b 7d 2c 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 36 34 31 35 36 36 35 38 31 35 30 30 31 22 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 63 6f 64 65 63 73 22 3a 22 61 76 63 31 2c 6d 70 34 61 22 2c 22 65 78 74 5f 78 5f 76 65 72 73 69 6f 6e 22 3a 22 34 22 2c 22 73 72 63 22 3a 22 68 74 Data Ascii: /19s402ms/match/image.jpg*~hmac=cf532b0aa7c3e85fdfb6f3a2c6aa273b3c48a31c9d4586cb3ee58d91576008d3"}],"description":null,"tags":[],"cue_points":[],"custom_fields":{},"account_id":"6415665815001","sources":[{"codecs":"avc1,mp4a","ext_x_version":"4","src":"ht
2024-03-03 23:27:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:27:06 UTC	4	IN	Data Raw: 36 38 0d 0a Data Ascii: 68
2024-03-03 23:27:06 UTC	104	IN	Data Raw: 4e 6a 56 6c 4e 54 45 31 4e 57 4a 66 59 7a 41 32 4d 57 46 6c 4f 54 6c 6b 59 7a 67 77 4e 6d 52 68 4e 54 63 31 4e 7a 45 30 5a 6a 6b 7a 59 54 68 68 4d 44 6c 6d 59 32 45 32 59 7a 4d 79 4f 54 59 77 59 7a 4d 30 4d 6a 6c 6c 59 57 46 6d 4e 6d 49 31 4d 54 5a 6c 4f 54 6b 79 4d 44 63 34 4d 6d 51 31 59 77 25 33 44 25 33 44 Data Ascii: NjVlNTE1NWJfYzA2MWFlOTlkYzgwNmRhNTc1NzE0ZjkzYThhMDlmY2E2YzMyOTYwYzM0MjllYWFmNmI1MTZlOTkyMDc4MmQ1Yw%3D%3D
2024-03-03 23:27:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-03 23:27:06 UTC	5	IN	Data Raw: 31 30 38 0d 0a Data Ascii: 108
2024-03-03 23:27:06 UTC	264	IN	Data Raw: 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 70 65 67 55 52 4c 22 7d 2c 7b 22 63 6f 64 65 63 73 22 3a 22 61 76 63 31 2c 6d 70 34 61 22 2c 22 70 72 6f 66 69 6c 65 73 22 3a 22 75 72 6e 3a 6d 70 65 67 3a 64 61 73 68 3a 70 72 6f 66 69 6c 65 3a 69 73 6f 66 66 2d 6c 69 76 65 3a 32 30 31 31 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 64 61 73 68 2f 6c 69 76 65 2d 62 61 73 65 75 72 6c 2f 63 6c 65 61 72 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 38 66 36 31 63 66 39 37 2d 37 63 34 64 2d 34 65 36 32 2d 39 63 36 34 2d 31 63 34 31 37 34 33 65 32 63 63 64 2f 36 73 2f 6d 61 6e 69 66 65 73 74 2e 6d 70 64 3f 66 61 73 74 Data Ascii: ","type":"application/x-mpegURL"},{"codecs":"avc1,mp4a","profiles":"urn:mpeg:dash:profile:isoff-live:2011","src":"https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/clear/6415665815001/8f61cf97-7c4d-4e62-9c64-1c41743e2ccd/6s/manifest.mpd?fast
2024-03-03 23:27:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.4	50775	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	2053	OUT	GET /p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=4&ns_st_sp=1&ns_st_sc=1&ns_st_psq=2&ns_st_asq=2&ns_st_sq=2&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=pause&ns_st_po=6766&ns_st_cl=68971&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=6766&ns_st_dpt=20&ns_st_ipt=20&ns_st_ap=6766&ns_st_dap=20&ns_st_et=6975&ns_st_det=20&ns_st_upc=6766&ns_st_dupc=20&ns_st_iupc=20&ns_st_upa=6766&ns_st_dupa=20&ns_st_iupa=20&ns_st_lpc=6766&ns_st_dlpc=20&ns_st_lpa=6766&ns_st_dlpa=20&ns_st_pa=6766&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508425314&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=2&ns_st_dpc=1&ns_st_pp=2&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=17F9765074314b78a30f4d41709508394
2024-03-03 23:27:06 UTC	494	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:27:06 GMT set-cookie: UID=17F9765074314b78a30f4d41709508394; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 4e1c4d133adc8d8214916eeaddd7af66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: u0kbGHbyEmh75SzhLJy4ECcPkHNqk3o1unD_FSgWuIk8TGNCPVf8YA==
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.4	50770	54.204.110.249	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	464	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-tlMNFJhyr-U_3dvKgwvX52_tI86DQEgnJgATnw HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=30dbf990-58ab-4bd6-b77c-df8285912a1c
2024-03-03 23:27:06 UTC	226	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-03-03 23:27:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.4	50783	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	576	OUT	GET /psstatic/aolhelp-prod/18.5.49/assets/js/vendor/json2-20140204.min.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:06 UTC	833	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 186635 Content-Type: application/javascript Date: Sun, 03 Mar 2024 23:27:06 GMT Etag: "96ab7772a2b7c949edd6b95e6abc8317" Last-Modified: Fri, 01 Mar 2024 19:31:31 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD15AVhNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (nya/7969) Vary: Accept-Encoding x-amz-id-2: unIZjDXYCoQpyrqsY3UsIsfvvK+jmJr2HCMnfKW8if43qRv5q5EjpSLAlhySsaVQQR+oL6ufotY= x-amz-request-id: B5TXRF2BP85RGBQZ x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 2953 Connection: close
2024-03-03 23:27:06 UTC	2953	IN	Data Raw: 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 4a 53 4f 4e 26 26 28 4a 53 4f 4e 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 20 31 30 3e 74 3f 22 30 22 2b 74 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 71 75 6f 74 65 28 74 29 7b 72 65 74 75 72 6e 20 65 73 63 61 70 61 62 6c 65 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 65 73 63 61 70 61 62 6c 65 2e 74 65 73 74 28 74 29 3f 27 22 27 2b 74 2e 72 65 70 6c 61 63 65 28 65 73 63 61 70 61 62 6c 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 65 74 61 5b 74 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 74 2e 63 68 61 72 43 6f Data Ascii: "object"!=typeof JSON&&(JSON={}),function(){"use strict";function f(t){return 10>t?"0"+t:t}function quote(t){return escapable.lastIndex=0,escapable.test(t)?'"'+t.replace(escapable,function(t){var e=meta[t];return"string"==typeof e?e:"\\u"+("0000"+t.charCo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.4	50786	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:06 UTC	632	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "b038ffc2a3543db59d8b131cc5f9585d"
2024-03-03 23:27:07 UTC	463	IN	HTTP/1.1 304 Not Modified Date: Sun, 03 Mar 2024 23:27:07 GMT Etag: "b038ffc2a3543db59d8b131cc5f9585d" Cache-Control: max-age=31536000 Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Vary: Origin ATS-Carp-Promotion: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.4	50796	35.244.159.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	480	OUT	GET /w/1.0/sd?id=540245193&val=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=bff09065-f1f5-0d82-3015-9295a2434f4c\|1709508404
2024-03-03 23:27:07 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Sun, 03 Mar 2024 23:27:07 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.4	50785	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	556	OUT	GET /psstatic/aolhelp-prod/18.5.49/assets/js/main2.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:07 UTC	485	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 186631 Content-Type: application/javascript Date: Sun, 03 Mar 2024 23:27:07 GMT Etag: "68c88fdfdab1e9a2a89d067da6fe4cba" Last-Modified: Fri, 01 Mar 2024 19:31:31 GMT Server: ECAcc (nya/7979) Vary: Accept-Encoding x-amz-id-2: WOxM1yCZ1ZKuYxztbVvCdDAnswQphVKDjYhsY2pSZ4xno9PKkNni22V4bcoWTnJF1RxdDHCMJ9s= x-amz-request-id: 4CF3VDRBTMYTP4BQ x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 3571 Connection: close
2024-03-03 23:27:07 UTC	3571	IN	Data Raw: 69 66 20 28 21 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 29 20 7b 0a 09 77 69 6e 64 6f 77 2e 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 20 3d 20 7b 7d 3b 0a 7d 0a 0a 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 69 64 70 2e 69 6e 63 6c 75 64 65 20 3d 20 28 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 69 64 70 2e 64 65 6e 79 6c 69 73 74 2e 69 6e 64 65 78 4f 66 28 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 62 72 61 6e 64 49 64 29 20 3d 3d 3d 20 2d 31 29 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2c 20 7b 0a 09 69 73 4d 6f 62 69 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 4d 6f 64 65 72 6e 69 7a 72 2e 6d 71 28 27 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 34 34 70 78 29 27 29 3b Data Ascii: if (!AolHelpGlobals) {window.AolHelpGlobals = {};}AolHelpGlobals.idp.include = (AolHelpGlobals.idp.denylist.indexOf(AolHelpGlobals.brandId) === -1);jQuery.extend(AolHelpGlobals, {isMobile: function() {return Modernizr.mq('(max-width: 744px)');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.4	50793	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	1795	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=ad_hard_timeout&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&time=1709508418830&seq=8_0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:07 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.4	50789	34.193.135.180	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3afe3f49-c86a-031c-5d5d-271b26174083
2024-03-03 23:27:07 UTC	456	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3afe3f49-c86a-031c-5d5d-271b26174083; Path=/; Domain=kargo.com; Expires=Mon, 03 Mar 2025 23:27:07 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.4	50795	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	1118	OUT	GET /cksync.php?cs=1&type=bs&ovsid=9c710547-ba4c-4952-9692-0a9d5f6959dd&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1; data-pba=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~8; data-r1=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005~~8; data-c-ts=1709508420; data-bs=9c710547-ba4c-4952-9692-0a9d5f6959dd~~1; data-r=LTC55UNV-1B-13RH~~1
2024-03-03 23:27:07 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-bs=9c710547-ba4c-4952-9692-0a9d5f6959dd~~1;Expires=Sun, 02 Mar 2025 23:27:07 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:07 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:07 GMT Connection: close
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:07 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.4	50790	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	1095	OUT	GET /cksync.php?type=rbcn&ovsid=LTC55UNV-1B-13RH&gdpr=0&gdpr_consent=undefined HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3525100008919577000V10; data-rk=1813050730410820489~~8; data-so=2e1e420d-8454-4533-a1ab-2d47cb95dd71~~8; data-c=3022bf5d-8a4d-4027-8fa8-8c2880782f3f~~1; data-g=CAESEH9ooPefLktf1tmqMqyKXrY~~8; data-co=AAAF_91Z8VIwGQMdv4qvAAAAAAA~~8; data-xu=IKSGvoFb1RGVed5~~8; data-o=a470c6a3-f372-0895-098c-2413748bee6d~~8; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-ze=mo68x8gjbJJi9doJz8TR~~1; data-mf=3b652fc1-53a0-40de-ba73-a4ae557bd47f~~1; data-pba=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~8; data-r1=RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005~~8; data-c-ts=1709508420; data-bs=9c710547-ba4c-4952-9692-0a9d5f6959dd~~1; data-r=LTC55UNV-1B-13RH~~1
2024-03-03 23:27:07 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 53 Content-Type: image/gif Set-Cookie: data-r=LTC55UNV-1B-13RH~~1;Expires=Fri, 30 Aug 2024 23:27:07 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Sun, 03 Mar 2024 23:27:07 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Sun, 03 Mar 2024 23:27:07 GMT Connection: close
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-03-03 23:27:07 UTC	10	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.4	50791	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	1810	OUT	GET /p?c1=2&c2=27061346&ca2=%206035748&ns_type=hidden&ns_st_sv=6.3.5.191015&ns_st_smv=5.10&ns_st_it=r&ns_st_id=1709508398601&ns_st_ec=1&ns_st_sp=1&ns_st_sc=1&ns_st_psq=1&ns_st_asq=1&ns_st_sq=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_cn=1&ns_st_ev=play&ns_st_po=0&ns_st_cl=68971&ns_st_pb=1&ns_st_mp=js_api&ns_st_mv=6.3.5.191015&ns_st_pn=1&ns_st_tp=0&ns_st_ci=3caca4ca-191c-3933-bab5-595ca1d1495a&ns_st_pt=0&ns_st_dpt=0&ns_st_ipt=0&ns_st_ap=0&ns_st_dap=0&ns_st_et=0&ns_st_det=0&ns_st_upc=0&ns_st_dupc=0&ns_st_iupc=0&ns_st_upa=0&ns_st_dupa=0&ns_st_iupa=0&ns_st_lpc=0&ns_st_dlpc=0&ns_st_lpa=0&ns_st_dlpa=0&ns_st_pa=0&ns_st_ldw=0&ns_st_ldo=0&ns_ts=1709508418339&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_lt=19738&ns_st_skc=0&ns_st_dskc=0&ns_st_ska=0&ns_st_dska=0&ns_st_skd=0&ns_st_skt=0&ns_st_dskt=0&ns_st_pc=0&ns_st_dpc=0&ns_st_pp=0&ns_st_br=0&ns_st_rt=100&ns_st_ub=0&ns_st_ki=1200000&ns_st_pr=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&ns_st_sn=null&ns_st_en=null&ns_st_ep=CNN%20Interactive%20Group%2C%20Inc.%20-%20CLA%20%5BCNN%20Core%20-%20Video%5D&ns_st_ct=vc11&ns_st_ge=null&ns_st_st=Yahoo&ns_st_ce=0&ns_st_ia=0&ns_st_ddt=null&ns_st_tdt=null&ns_st_pu=Yahoo&c3=yahoo&ca3=yahoo&c4=us.aolportal&ca4=us.aolportal&c6=CNN&ca6=CNN&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&cs_ucfr=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=17F9765074314b78a30f4d41709508394
2024-03-03 23:27:07 UTC	494	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Sun, 03 Mar 2024 23:27:07 GMT set-cookie: UID=17F9765074314b78a30f4d41709508394; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 79edbcc14c21322a469003752cc30af0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P3 X-Amz-Cf-Id: GW8S2-rX5e8ZKTSyQE_4qgWpxip2J4wgF8FB_d5SyEJb3Wi2uvNo_g==
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.4	50792	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	2010	OUT	GET /v1/video/sapi/streams/6eb22e94-b4f9-360b-9efe-9314028f9017,8f02ba3e-0c7d-39d3-b4b9-1b1804a47d1e,c3db04e7-3946-37de-9e67-03698b49bef9,50fcb985-df33-3558-865d-77035ff99fce,2d3534f1-addb-34bd-bf8b-476c6c63e7f2,dc9d9f9b-83fb-3136-a15f-b4c3ea328ae1,a6807d85-b340-3fab-9d17-ac1ddc74cbf8,519694c4-e078-39f5-a25c-a880feb8099e,23b205a8-99d1-3662-b169-2b335bd13ba3,c4030192-96df-34c7-8f55-f7df83598032,ca4223ee-c954-3bd7-9453-64a45f676a29?ad.pubfamily=aol&srid=3072249782&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=b9b3c6c5-2cd7-4937-8390-628222cda75f&region=US&site=aolhomepage&expb=aol-aa-2&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=93knqf67%2Cdexzzysv%2Cbwmsum1c%2Ct3cjguyy%2Cnv4g2qkv%2C3cg171as%2C6kh83y71%2Cfqbgknpp%2C6l5yyhbl%2C331yoakf%2Cfvtlzpgu&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.3.9&try=1&failover_count=0&ads=ima&nad=0&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aolfrontpage&evp=bcp&hlspre=false&plseq=2&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1 Host: video-api.yql.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; A1S=d=AQABBCsH5WUCEFVvlHfgseRaYiwXZJuv3r4FEgEBAQFY5mXuZdxF0iMA_eMAAA&S=AQAAArBxU9R3c_wnhoM2kXoVR0g; tbla_id=8404dea0-2559-4092-a50a-2410f490712c-tuctcde8cb4; axids=gam=y-WH2U2_lE2uJ4TQJZy4EtZd2kNBlJGl4g~A&dv360=eS1JMGU4Lm1WRTJ1R19xSllTaEw1ZklzRmU0RmFCcUtwWn5B&ydsp=y-qna4_ZFE2uJUwqy2DZV8GBaUnxg07ree~A&tbla=y-2M7LzutE2uIY3.EejgK9yLevSNcf8X.3~A
2024-03-03 23:27:07 UTC	951	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 ps: 93knqf67%2Cdexzzysv%2Cbwmsum1c%2Ct3cjguyy%2Cnv4g2qkv%2C3cg171as%2C6kh83y71%2Cfqbgknpp%2C6l5yyhbl%2C331yoakf%2Cfvtlzpgu cache-control: private access-control-allow-origin: * access-control-allow-methods: GET timing-allow-origin: * access-control-allow-credentials: false access-control-allow-headers: Content-Type access-control-expose-headers: Content-Length y-rid: 4lhv0hhiua1qb x-yahoo-request-id: 4lhv0hhiua1qb x-request-id: 46321ef9-a0e4-4957-a290-afd9770f4f92 x-envoy-upstream-service-time: 32 date: Sun, 03 Mar 2024 23:27:06 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-03 23:27:07 UTC	536	IN	Data Raw: 33 36 34 64 0d 0a 7b 22 71 75 65 72 79 22 3a 7b 22 72 65 73 75 6c 74 73 22 3a 7b 22 6d 65 64 69 61 4f 62 6a 22 3a 5b 7b 22 69 64 22 3a 22 36 65 62 32 32 65 39 34 2d 62 34 66 39 2d 33 36 30 62 2d 39 65 66 65 2d 39 33 31 34 30 32 38 66 39 30 31 37 22 2c 22 6d 65 74 61 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 20 42 65 6c 69 7a 65 2d 66 6c 61 67 67 65 64 20 61 6e 64 20 55 2e 4b 2e 2d 6f 77 6e 65 64 20 63 6f 6d 6d 65 72 63 69 61 6c 20 73 68 69 70 20 63 61 72 72 79 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 32 30 2c 30 30 30 20 6d 65 74 72 69 63 20 74 6f 6e 73 20 6f 66 20 66 65 72 74 69 6c 69 7a 65 72 20 68 61 73 20 73 75 6e 6b 20 69 6e 20 74 68 65 20 52 65 64 20 53 65 61 20 61 66 74 65 72 20 62 Data Ascii: 364d{"query":{"results":{"mediaObj":[{"id":"6eb22e94-b4f9-360b-9efe-9314028f9017","meta":{"attribution":"","description":"A Belize-flagged and U.K.-owned commercial ship carrying more than 20,000 metric tons of fertilizer has sunk in the Red Sea after b
2024-03-03 23:27:07 UTC	1300	IN	Data Raw: 35 2e 4c 30 6d 75 74 6c 67 2d 2d 7e 42 2f 5a 6d 6b 39 63 33 52 79 61 57 30 37 61 44 30 79 4e 7a 59 37 64 7a 30 7a 4e 6a 67 37 63 32 30 39 4d 54 74 68 63 48 42 70 5a 44 31 35 64 47 46 6a 61 48 6c 76 62 67 2d 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 76 69 64 65 6f 2e 61 62 63 6e 65 77 73 70 6c 75 73 2e 63 6f 6d 2f 32 32 64 37 63 36 36 32 66 38 31 65 64 37 63 37 32 39 37 33 63 34 36 63 65 35 66 33 31 63 65 37 22 2c 22 63 72 65 61 74 65 5f 64 61 74 65 22 3a 22 32 30 32 34 2d 30 33 2d 30 33 54 31 34 3a 34 32 3a 31 38 5a 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 7b 22 70 72 6f 76 69 64 65 72 5f 69 64 22 3a 22 76 69 64 65 6f 2e 61 62 63 6e 65 77 73 70 6c 75 73 2e 63 6f 6d 22 2c 22 70 72 6f 76 69 64 65 72 5f 76 69 64 65 Data Ascii: 5.L0mutlg--~B/Zmk9c3RyaW07aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/video.abcnewsplus.com/22d7c662f81ed7c72973c46ce5f31ce7","create_date":"2024-03-03T14:42:18Z","provider":{"provider_id":"video.abcnewsplus.com","provider_vide
2024-03-03 23:27:07 UTC	1300	IN	Data Raw: 68 7a 47 71 45 49 58 30 42 6e 48 75 34 6c 42 4c 67 65 74 6c 6b 71 78 4d 2d 68 5f 61 54 44 57 59 47 6a 56 4c 54 75 6b 59 57 4a 39 5f 4b 30 68 50 4a 33 77 34 6d 58 39 6f 4b 72 49 70 71 7a 2d 4b 51 72 79 42 78 53 31 64 4e 31 55 68 33 49 41 4a 76 53 4c 74 79 35 67 5f 55 47 67 79 77 76 79 50 4f 59 5a 57 46 71 42 75 75 74 58 6c 6a 41 76 79 50 65 46 51 71 6c 50 31 78 53 65 55 47 55 31 55 52 49 54 4b 49 37 4a 42 74 5f 32 34 7a 71 73 38 78 56 54 62 74 74 61 69 6b 78 79 68 4e 4d 76 50 32 64 58 4c 34 73 52 2d 49 65 61 34 54 52 76 5f 75 4a 63 59 39 50 48 36 78 54 44 59 78 43 6e 36 67 6f 7a 6b 5f 36 33 71 73 6b 39 6f 74 6f 77 4e 76 53 39 67 4a 30 76 67 4e 42 41 79 4d 51 74 54 67 42 37 32 58 34 64 43 48 31 75 6b 79 55 6d 4c 2d 30 79 65 63 2d 6b 57 77 48 51 70 5f 6c 57 Data Ascii: hzGqEIX0BnHu4lBLgetlkqxM-h_aTDWYGjVLTukYWJ9_K0hPJ3w4mX9oKrIpqz-KQryBxS1dN1Uh3IAJvSLty5g_UGgywvyPOYZWFqBuutXljAvyPeFQqlP1xSeUGU1URITKI7JBt_24zqs8xVTbttaikxyhNMvP2dXL4sR-Iea4TRv_uJcY9PH6xTDYxCn6gozk_63qsk9otowNvS9gJ0vgNBAyMQtTgB72X4dCH1ukyUmL-0yec-kWwHQp_lW
2024-03-03 23:27:07 UTC	1300	IN	Data Raw: 74 22 3a 30 2c 22 62 69 74 72 61 74 65 22 3a 30 2c 22 64 75 72 61 74 69 6f 6e 22 3a 32 32 2c 22 6d 69 6d 65 5f 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 70 70 6c 65 2e 6d 70 65 67 75 72 6c 22 2c 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 70 72 69 6d 61 72 79 22 3a 66 61 6c 73 65 2c 22 63 64 6e 22 3a 22 62 63 70 22 2c 22 66 6f 72 6d 61 74 22 3a 22 6d 33 75 38 22 2c 22 66 72 61 6d 65 72 61 74 65 22 3a 30 2c 22 63 68 61 6e 6e 65 6c 73 22 3a 30 2c 22 66 6f 72 63 65 64 22 3a 66 61 6c 73 65 2c 22 73 74 61 72 74 42 69 74 72 61 74 65 22 3a 74 72 75 65 2c 22 61 75 74 6f 5f 73 65 6c 65 63 74 22 3a 66 61 6c 73 65 2c 22 64 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 61 76 67 62 69 74 72 61 74 65 22 3a 30 7d 5d 2c 22 6c 69 63 65 Data Ascii: t":0,"bitrate":0,"duration":22,"mime_type":"application/vnd.apple.mpegurl","live":false,"is_primary":false,"cdn":"bcp","format":"m3u8","framerate":0,"channels":0,"forced":false,"startBitrate":true,"auto_select":false,"default":false,"avgbitrate":0}],"lice
2024-03-03 23:27:07 UTC	1300	IN	Data Raw: 41 59 42 41 43 4b 5f 53 54 41 52 54 22 7d 5d 7d 5d 2c 22 70 73 70 69 64 22 3a 22 31 31 39 37 38 30 33 33 36 31 22 2c 22 69 73 72 63 22 3a 22 22 2c 22 6d 6d 41 63 74 69 76 69 74 79 49 64 22 3a 22 22 2c 22 6d 65 64 69 61 6d 65 74 72 69 65 22 3a 22 22 7d 2c 22 73 74 61 74 75 73 22 3a 7b 22 63 6f 64 65 22 3a 22 31 30 30 22 2c 22 6d 73 67 22 3a 22 72 65 61 64 79 22 7d 2c 22 69 6d 61 22 3a 7b 22 76 6d 61 70 54 61 67 22 3a 22 68 74 74 70 73 3a 2f 2f 74 62 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 76 31 2f 65 76 70 2f 61 73 73 65 74 3f 62 63 69 64 3d 35 61 66 63 37 36 39 66 37 32 33 39 38 35 35 61 31 35 66 63 65 65 31 35 26 70 69 64 3d 35 61 66 63 37 35 65 61 33 61 30 34 32 39 33 64 61 64 39 66 31 61 31 66 26 73 65 63 75 72 65 3d 74 72 75 65 26 72 73 73 Data Ascii: AYBACK_START"}]}],"pspid":"1197803361","isrc":"","mmActivityId":"","mediametrie":""},"status":{"code":"100","msg":"ready"},"ima":{"vmapTag":"https://tb.video.yahoo.com/v1/evp/asset?bcid=5afc769f7239855a15fcee15&pid=5afc75ea3a04293dad9f1a1f&secure=true&rss
2024-03-03 23:27:07 UTC	1300	IN	Data Raw: 30 4e 57 55 35 4c 57 49 32 4d 44 41 74 4f 54 6b 77 5a 6a 67 79 4d 6d 4d 34 4e 6a 59 33 49 69 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 41 35 4e 54 45 31 4e 6a 49 33 4c 43 4a 70 59 58 51 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 30 4d 6a 64 39 2e 70 61 64 79 44 46 41 48 66 75 4b 4a 5a 79 37 44 34 76 69 54 55 66 59 43 48 50 79 79 45 2d 7a 30 47 6c 67 72 30 41 4a 55 54 66 55 58 52 31 37 41 4e 53 61 65 69 44 69 4f 6d 6c 55 73 73 73 77 61 70 68 4f 2d 2d 70 6e 53 61 5f 4d 69 76 62 51 51 43 5f 68 52 57 4d 64 5f 69 49 6b 6e 76 62 43 69 6f 53 39 4a 74 65 49 62 47 72 54 32 6c 38 48 36 6c 71 6d 31 36 48 7a 57 37 34 31 48 5f 4f 7a 7a 4e 39 55 62 39 74 38 32 53 6b 4c 37 51 77 66 32 58 7a 42 55 55 4f 72 41 32 34 34 62 34 6a 30 56 69 78 79 55 46 35 4d 58 6d 44 34 47 52 71 67 46 5a Data Ascii: 0NWU5LWI2MDAtOTkwZjgyMmM4NjY3IiwiZXhwIjoxNzA5NTE1NjI3LCJpYXQiOjE3MDk1MDg0Mjd9.padyDFAHfuKJZy7D4viTUfYCHPyyE-z0Glgr0AJUTfUXR17ANSaeiDiOmlUssswaphO--pnSa_MivbQQC_hRWMd_iIknvbCioS9JteIbGrT2l8H6lqm16HzW741H_OzzN9Ub9t82SkL7Qwf2XzBUUOrA244b4j0VixyUF5MXmD4GRqgFZ
2024-03-03 23:27:07 UTC	1300	IN	Data Raw: 65 20 73 68 6f 77 73 20 26 23 33 39 3b 6f 75 74 73 74 61 6e 64 69 6e 67 26 23 33 39 3b 20 73 6c 61 69 6e 20 4b 65 6e 74 75 63 6b 79 20 63 6f 6c 6c 65 67 65 20 61 74 68 6c 65 74 65 22 2c 22 67 65 6e 72 65 22 3a 22 22 2c 22 65 6d 62 65 64 5f 72 69 67 68 74 73 22 3a 66 61 6c 73 65 2c 22 64 75 72 61 74 69 6f 6e 22 3a 33 38 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 6e 65 77 73 2f 66 6f 6f 74 61 67 65 2d 73 68 6f 77 73 2d 6f 75 74 73 74 61 6e 64 69 6e 67 2d 73 6c 61 69 6e 2d 6b 65 6e 74 75 63 6b 79 2d 30 35 31 34 34 39 37 35 30 2e 68 74 6d 6c 22 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 69 79 4e 70 6c 6f 2e 6c 49 Data Ascii: e shows 'outstanding' slain Kentucky college athlete","genre":"","embed_rights":false,"duration":38,"url":"https://www.yahoo.com/news/footage-shows-outstanding-slain-kentucky-051449750.html","thumbnail":"https://s.yimg.com/uu/api/res/1.2/iyNplo.lI
2024-03-03 23:27:07 UTC	1300	IN	Data Raw: 76 5f 61 75 74 68 3d 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 59 32 4e 70 5a 43 49 36 49 6a 59 30 4d 54 55 32 4e 6a 55 34 4d 54 55 77 4d 44 45 69 4c 43 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 44 6b 31 4d 44 67 33 4d 6a 63 73 49 6d 6c 68 64 43 49 36 4d 54 63 77 4f 54 55 77 4f 44 51 79 4e 33 30 2e 41 2d 61 31 76 51 68 35 72 7a 36 67 47 6d 62 56 72 54 78 39 74 59 51 6d 51 32 49 55 43 31 68 7a 47 71 45 Data Ascii: v_auth=eyJhbGciOiJSUzI1NiJ9.eyJhY2NpZCI6IjY0MTU2NjU4MTUwMDEiLCJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg3MjcsImlhdCI6MTcwOTUwODQyN30.A-a1vQh5rz6gGmbVrTx9tYQmQ2IUC1hzGqE
2024-03-03 23:27:07 UTC	1300	IN	Data Raw: 76 53 4c 74 79 35 67 5f 55 47 67 79 77 76 79 50 4f 59 5a 57 46 71 42 75 75 74 58 6c 6a 41 76 79 50 65 46 51 71 6c 50 31 78 53 65 55 47 55 31 55 52 49 54 4b 49 37 4a 42 74 5f 32 34 7a 71 73 38 78 56 54 62 74 74 61 69 6b 78 79 68 4e 4d 76 50 32 64 58 4c 34 73 52 2d 49 65 61 34 54 52 76 5f 75 4a 63 59 39 50 48 36 78 54 44 59 78 43 6e 36 67 6f 7a 6b 5f 36 33 71 73 6b 39 6f 74 6f 77 4e 76 53 39 67 4a 30 76 67 4e 42 41 79 4d 51 74 54 67 42 37 32 58 34 64 43 48 31 75 6b 79 55 6d 4c 2d 30 79 65 63 2d 6b 57 77 48 51 70 5f 6c 57 57 51 32 6a 6b 74 30 79 64 5f 69 58 47 53 66 41 4e 6a 34 31 35 44 51 49 71 48 49 75 6c 57 37 74 71 46 6b 54 6b 49 2d 63 49 63 4d 51 68 7a 77 2d 4c 65 64 70 6d 43 74 43 51 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c Data Ascii: vSLty5g_UGgywvyPOYZWFqBuutXljAvyPeFQqlP1xSeUGU1URITKI7JBt_24zqs8xVTbttaikxyhNMvP2dXL4sR-Iea4TRv_uJcY9PH6xTDYxCn6gozk_63qsk9otowNvS9gJ0vgNBAyMQtTgB72X4dCH1ukyUmL-0yec-kWwHQp_lWWQ2jkt0yd_iXGSfANj415DQIqHIulW7tqFkTkI-cIcMQhzw-LedpmCtCQ","width":0,"height":0,
2024-03-03 23:27:07 UTC	1300	IN	Data Raw: 30 63 37 64 2d 33 39 64 33 2d 62 34 62 39 2d 31 62 31 38 30 34 61 34 37 64 31 65 26 68 65 69 67 68 74 3d 32 37 36 26 77 69 64 74 68 3d 33 36 38 26 73 69 64 3d 62 39 62 33 63 36 63 35 2d 32 63 64 37 2d 34 39 33 37 2d 38 33 39 30 2d 36 32 38 32 32 32 63 64 61 37 35 66 26 73 68 6f 77 5f 6e 61 6d 65 3d 46 6f 78 2b 4e 65 77 73 26 73 69 74 65 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 72 65 67 69 6f 6e 3d 55 53 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 73 70 61 63 65 5f 69 64 3d 31 31 39 37 38 30 33 33 36 31 26 65 78 70 65 72 69 65 6e 63 65 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 65 78 70 6e 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 65 78 70 62 3d 61 6f 6c 2d 61 61 2d 32 26 62 5f 69 64 3d 62 74 6e 6c 66 6a 64 69 75 61 31 70 62 26 6c 69 63 65 6e 73 6f 72 5f 69 64 3d 61 30 37 Data Ascii: 0c7d-39d3-b4b9-1b1804a47d1e&height=276&width=368&sid=b9b3c6c5-2cd7-4937-8390-628222cda75f&show_name=Fox+News&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-aa-2&b_id=btnlfjdiua1pb&licensor_id=a07

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.4	50788	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	1807	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1709508418330&event=video_view&video=6348145722112&video_name=Winter%20storm%20wreaks%20havoc%20across%20Sierra%20Nevadas&reference_id=3caca4ca-191c-3933-bab5-595ca1d1495a&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F61602a39-778d-4e05-9e8c-a4ffceb479f5%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjVlNTE1NDlfMGM3MGRhZWRmZGFlNjM4YzM5OWY4NTRhYTAyZmNiNzk0OTg0MjgxZDEyZGZlM2MzN2VlOGI5OWZkMzVmZGE0NA%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg2OTksImlhdCI6MTcwOTUwODM5OX0.WoLiYjlVioAeam3jzXt2QlBhnR8QkZo-e09xOoGFXv8Kqy-uzZuuB4AMF4eLtdWuImCfwjfTwUvl_PM63AAH2wdfyxhxIVELceZEWeYHJHABFFmI9gzjIzmTnZOffPSwPt4C-l-X7AsllHHR_nIS-sM6QhCtr_43quTF4f4el-IrAdNFIP-djN96fwuprFRrKxYN0W6dgX2A-B9BqIay10XBE8ciD7c28c_dtDq8HYEOhWbEH7qCqMANGazJw66h4xL2Bk6JFxwrUn2_ba2l9biMfmUM5tfUG4zUN6AJQiAgYTlsBP8miRDBQecjyn6ELmtBrJzTqLu3Z0bEu_xDxQ&seq=7_0&start_time_ms=20 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:07 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.4	50794	52.46.130.91	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	463	OUT	GET /ecm3?id=LTC55UNV-1B-13RH&ex=d-rubiconproject.com&status=ok&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A5m4uM0keE5RtYimSg3trdQ
2024-03-03 23:27:07 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Sun, 03 Mar 2024 23:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: EPMW9KYANXBRAYS3R4CA Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.4	50803	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	588	OUT	OPTIONS /playback/v1/accounts/6415665815001/videos/6348144188112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://s.yimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:07 UTC	405	IN	HTTP/1.1 200 OK Connection: close Content-Length: 66 Retry-After: 0 Content-Type: application/json Accept-Ranges: bytes Date: Sun, 03 Mar 2024 23:27:07 GMT X-Served-By: cache-lga21956-LGA X-Cache: HIT X-Cache-Hits: 0 Bcov-Request-Id: epa-7408f40d7d38, epa-7408f40d7d38-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: *
2024-03-03 23:27:07 UTC	66	IN	Data Raw: 20 5b 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 22 22 2c 20 22 65 72 72 6f 72 5f 73 75 62 63 6f 64 65 22 3a 22 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 22 41 75 74 68 6f 72 69 7a 65 64 22 20 7d 5d 20 Data Ascii: [{"error_code":"", "error_subcode":"", "message":"Authorized" }]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.4	50799	142.251.40.226	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	618	OUT	GET /pixel?google_nid=rubicon&google_hm=ZjMzODUzYjBjYzE5ZGZjYjYwMzY4ZDY3Y2QxMzMxMzkxN2RlNzc1Mg&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUntmzHBby6cYL5j5yE_6p_8ToFQmS8LML3pDoq4NVpQ62xbkJbK7YT3AuP6ix8
2024-03-03 23:27:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 03 Mar 2024 23:27:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.4	50798	34.224.160.74	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=3562a2a6-75ba-40ba-8019-c2dff6a6ce99 HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjE4ZWIwZGNmLWVkNmEtNDc2My1iZDlhLTNmMmI4YjcyNjIzMyIsImwiOjE3MDk1MDg0MjIxOTIsInQiOjF9
2024-03-03 23:27:07 UTC	353	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjE4ZWIwZGNmLWVkNmEtNDc2My1iZDlhLTNmMmI4YjcyNjIzMyIsImwiOjE3MDk1MDg0MjcyNjgsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Thu, 19 Sep 2024 23:27:07 GMT; Secure; SameSite=None
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.4	50800	69.194.240.13	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	492	OUT	GET /csync/RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%7D
2024-03-03 23:27:07 UTC	387	IN	HTTP/1.1 200 OK date: Sun, 03 Mar 2024 23:27:07 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-3c4bc8e3-ffb2-488a-8a78-eb15aa2f9706-005%22%7D; path=/; expires=Mon, 03 Mar 2025 23:27:07 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.4	50797	34.224.160.74	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F&vxii_pid=12&vxii_pid1=10067&vxii_rcid=18eb0dcf-ed6a-4763-bd9a-3f2b8b726233 HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjE4ZWIwZGNmLWVkNmEtNDc2My1iZDlhLTNmMmI4YjcyNjIzMyIsImwiOjE3MDk1MDg0MjIxOTIsInQiOjF9
2024-03-03 23:27:07 UTC	353	IN	HTTP/1.1 200 OK Date: Sun, 03 Mar 2024 23:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjE4ZWIwZGNmLWVkNmEtNDc2My1iZDlhLTNmMmI4YjcyNjIzMyIsImwiOjE3MDk1MDg0MjcyOTcsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Thu, 19 Sep 2024 23:27:07 GMT; Secure; SameSite=None
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.4	50787	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	1374	OUT	GET /cksync.php?cs=1&type=57926&ovsid=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do&pi=aol&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&tc=1 HTTP/1.1 Host: hb.yahoo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3525099948919525000V10; usp_status=1; data-zta=1783777331801413449~~1; data-son=22b49095-3dec-4c47-8a7b-1d7936dda128~~1; data-ayl=1c28c32b083001573fcc1989b44fa248~~1; data-mn=3525100008919577000V10~~1; data-mag=LTC55UNV-1B-13RH~~1; data-idx=ZeUHNEt3uSYAABBfAETINAAAAA8AAAIB~~1; data-pub=7213DBB4-8C4E-45F8-BAC8-2149D32A8B1F~~1; data-ttd=fa53b9a8-941d-43a2-a5ec-a4c7477d3f5c~~1; data-tlt=205552980141694412277~~1; data-opx=42982cb5-8018-083c-39e4-9b7751c788d8~~1; data-sov=IQveALZHlnPGc8kXQNeadO_F~~1; data-apx=2056953496763385149~~1; data-adb=ZeUHNAAAAlu_8wAh~~1; data-dtm=AAAMobTejwwu5gNlbA8iAAAAAAA~~1; data-sht=e4423880-7610-4ca4-94ee-3ab62836ffe1~~1; data-gum=u_436cb148-05c7-43b4-bf78-0e6201e28826~~1; data-mn2=3525100008919577000V10~~1; data-ylm=VqqzSffDDzfVzTkSfzaT~~1; data-ctn=006032ff9e2544ada39734a11952c619~~1; data-rhs=2bhAe7mAIABuFJa8cpT46g4idtXKvYmBmcmUfEHr_Do~~1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.4	50804	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	1124	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348146758112&time=1709508426228&seq=13&response_time_ms=1452 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:07 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.4	50805	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	1101	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=c12c5a919222efe62d0596fb&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.14.0&player=players.brightcove.com%2F6415665815001%2F8tDK7OitG_default&player_name=EVPlayer%3A1.2&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6348144188112&time=1709508426232&seq=14 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:07 UTC	463	IN	HTTP/1.1 200 OK Content-Length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Sun, 03 Mar 2024 23:27:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-03 23:27:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.4	50802	67.220.226.233	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	460	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A5m4uM0keE5RtYimSg3trdQ
2024-03-03 23:27:07 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Sun, 03 Mar 2024 23:27:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9PG5FRP1GYYGA0QXZQPJ Set-Cookie: ad-id=A5m4uM0keE5RtYimSg3trdQ; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 23:27:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 23:27:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-03 23:27:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.4	50807	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-03 23:27:07 UTC	1223	OUT	GET /playback/v1/accounts/6415665815001/videos/6348144188112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MDk1MDg3MjEsImlhdCI6MTcwOTUwODQyMX0.a9zCIz4Ibz_aw8Rz_p8hCZjjj51kpxwqG0NJ0CZdsmTZLTVR2tmZy_pw5mtA5kvCoRFletgl3nZgYZ6ncyr0KPJucSoT56zO4GewyKuJVm9I415epHhraY_6bvwwWYcTSwtOTddsSHTLXw17NTnIZgzNW7EqAdPru1Agomx2xVualmIvkxkidNYoV7s62-WEKe_z7yVn1WXx_zZjM9dF3zeq-Qgc_E7RGc5zOYAxAmqNxV1B5hoUsK9OoSAihotWr17tUEAujSS3ek9E44_wXb2y5JFUyRJ6rNG5i4Pmu3tBCDMjlDNDwnz4xg9gIkixh7yZlfk93ugyVqopNFfQpg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.3.9/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-03 23:27:07 UTC	574	IN	HTTP/1.1 200 OK Connection: close Account-Status: APPROVED Content-Type: application/json; charset=UTF-8 Policy-Key-Accountid: Powered-By: BC Powered-From: us-east-1b X-Has-Manifest-Url-Ttl: true Expires: Sun, 03 Mar 2024 23:27:31 GMT Date: Sun, 03 Mar 2024 23:27:07 GMT X-Served-By: cache-lga21957-LGA X-Cache: HIT X-Cache-Hits: 20 Bcov-Request-Id: epa-beb795b9a3fc, epa-a96e609b4c0a-cr, epa-009db779be72-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: * transfer-encoding: chunked
2024-03-03 23:27:07 UTC	5	IN	Data Raw: 36 65 33 0d 0a Data Ascii: 6e3
2024-03-03 23:27:07 UTC	1371	IN	Data Raw: 7b 22 70 6f 73 74 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 30 33 37 32 30 65 64 35 2d 31 35 64 37 2d 34 38 65 31 2d 39 37 36 34 2d 38 34 65 39 64 66 35 39 35 37 64 36 2f 6d 61 69 6e 2f 31 32 38 30 78 37 32 30 2f 32 39 73 31 38 37 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 30 39 35 33 30 31 31 39 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 30 33 37 32 30 65 64 35 2d 31 35 64 37 2d 34 38 65 31 2d 39 37 36 34 2d 38 34 65 39 64 66 35 39 35 37 64 36 2f 6d 61 69 6e 2f 31 Data Ascii: {"poster":"https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/03720ed5-15d7-48e1-9764-84e9df5957d6/main/1280x720/29s187ms/match/image.jpg?akamai_token=exp=1709530119~acl=/image/v1/jit/6415665815001/03720ed5-15d7-48e1-9764-84e9df5957d6/main/1
2024-03-03 23:27:07 UTC	392	IN	Data Raw: 2f 32 39 73 31 38 37 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 2a 7e 68 6d 61 63 3d 38 34 64 63 31 39 36 61 36 39 37 32 66 36 63 31 64 35 35 64 32 62 30 62 62 38 38 64 63 61 33 33 65 39 63 35 61 62 65 65 32 33 32 63 36 30 61 30 37 64 33 65 33 66 30 64 66 39 35 64 62 36 35 33 22 7d 5d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 74 61 67 73 22 3a 5b 5d 2c 22 63 75 65 5f 70 6f 69 6e 74 73 22 3a 5b 5d 2c 22 63 75 73 74 6f 6d 5f 66 69 65 6c 64 73 22 3a 7b 7d 2c 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 36 34 31 35 36 36 35 38 31 35 30 30 31 22 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 63 6f 64 65 63 73 22 3a 22 61 76 63 31 2c 6d 70 34 61 22 2c 22 65 78 74 5f 78 5f 76 65 72 73 69 6f 6e 22 3a 22 34 22 2c 22 73 72 63 22 3a 22 68 74 Data Ascii: /29s187ms/match/image.jpg*~hmac=84dc196a6972f6c1d55d2b0bb88dca33e9c5abee232c60a07d3e3f0df95db653"}],"description":null,"tags":[],"cue_points":[],"custom_fields":{},"account_id":"6415665815001","sources":[{"codecs":"avc1,mp4a","ext_x_version":"4","src":"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.4	50808	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.4	50816	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.4	50825	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.4	50826	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.4	50821	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.4	50813	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.4	50824	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.4	50809	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.4	50815	8.28.7.83	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.4	50818	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.4	50814	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.4	50817	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.4	50819	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.4	50830	68.67.179.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.4	50820	184.29.143.235	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.4	50827	54.145.107.21	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.4	50831	54.243.148.230	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.4	50834	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.4	50836	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.4	50835	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.4	50833	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.4	50839	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.4	50840	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.4	50841	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.4	50843	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.4	50844	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.4	50846	142.250.80.100	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.4	50849	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.4	50850	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.4	50847	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.4	50851	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.4	50852	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.4	50853	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.4	50855	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.4	50854	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.4	50856	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.4	50859	162.248.18.37	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.4	50860	52.46.130.91	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.4	50862	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.4	50865	204.2.226.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.4	50863	18.173.219.51	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.4	50861	142.251.40.226	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.4	50864	18.205.47.0	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.4	50870	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.4	50874	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.4	50867	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.4	50871	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.4	50873	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.4	50869	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.4	50868	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.4	50883	142.251.40.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.4	50878	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.4	50872	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.4	50881	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.4	50885	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.4	50876	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.4	50887	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.4	50877	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.4	50882	142.251.40.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.4	50898	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.4	50890	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.4	50886	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.4	50901	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.4	50888	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.4	50900	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.4	50889	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.4	50893	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.4	50903	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.4	50899	3.33.220.150	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.4	50896	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.4	50902	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.4	50906	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.4	50908	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.4	50909	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.4	50907	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.4	50911	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.4	50912	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.4	50910	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.4	50914	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.4	50915	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.4	50913	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.4	50916	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.4	50919	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.4	50920	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.4	50921	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.4	50922	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.4	50923	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.4	50924	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.4	50926	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.4	50927	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.4	50928	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.4	50925	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.4	50929	52.2.7.46	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.4	50930	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.4	50931	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.4	50932	142.251.40.226	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.4	50933	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.4	50935	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.4	50936	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.4	50937	67.195.204.151	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.4	50934	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.4	50938	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.4	50943	52.71.97.125	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.4	50941	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.4	50939	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.4	50940	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.4	50942	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.4	50951	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.4	50950	54.144.200.164	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.4	50945	185.184.8.90	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.4	50948	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.4	50946	169.197.150.7	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.4	50949	67.195.204.151	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.4	50954	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.4	50953	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.4	50952	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.4	50955	67.195.204.151	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.4	50956	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.4	50958	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.4	50959	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.4	50957	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.4	50961	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.4	50962	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.4	50964	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.4	50963	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.4	50967	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.4	50965	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.4	50966	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.4	50971	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.4	50975	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.4	50969	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.4	50974	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.4	50976	142.250.176.194	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.4	50972	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.4	50968	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.4	50981	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.4	50978	67.195.204.151	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.4	50982	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.4	50970	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.4	50973	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.4	50977	142.250.176.194	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.4	50979	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.4	50980	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.4	50984	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.4	50986	23.47.168.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.4	50988	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.4	50985	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.4	50987	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.4	50991	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.4	50993	76.13.32.141	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.4	50983	52.7.155.131	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.4	50992	151.101.2.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.4	50989	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.4	50990	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.4	50994	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.4	50997	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.4	51000	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.4	51004	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.4	51001	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.4	51002	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.4	51003	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.4	50999	142.251.40.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.4	51006	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.4	51005	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.4	51007	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.4	51009	142.251.40.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.4	50996	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.4	51010	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.4	51008	142.251.40.230	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.4	51012	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.4	51015	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.4	51014	52.2.7.46	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.4	51016	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.4	51013	151.101.66.27	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.4	51019	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.4	51018	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.4	51017	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.4	51022	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.4	51020	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.4	51021	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.4	51023	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.4	51024	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.4	51025	68.67.179.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.4	51026	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.4	51027	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.4	51028	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.4	51029	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.4	51030	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.4	51031	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.4	51032	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.4	51033	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.4	51035	35.244.232.184	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.4	51034	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.4	51040	67.195.204.151	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.4	51042	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.4	51041	52.71.97.125	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.4	51036	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.4	51038	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.4	51037	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.4	51039	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.4	51043	142.250.72.102	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.4	51045	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.4	51047	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.4	51048	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.4	51053	142.250.176.194	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.4	51049	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.4	51054	67.195.204.151	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.4	51052	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.4	51050	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.4	51051	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.4	51056	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.4	51055	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.4	51057	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.4	51058	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.4	51059	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.4	51063	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.4	51062	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.4	51060	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.4	51061	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.4	51064	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.4	51065	13.35.90.16	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.4	51070	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.4	51066	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.4	51067	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.4	51068	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.4	51069	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.4	51071	142.250.176.194	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.4	51075	34.36.216.150	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.4	51076	67.195.204.151	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.4	51072	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.4	51074	142.251.40.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.4	51073	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.4	51077	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.4	51078	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.4	51079	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.4	51080	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.4	51081	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.4	51082	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.4	51083	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.4	51084	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.4	51085	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.4	51086	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.4	51087	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.4	51096	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.4	51091	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.4	51094	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.4	51095	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.4	51092	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.4	51093	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.4	51090	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.4	51089	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.4	51105	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.4	51106	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.4	51100	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.4	51097	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.4	51088	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.4	51098	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.4	51099	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.4	51101	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.4	51104	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.4	51107	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.4	51103	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.4	51102	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.4	51109	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.4	51110	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.4	51108	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.4	51111	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.4	51112	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.4	51113	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.4	51114	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.4	51115	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.4	51117	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.4	51121	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.4	51120	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.4	51119	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.4	51118	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.4	51116	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.4	51122	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.4	51124	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.4	51123	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.4	51125	67.195.204.151	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.4	51126	52.0.10.132	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.4	51127	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.4	51128	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.4	51129	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.4	51132	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.4	51130	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.4	51131	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.4	51133	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.4	51134	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.4	51135	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.4	51136	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.4	51137	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.4	51138	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.4	51139	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.4	51140	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.4	51141	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.4	51147	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.4	51148	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.4	51143	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.4	51144	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.4	51146	142.251.40.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.4	51149	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.4	51145	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.4	51152	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.4	51150	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.4	51151	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.4	51158	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.4	51153	34.111.113.62	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.4	51157	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.4	51156	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.4	51159	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.4	51160	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.4	51166	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.4	51161	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.4	51162	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.4	51163	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.4	51154	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.4	51155	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.4	51165	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.4	51175	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.4	51174	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.4	51172	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.4	51169	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.4	51168	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.4	51167	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.4	51171	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.4	51170	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.4	51173	52.216.50.121	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.4	51178	76.13.32.146	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.4	51181	142.250.80.100	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.4	51180	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.4	51182	108.138.125.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.4	51184	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.4	51185	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.4	51183	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.4	51189	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.4	51188	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.4	51187	54.231.163.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.4	51186	76.13.32.146	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.4	51190	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.4	51191	23.47.168.66	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.4	51193	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.4	51195	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.4	51194	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.4	51197	142.250.176.194	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.4	51196	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.4	51192	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.4	51201	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.4	51198	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.4	51200	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.4	51199	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.4	51202	142.251.32.102	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.4	51206	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.4	51207	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.4	51204	142.251.40.230	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.4	51203	142.251.40.230	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.4	51208	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.4	51218	104.36.115.111	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.4	51205	142.250.80.102	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.4	51210	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.4	51209	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.4	51216	151.101.129.44	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.4	51214	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.4	51217	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.4	51212	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.4	51211	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.4	51213	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.4	51215	34.120.63.153	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.4	51219	34.111.85.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.4	51226	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.4	51221	142.250.176.194	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.4	51220	142.250.176.194	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.4	51223	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.4	51231	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.4	51228	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.4	51224	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.4	51225	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.4	51229	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.4	51233	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.4	51230	142.251.32.102	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.4	51232	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.4	51227	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.4	51234	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.4	51237	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.4	51238	142.250.80.102	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.4	51236	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.4	51235	63.140.39.117	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.4	51239	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.4	51240	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.4	51241	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.4	51246	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.4	51242	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.4	51245	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.4	51244	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.4	51243	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.4	51247	142.250.81.226	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.4	51248	23.20.189.8	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.4	51250	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.4	51249	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.4	51254	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.4	51252	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.4	51258	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.4	51253	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.4	51257	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.4	51251	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.4	51261	142.251.40.230	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.4	51260	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.4	51256	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.4	51263	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.4	51259	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.4	51262	142.251.40.166	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.4	51255	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.4	51267	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.4	51273	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.4	51266	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.4	51272	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.4	51271	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.4	51268	142.251.35.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.4	51269	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.4	51274	142.250.81.226	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.4	51275	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.4	51276	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.4	51270	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.4	51278	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.4	51280	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.4	51279	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.4	51281	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.4	51282	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.4	51277	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.4	51283	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.4	51284	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.4	51287	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.4	51286	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.4	51288	142.250.72.102	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.4	51290	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.4	51289	142.250.72.102	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.4	51291	104.18.36.155	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.4	51305	34.111.85.214	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.4	51294	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.4	51297	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.4	51302	142.251.40.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.4	51296	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.4	51299	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.4	51301	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.4	51293	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.4	51303	142.251.40.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.4	51295	3.230.217.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.4	51298	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.4	51292	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.4	51307	34.120.63.153	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.4	51304	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.4	51300	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.4	51310	63.140.39.130	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.4	51313	54.205.210.54	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.4	51316	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.4	51312	142.251.35.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.4	51311	142.251.35.162	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.4	51314	142.250.72.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.4	51317	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.4	51318	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.4	51315	192.229.211.36	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.4	51325	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.4	51319	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.4	51321	3.230.217.116	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.4	51322	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.4	51326	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.4	51320	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.4	51330	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.4	51323	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.4	51327	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.4	51332	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.4	51333	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.4	51324	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.4	51331	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.4	51329	104.102.251.136	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.4	51328	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.4	51334	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.4	51336	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.4	51339	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.4	51338	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.4	51337	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.4	51340	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.4	51344	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.4	51342	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.4	51343	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.4	51335	142.251.40.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.4	51341	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.4	51347	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.4	51345	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.4	51346	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.4	51349	23.40.179.62	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.4	51350	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.4	51351	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.4	51348	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.4	51353	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.4	51355	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.4	51357	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.4	51361	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.4	51359	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.4	51354	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.4	51356	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.4	51358	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.4	51360	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.4	51352	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.4	51362	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.4	51367	18.238.49.52	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.4	51364	142.250.72.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.4	51365	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.4	51366	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.4	51363	34.225.231.221	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.4	51369	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.4	51368	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.4	51370	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.4	51374	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.4	51371	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.4	51375	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.4	51376	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.4	51377	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.4	51379	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.4	51372	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.4	51373	23.40.179.59	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.4	51378	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.4	51380	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.4	51381	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.4	51382	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.4	51383	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.4	51384	23.40.179.68	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.4	51386	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.4	51385	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.4	51387	52.4.33.45	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.4	51391	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.4	51392	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.4	51393	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.4	51395	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.4	51396	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.4	51397	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.4	51399	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.4	51400	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.4	51401	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.4	51404	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.4	51398	162.247.243.29	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.4	51413	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.4	51405	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.4	51408	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.4	51412	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.4	51409	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.4	51406	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.4	51407	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.4	51410	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.4	51411	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.4	51415	108.138.128.93	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.4	51414	108.138.128.93	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.4	51416	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.4	51417	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.4	51418	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.4	51420	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.4	51419	18.238.49.99	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.4	51421	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.4	51423	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.4	51424	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.4	51425	108.138.129.160	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.4	51426	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.4	51427	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.4	51430	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.4	51431	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.4	51428	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.4	51429	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.4	51433	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.4	51432	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.4	51436	108.138.128.93	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.4	51434	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.4	51437	108.138.128.93	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.4	51438	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.4	51435	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.4	51439	18.173.132.105	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.4	51440	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.4	51441	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.4	51442	69.147.82.60	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.4	51443	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.4	51444	18.173.132.105	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.4	51446	18.238.49.124	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.4	51445	18.238.49.124	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.4	51447	142.251.40.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.4	51448	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.4	51449	18.173.132.105	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.4	51451	18.173.132.105	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.4	51450	142.250.72.98	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.4	51453	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.4	51454	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.4	51455	18.173.132.105	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.4	51456	18.173.132.129	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.4	51458	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.4	51459	66.218.87.15	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1499	192.168.2.4	51465	108.138.128.93	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1500	192.168.2.4	51460	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1501	192.168.2.4	51461	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1502	192.168.2.4	51464	108.138.128.93	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1503	192.168.2.4	51463	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1504	192.168.2.4	51462	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.4	51469	69.147.82.61	443	2260	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1506	192.168.2.4	51466	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1507	192.168.2.4	51470	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1508	192.168.2.4	51467	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1509	192.168.2.4	51471	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1510	192.168.2.4	51473	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1511	192.168.2.4	51472	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1512	192.168.2.4	51474	54.230.163.99	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1513	192.168.2.4	51475	54.230.163.99	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1514	192.168.2.4	51477	108.138.128.93	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1515	192.168.2.4	51478	18.238.49.124	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1516	192.168.2.4	51468	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1517	192.168.2.4	51482	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1518	192.168.2.4	51479	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1519	192.168.2.4	51476	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1520	192.168.2.4	51480	108.138.128.93	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1521	192.168.2.4	51481	18.238.49.124	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1522	192.168.2.4	51483	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1523	192.168.2.4	51484	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1524	192.168.2.4	51485	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1525	192.168.2.4	51486	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1526	192.168.2.4	51487	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1527	192.168.2.4	51488	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1528	192.168.2.4	51489	162.247.243.29	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1529	192.168.2.4	51490	54.230.163.99	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1530	192.168.2.4	51491	18.238.49.124	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1531	192.168.2.4	51492	54.230.163.99	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1532	192.168.2.4	51493	18.238.49.124	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1533	192.168.2.4	51494	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1534	192.168.2.4	51495	54.230.163.99	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1535	192.168.2.4	51496	54.230.163.99	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1536	192.168.2.4	51497	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1537	192.168.2.4	51498	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1538	192.168.2.4	51499	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1539	192.168.2.4	51500	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1540	192.168.2.4	51501	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1541	192.168.2.4	51502	162.247.243.29	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1542	192.168.2.4	51504	54.230.163.99	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1543	192.168.2.4	51506	54.230.163.99	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1544	192.168.2.4	51503	142.251.40.230	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1545	192.168.2.4	51507	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1546	192.168.2.4	51505	142.251.40.230	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1547	192.168.2.4	51508	142.251.40.230	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1548	192.168.2.4	51509	142.251.40.230	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1549	192.168.2.4	51510	23.40.179.25	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1550	192.168.2.4	51511	142.250.72.102	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1551	192.168.2.4	51513	142.250.72.102	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1552	192.168.2.4	51512	23.40.179.68	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1553	192.168.2.4	51514	142.251.40.166	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1554	192.168.2.4	51516	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1555	192.168.2.4	51517	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1556	192.168.2.4	51518	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1557	192.168.2.4	51519	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1558	192.168.2.4	51520	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1559	192.168.2.4	51521	108.138.128.93	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1560	192.168.2.4	51522	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1561	192.168.2.4	51523	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1562	192.168.2.4	51524	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1563	192.168.2.4	51525	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1564	192.168.2.4	51526	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1565	192.168.2.4	51527	66.218.87.15	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1566	192.168.2.4	51528	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1567	192.168.2.4	51529	108.138.128.93	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1568	192.168.2.4	51530	69.147.82.61	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1569	192.168.2.4	51531	18.238.49.124	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1570	192.168.2.4	51533	18.238.49.124	443

Timestamp	Bytes transferred	Direction	Data

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4136, Parent PID: 3328

General

Target ID:	0
Start time:	00:26:09
Start date:	04/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2260, Parent PID: 4136

General

Target ID:	2
Start time:	00:26:11
Start date:	04/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6364, Parent PID: 3328

General

Target ID:	3
Start time:	00:26:14
Start date:	04/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aolserv.pages.dev/robots.txtIP:
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7440, Parent PID: 4136

General

Target ID:	7
Start time:	00:26:53
Start date:	04/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8684 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3652, Parent PID: 4136

General

Target ID:	9
Start time:	00:27:36
Start date:	04/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 --field-trial-handle=2016,i,5451146306765102826,15229107624743901706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly